Edit tour

Linux Analysis Report
armv6l.elf

Overview

General Information

Sample name:	armv6l.elf
Analysis ID:	1583620
MD5:	8a1c104636a7b1325a090da16a3e57bd
SHA1:	334888d0273edeb481631b10c3bc3925a1a7f06c
SHA256:	491199e54b5961089b6930b07aff2e7c769b4d4120510d82b4c1a0bfdb92056b
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	72
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Sample contains only a LOAD segment without any section mappings

Suricata IDS alerts with low severity for network traffic

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583620
Start date and time:	2025-01-03 08:09:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	armv6l.elf
Detection:	MAL
Classification:	mal72.spre.troj.evad.linELF@0/1@2/0

Warnings

VT rate limit hit for: http://212.64.199.97/Simps/mips

Runtime Messages

Command:	/tmp/armv6l.elf
PID:	5536
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Simps Botnet ;) Infected By Simps Botnet ;)
Standard Error:

Process Tree

system is lnxubuntu20

armv6l.elf (PID: 5536, Parent: 5456, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/armv6l.elf

armv6l.elf New Fork (PID: 5538, Parent: 5536)

armv6l.elf New Fork (PID: 5540, Parent: 5538)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5536.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5536.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: armv6l.elf PID: 5536	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: armv6l.elf PID: 5538	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 1 entries

Suricata Signatures

ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-03T08:09:56.493409+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46578	212.64.199.97	65525	TCP
2025-01-03T08:09:58.293786+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46580	212.64.199.97	65525	TCP
2025-01-03T08:10:00.086438+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46582	212.64.199.97	65525	TCP
2025-01-03T08:10:01.864907+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46584	212.64.199.97	65525	TCP
2025-01-03T08:10:03.660771+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46586	212.64.199.97	65525	TCP
2025-01-03T08:10:05.443179+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46588	212.64.199.97	65525	TCP
2025-01-03T08:10:07.223395+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46590	212.64.199.97	65525	TCP
2025-01-03T08:10:09.127175+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46592	212.64.199.97	65525	TCP
2025-01-03T08:10:10.894090+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46594	212.64.199.97	65525	TCP
2025-01-03T08:10:12.676434+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46596	212.64.199.97	65525	TCP
2025-01-03T08:10:14.460421+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46598	212.64.199.97	65525	TCP
2025-01-03T08:10:16.242548+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46600	212.64.199.97	65525	TCP
2025-01-03T08:10:18.026128+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46602	212.64.199.97	65525	TCP
2025-01-03T08:10:19.840125+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46604	212.64.199.97	65525	TCP
2025-01-03T08:10:21.618120+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46606	212.64.199.97	65525	TCP
2025-01-03T08:10:23.419666+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46608	212.64.199.97	65525	TCP
2025-01-03T08:10:25.195649+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46610	212.64.199.97	65525	TCP
2025-01-03T08:10:26.980945+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46612	212.64.199.97	65525	TCP
2025-01-03T08:10:28.773439+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46614	212.64.199.97	65525	TCP
2025-01-03T08:10:30.575893+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46616	212.64.199.97	65525	TCP
2025-01-03T08:10:32.369278+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46618	212.64.199.97	65525	TCP
2025-01-03T08:10:34.168623+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46620	212.64.199.97	65525	TCP
2025-01-03T08:10:35.946043+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46622	212.64.199.97	65525	TCP
2025-01-03T08:10:37.749321+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46624	212.64.199.97	65525	TCP
2025-01-03T08:10:39.543715+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46626	212.64.199.97	65525	TCP
2025-01-03T08:10:41.349134+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46628	212.64.199.97	65525	TCP
2025-01-03T08:10:43.156026+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46630	212.64.199.97	65525	TCP
2025-01-03T08:10:45.636274+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46632	212.64.199.97	65525	TCP
2025-01-03T08:10:47.430726+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46634	212.64.199.97	65525	TCP
2025-01-03T08:10:49.190699+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46636	212.64.199.97	65525	TCP
2025-01-03T08:10:50.962042+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46638	212.64.199.97	65525	TCP
2025-01-03T08:10:52.769846+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46640	212.64.199.97	65525	TCP
2025-01-03T08:10:54.533913+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46642	212.64.199.97	65525	TCP
2025-01-03T08:10:56.320612+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46644	212.64.199.97	65525	TCP
2025-01-03T08:10:58.098076+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46646	212.64.199.97	65525	TCP
2025-01-03T08:10:59.887472+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46648	212.64.199.97	65525	TCP
2025-01-03T08:11:01.659052+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46650	212.64.199.97	65525	TCP
2025-01-03T08:11:03.449311+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46652	212.64.199.97	65525	TCP
2025-01-03T08:11:05.262522+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46654	212.64.199.97	65525	TCP
2025-01-03T08:11:07.057692+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46656	212.64.199.97	65525	TCP
2025-01-03T08:11:08.838600+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46658	212.64.199.97	65525	TCP
2025-01-03T08:11:10.617024+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46660	212.64.199.97	65525	TCP
2025-01-03T08:11:12.408468+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46662	212.64.199.97	65525	TCP
2025-01-03T08:11:14.215926+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46664	212.64.199.97	65525	TCP
2025-01-03T08:11:15.987245+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46666	212.64.199.97	65525	TCP
2025-01-03T08:11:17.781892+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46668	212.64.199.97	65525	TCP
2025-01-03T08:11:19.550841+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46670	212.64.199.97	65525	TCP
2025-01-03T08:11:21.341382+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46672	212.64.199.97	65525	TCP
2025-01-03T08:11:23.150698+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46674	212.64.199.97	65525	TCP
2025-01-03T08:11:24.955447+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46676	212.64.199.97	65525	TCP
2025-01-03T08:11:26.722977+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46678	212.64.199.97	65525	TCP
2025-01-03T08:11:28.748423+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46680	212.64.199.97	65525	TCP
2025-01-03T08:11:30.532580+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46682	212.64.199.97	65525	TCP
2025-01-03T08:11:32.301294+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46684	212.64.199.97	65525	TCP
2025-01-03T08:11:34.068025+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46686	212.64.199.97	65525	TCP
2025-01-03T08:11:35.848385+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46688	212.64.199.97	65525	TCP
2025-01-03T08:11:37.613392+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46690	212.64.199.97	65525	TCP
2025-01-03T08:11:39.379320+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46692	212.64.199.97	65525	TCP
2025-01-03T08:11:41.144546+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46694	212.64.199.97	65525	TCP
2025-01-03T08:11:42.935113+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46696	212.64.199.97	65525	TCP
2025-01-03T08:11:44.714453+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46698	212.64.199.97	65525	TCP
2025-01-03T08:11:46.487825+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46700	212.64.199.97	65525	TCP
2025-01-03T08:11:48.287455+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46702	212.64.199.97	65525	TCP
2025-01-03T08:11:50.069737+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46704	212.64.199.97	65525	TCP
2025-01-03T08:11:51.846543+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46706	212.64.199.97	65525	TCP
2025-01-03T08:11:53.630831+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46708	212.64.199.97	65525	TCP
2025-01-03T08:11:55.417914+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46710	212.64.199.97	65525	TCP
2025-01-03T08:11:57.407922+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46712	212.64.199.97	65525	TCP
2025-01-03T08:11:59.175792+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46714	212.64.199.97	65525	TCP
2025-01-03T08:12:00.961270+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46716	212.64.199.97	65525	TCP
2025-01-03T08:12:02.742754+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46718	212.64.199.97	65525	TCP
2025-01-03T08:12:04.527191+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46720	212.64.199.97	65525	TCP
2025-01-03T08:12:06.306439+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46722	212.64.199.97	65525	TCP
2025-01-03T08:12:08.087938+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46724	212.64.199.97	65525	TCP
2025-01-03T08:12:09.869666+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46726	212.64.199.97	65525	TCP
2025-01-03T08:12:11.651420+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46728	212.64.199.97	65525	TCP
2025-01-03T08:12:13.435052+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46730	212.64.199.97	65525	TCP
2025-01-03T08:12:15.232692+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46732	212.64.199.97	65525	TCP
2025-01-03T08:12:17.053367+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46734	212.64.199.97	65525	TCP
2025-01-03T08:12:18.832641+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46736	212.64.199.97	65525	TCP
2025-01-03T08:12:20.635342+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46738	212.64.199.97	65525	TCP
2025-01-03T08:12:22.416573+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46740	212.64.199.97	65525	TCP
2025-01-03T08:12:24.191874+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46742	212.64.199.97	65525	TCP
2025-01-03T08:12:25.983990+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46744	212.64.199.97	65525	TCP
2025-01-03T08:12:27.760552+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46746	212.64.199.97	65525	TCP
2025-01-03T08:12:29.541955+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46748	212.64.199.97	65525	TCP
2025-01-03T08:12:31.732491+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46750	212.64.199.97	65525	TCP
2025-01-03T08:12:33.504906+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46752	212.64.199.97	65525	TCP
2025-01-03T08:12:35.329204+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46754	212.64.199.97	65525	TCP
2025-01-03T08:12:37.154033+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46756	212.64.199.97	65525	TCP
2025-01-03T08:12:38.926365+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46758	212.64.199.97	65525	TCP
2025-01-03T08:12:40.716440+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46760	212.64.199.97	65525	TCP
2025-01-03T08:12:42.529044+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46762	212.64.199.97	65525	TCP
2025-01-03T08:12:44.325974+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46764	212.64.199.97	65525	TCP
2025-01-03T08:12:46.123443+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46766	212.64.199.97	65525	TCP
2025-01-03T08:12:47.917084+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46768	212.64.199.97	65525	TCP
2025-01-03T08:12:49.698172+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46770	212.64.199.97	65525	TCP
2025-01-03T08:12:51.483333+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46772	212.64.199.97	65525	TCP
2025-01-03T08:12:53.270522+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46774	212.64.199.97	65525	TCP
2025-01-03T08:12:55.075407+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46776	212.64.199.97	65525	TCP
2025-01-03T08:12:56.888494+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46778	212.64.199.97	65525	TCP
2025-01-03T08:12:58.663224+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46780	212.64.199.97	65525	TCP
2025-01-03T08:13:00.452320+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46782	212.64.199.97	65525	TCP
2025-01-03T08:13:02.251610+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46784	212.64.199.97	65525	TCP
2025-01-03T08:13:04.021086+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46786	212.64.199.97	65525	TCP
2025-01-03T08:13:05.791892+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46788	212.64.199.97	65525	TCP
2025-01-03T08:13:07.583833+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46790	212.64.199.97	65525	TCP
2025-01-03T08:13:09.358050+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46792	212.64.199.97	65525	TCP
2025-01-03T08:13:11.151882+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46794	212.64.199.97	65525	TCP
2025-01-03T08:13:12.931425+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46796	212.64.199.97	65525	TCP
2025-01-03T08:13:14.693244+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46798	212.64.199.97	65525	TCP
2025-01-03T08:13:16.487013+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46800	212.64.199.97	65525	TCP
2025-01-03T08:13:18.271759+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46802	212.64.199.97	65525	TCP
2025-01-03T08:13:20.053653+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46804	212.64.199.97	65525	TCP
2025-01-03T08:13:21.839071+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46806	212.64.199.97	65525	TCP
2025-01-03T08:13:23.624367+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46808	212.64.199.97	65525	TCP
2025-01-03T08:13:25.421644+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46810	212.64.199.97	65525	TCP
2025-01-03T08:13:27.202183+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46812	212.64.199.97	65525	TCP
2025-01-03T08:13:28.999804+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46814	212.64.199.97	65525	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: armv6l.elf	Virustotal: Detection: 39%			Perma Link
Source: armv6l.elf	ReversingLabs: Detection: 31%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/armv6l.elf (PID: 5536)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.14:46578 -> 212.64.199.97:65525

Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46578 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46666 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46680 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46592 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46596 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46608 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46584 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46774 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46616 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46580 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46658 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46602 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46586 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46788 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46588 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46612 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46670 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46624 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46716 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46644 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46808 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46632 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46650 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46610 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46652 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46682 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46704 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46660 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46786 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46594 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46726 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46758 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46806 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46740 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46662 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46770 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46678 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46640 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46700 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46654 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46712 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46772 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46754 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46744 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46750 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46638 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46620 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46776 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46790 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46784 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46800 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46686 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46796 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46600 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46778 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46646 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46782 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46656 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46614 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46674 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46792 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46696 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46810 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46694 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46734 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46814 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46708 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46598 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46582 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46590 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46684 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46710 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46692 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46628 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46768 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46642 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46634 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46732 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46804 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46780 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46812 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46664 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46722 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46714 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46730 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46746 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46606 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46766 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46668 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46604 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46802 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46648 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46672 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46688 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46622 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46698 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46702 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46690 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46756 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46794 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46742 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46718 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46706 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46762 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46760 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46630 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46626 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46798 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46728 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46764 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46724 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46618 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46636 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46676 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46748 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46752 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46720 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46738 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46736 -> 212.64.199.97:65525

Source: global traffic

TCP traffic: 192.168.2.14:46540 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: armv6l.elf, 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	String found in binary or memory: http://212.64.199.97/Simps/mips
Source: armv6l.elf, 5536.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp, armv6l.elf, 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: armv6l.elf, 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: armv6l.elf, 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: armv6l.elf	String found in binary or memory: http://upx.sf.net

Source: unknown

Network traffic detected: HTTP traffic on port 46540 -> 443

Source: LOAD without section mappings

Program segment: 0x8000

Source: classification engine

Classification label: mal72.spre.troj.evad.linELF@0/1@2/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/armv6l.elf (PID: 5536)

Log file created: /tmp/Infected.log

Jump to dropped file

Source: armv6l.elf

Submission file: segment LOAD with 7.9734 entropy (max. 8.0)

Source: /tmp/armv6l.elf (PID: 5536)

Queries kernel information via 'uname':

Jump to behavior

Source: armv6l.elf, 5536.1.0000562734629000.00005627347f7000.rw-.sdmp, armv6l.elf, 5538.1.0000562734629000.00005627347f7000.rw-.sdmp	Binary or memory string: d4'V!/etc/qemu-binfmt/arm
Source: armv6l.elf, 5536.1.0000562734629000.00005627347f7000.rw-.sdmp, armv6l.elf, 5538.1.0000562734629000.00005627347f7000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: armv6l.elf, 5536.1.00007ffdbfd58000.00007ffdbfd79000.rw-.sdmp, armv6l.elf, 5538.1.00007ffdbfd58000.00007ffdbfd79000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: armv6l.elf, 5536.1.00007ffdbfd58000.00007ffdbfd79000.rw-.sdmp, armv6l.elf, 5538.1.00007ffdbfd58000.00007ffdbfd79000.rw-.sdmp	Binary or memory string: ~*0x86_64/usr/bin/qemu-arm/tmp/armv6l.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/armv6l.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5536.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv6l.elf PID: 5536, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv6l.elf PID: 5538, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5536.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv6l.elf PID: 5536, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv6l.elf PID: 5538, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
armv6l.elf	40%	Virustotal		Browse
armv6l.elf	32%	ReversingLabs	Linux.Trojan.Gafgyt

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://212.64.199.97/Simps/mips	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	armv6l.elf	false		high
http://212.64.199.97/Simps/mips	armv6l.elf, 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	false	Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/soap/encoding/	armv6l.elf, 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	false		high
http://purenetworks.com/HNAP1/	armv6l.elf, 5536.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp, armv6l.elf, 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	false		high
http://schemas.xmlsoap.org/soap/envelope/	armv6l.elf, 5538.1.00007f5b0c017000.00007f5b0c037000.r-x.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.125.190.26	unknown	United Kingdom		41231	CANONICAL-ASGB	false
212.64.199.97	unknown	Turkey		12599	ATLAS-ASTR	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.125.190.26	arm5.elf	Get hash	malicious	Unknown	Browse
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse
	wind.sh4.elf	Get hash	malicious	Mirai	Browse
	wind.arc.elf	Get hash	malicious	Mirai	Browse
	DEMONS.arm5.elf	Get hash	malicious	Unknown	Browse
	DEMONS.arm7.elf	Get hash	malicious	Mirai	Browse
	powerpc.elf	Get hash	malicious	Unknown	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	bot.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	earm5.elf	Get hash	malicious	Unknown	Browse
212.64.199.97	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	armv4l.elf	Get hash	malicious	Mirai	Browse
	mipsel.elf	Get hash	malicious	Mirai	Browse
	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	powerpc.elf	Get hash	malicious	Mirai	Browse
	i686.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	armv4l.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	mipsel.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	i686.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	X86_64.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	4.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	wind.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	powerpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	x86_64.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	141.11.33.73-boatnet.arm-2025-01-03T05_39_17.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
ATLAS-ASTR	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.64.199.97
	armv4l.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	mipsel.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.64.199.97
	powerpc.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	i686.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	doc_82555.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	commenti_19265309.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	DETAILS-0203.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	Message-0203.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/Infected.log

Download File

Process:	/tmp/armv6l.elf
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	149
Entropy (8bit):	5.041576920829991
Encrypted:	false
SSDEEP:	3:xRbQRAZvbFhSZWFBAK8dAuFUJ4gnicMMIVDt8TovZ2XCRA5Adcovn:xR0qvbFhSZW8K8djmHicNoDt8kBSKBcy
MD5:	68CEF17158AB7C78815F4829CA182DF0
SHA1:	1964BD86E351AE38341975A5A35C2A606093220E
SHA-256:	8CB5D165724D5990B6C6161D24AD22E55328C2CF72E46B58104EFE0CC07E82E3
SHA-512:	C39117FAEEB6103E531FDBDD517BB259A1E21E2C0F67B203D8AA8787F5D11F3CC090BCE9E951146C7CB163E1F36F15C3AEAF82CCE953DF715CD59BE7846206FA
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	Thank You For Your Services...This Device Has successfully Been Infected..With Malware By Simps Botnet ;)..\| instagram: @ur0a_ \| Discord: UR0A#2199..

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (GNU/Linux), statically linked, no section header
Entropy (8bit):	7.988079886531935
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	armv6l.elf
File size:	74'496 bytes
MD5:	8a1c104636a7b1325a090da16a3e57bd
SHA1:	334888d0273edeb481631b10c3bc3925a1a7f06c
SHA256:	491199e54b5961089b6930b07aff2e7c769b4d4120510d82b4c1a0bfdb92056b
SHA512:	476be95111953713221a8174f96055bddfc59f74d8ad50e6258fab931626986ddad4966bb03f594bbc03406a3dc64e9e4a9d6c84f919313f67a6a04ab9693148
SSDEEP:	1536:j0j0z9GRiQRZ+v1q1UBAMK3i4igLlhIQWlVLQchKTc8+4tbw:Q4fGZO1qqki4igL7SXhsc8ti
TLSH:	CF7313C07E372414D797A839D6B78E781A34EC5B122624235BC19638F532E97F9F60D1
File Content Preview:	.ELF..............(.....`...4...........4. ...(.....................M...M...............0n..0...0...................Q.td............................>. NUPX!...................._..........?.E.h;....#..$..........~...q\|..@.H....tv...=...2..NdcU...&...yY....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0x11a60
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8000	0x8000	0xac4d	0xac4d	7.9734	0x5	R E	0x8000
LOAD	0x6e30	0x2ee30	0x2ee30	0x0	0x0	0.0000	0x6	RW	0x8000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-03T08:09:56.493409+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46578	212.64.199.97	65525	TCP
2025-01-03T08:09:58.293786+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46580	212.64.199.97	65525	TCP
2025-01-03T08:10:00.086438+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46582	212.64.199.97	65525	TCP
2025-01-03T08:10:01.864907+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46584	212.64.199.97	65525	TCP
2025-01-03T08:10:03.660771+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46586	212.64.199.97	65525	TCP
2025-01-03T08:10:05.443179+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46588	212.64.199.97	65525	TCP
2025-01-03T08:10:07.223395+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46590	212.64.199.97	65525	TCP
2025-01-03T08:10:09.127175+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46592	212.64.199.97	65525	TCP
2025-01-03T08:10:10.894090+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46594	212.64.199.97	65525	TCP
2025-01-03T08:10:12.676434+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46596	212.64.199.97	65525	TCP
2025-01-03T08:10:14.460421+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46598	212.64.199.97	65525	TCP
2025-01-03T08:10:16.242548+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46600	212.64.199.97	65525	TCP
2025-01-03T08:10:18.026128+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46602	212.64.199.97	65525	TCP
2025-01-03T08:10:19.840125+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46604	212.64.199.97	65525	TCP
2025-01-03T08:10:21.618120+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46606	212.64.199.97	65525	TCP
2025-01-03T08:10:23.419666+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46608	212.64.199.97	65525	TCP
2025-01-03T08:10:25.195649+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46610	212.64.199.97	65525	TCP
2025-01-03T08:10:26.980945+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46612	212.64.199.97	65525	TCP
2025-01-03T08:10:28.773439+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46614	212.64.199.97	65525	TCP
2025-01-03T08:10:30.575893+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46616	212.64.199.97	65525	TCP
2025-01-03T08:10:32.369278+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46618	212.64.199.97	65525	TCP
2025-01-03T08:10:34.168623+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46620	212.64.199.97	65525	TCP
2025-01-03T08:10:35.946043+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46622	212.64.199.97	65525	TCP
2025-01-03T08:10:37.749321+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46624	212.64.199.97	65525	TCP
2025-01-03T08:10:39.543715+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46626	212.64.199.97	65525	TCP
2025-01-03T08:10:41.349134+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46628	212.64.199.97	65525	TCP
2025-01-03T08:10:43.156026+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46630	212.64.199.97	65525	TCP
2025-01-03T08:10:45.636274+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46632	212.64.199.97	65525	TCP
2025-01-03T08:10:47.430726+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46634	212.64.199.97	65525	TCP
2025-01-03T08:10:49.190699+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46636	212.64.199.97	65525	TCP
2025-01-03T08:10:50.962042+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46638	212.64.199.97	65525	TCP
2025-01-03T08:10:52.769846+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46640	212.64.199.97	65525	TCP
2025-01-03T08:10:54.533913+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46642	212.64.199.97	65525	TCP
2025-01-03T08:10:56.320612+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46644	212.64.199.97	65525	TCP
2025-01-03T08:10:58.098076+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46646	212.64.199.97	65525	TCP
2025-01-03T08:10:59.887472+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46648	212.64.199.97	65525	TCP
2025-01-03T08:11:01.659052+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46650	212.64.199.97	65525	TCP
2025-01-03T08:11:03.449311+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46652	212.64.199.97	65525	TCP
2025-01-03T08:11:05.262522+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46654	212.64.199.97	65525	TCP
2025-01-03T08:11:07.057692+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46656	212.64.199.97	65525	TCP
2025-01-03T08:11:08.838600+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46658	212.64.199.97	65525	TCP
2025-01-03T08:11:10.617024+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46660	212.64.199.97	65525	TCP
2025-01-03T08:11:12.408468+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46662	212.64.199.97	65525	TCP
2025-01-03T08:11:14.215926+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46664	212.64.199.97	65525	TCP
2025-01-03T08:11:15.987245+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46666	212.64.199.97	65525	TCP
2025-01-03T08:11:17.781892+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46668	212.64.199.97	65525	TCP
2025-01-03T08:11:19.550841+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46670	212.64.199.97	65525	TCP
2025-01-03T08:11:21.341382+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46672	212.64.199.97	65525	TCP
2025-01-03T08:11:23.150698+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46674	212.64.199.97	65525	TCP
2025-01-03T08:11:24.955447+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46676	212.64.199.97	65525	TCP
2025-01-03T08:11:26.722977+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46678	212.64.199.97	65525	TCP
2025-01-03T08:11:28.748423+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46680	212.64.199.97	65525	TCP
2025-01-03T08:11:30.532580+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46682	212.64.199.97	65525	TCP
2025-01-03T08:11:32.301294+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46684	212.64.199.97	65525	TCP
2025-01-03T08:11:34.068025+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46686	212.64.199.97	65525	TCP
2025-01-03T08:11:35.848385+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46688	212.64.199.97	65525	TCP
2025-01-03T08:11:37.613392+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46690	212.64.199.97	65525	TCP
2025-01-03T08:11:39.379320+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46692	212.64.199.97	65525	TCP
2025-01-03T08:11:41.144546+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46694	212.64.199.97	65525	TCP
2025-01-03T08:11:42.935113+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46696	212.64.199.97	65525	TCP
2025-01-03T08:11:44.714453+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46698	212.64.199.97	65525	TCP
2025-01-03T08:11:46.487825+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46700	212.64.199.97	65525	TCP
2025-01-03T08:11:48.287455+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46702	212.64.199.97	65525	TCP
2025-01-03T08:11:50.069737+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46704	212.64.199.97	65525	TCP
2025-01-03T08:11:51.846543+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46706	212.64.199.97	65525	TCP
2025-01-03T08:11:53.630831+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46708	212.64.199.97	65525	TCP
2025-01-03T08:11:55.417914+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46710	212.64.199.97	65525	TCP
2025-01-03T08:11:57.407922+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46712	212.64.199.97	65525	TCP
2025-01-03T08:11:59.175792+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46714	212.64.199.97	65525	TCP
2025-01-03T08:12:00.961270+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46716	212.64.199.97	65525	TCP
2025-01-03T08:12:02.742754+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46718	212.64.199.97	65525	TCP
2025-01-03T08:12:04.527191+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46720	212.64.199.97	65525	TCP
2025-01-03T08:12:06.306439+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46722	212.64.199.97	65525	TCP
2025-01-03T08:12:08.087938+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46724	212.64.199.97	65525	TCP
2025-01-03T08:12:09.869666+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46726	212.64.199.97	65525	TCP
2025-01-03T08:12:11.651420+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46728	212.64.199.97	65525	TCP
2025-01-03T08:12:13.435052+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46730	212.64.199.97	65525	TCP
2025-01-03T08:12:15.232692+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46732	212.64.199.97	65525	TCP
2025-01-03T08:12:17.053367+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46734	212.64.199.97	65525	TCP
2025-01-03T08:12:18.832641+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46736	212.64.199.97	65525	TCP
2025-01-03T08:12:20.635342+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46738	212.64.199.97	65525	TCP
2025-01-03T08:12:22.416573+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46740	212.64.199.97	65525	TCP
2025-01-03T08:12:24.191874+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46742	212.64.199.97	65525	TCP
2025-01-03T08:12:25.983990+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46744	212.64.199.97	65525	TCP
2025-01-03T08:12:27.760552+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46746	212.64.199.97	65525	TCP
2025-01-03T08:12:29.541955+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46748	212.64.199.97	65525	TCP
2025-01-03T08:12:31.732491+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46750	212.64.199.97	65525	TCP
2025-01-03T08:12:33.504906+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46752	212.64.199.97	65525	TCP
2025-01-03T08:12:35.329204+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46754	212.64.199.97	65525	TCP
2025-01-03T08:12:37.154033+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46756	212.64.199.97	65525	TCP
2025-01-03T08:12:38.926365+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46758	212.64.199.97	65525	TCP
2025-01-03T08:12:40.716440+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46760	212.64.199.97	65525	TCP
2025-01-03T08:12:42.529044+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46762	212.64.199.97	65525	TCP
2025-01-03T08:12:44.325974+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46764	212.64.199.97	65525	TCP
2025-01-03T08:12:46.123443+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46766	212.64.199.97	65525	TCP
2025-01-03T08:12:47.917084+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46768	212.64.199.97	65525	TCP
2025-01-03T08:12:49.698172+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46770	212.64.199.97	65525	TCP
2025-01-03T08:12:51.483333+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46772	212.64.199.97	65525	TCP
2025-01-03T08:12:53.270522+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46774	212.64.199.97	65525	TCP
2025-01-03T08:12:55.075407+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46776	212.64.199.97	65525	TCP
2025-01-03T08:12:56.888494+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46778	212.64.199.97	65525	TCP
2025-01-03T08:12:58.663224+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46780	212.64.199.97	65525	TCP
2025-01-03T08:13:00.452320+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46782	212.64.199.97	65525	TCP
2025-01-03T08:13:02.251610+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46784	212.64.199.97	65525	TCP
2025-01-03T08:13:04.021086+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46786	212.64.199.97	65525	TCP
2025-01-03T08:13:05.791892+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46788	212.64.199.97	65525	TCP
2025-01-03T08:13:07.583833+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46790	212.64.199.97	65525	TCP
2025-01-03T08:13:09.358050+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46792	212.64.199.97	65525	TCP
2025-01-03T08:13:11.151882+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46794	212.64.199.97	65525	TCP
2025-01-03T08:13:12.931425+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46796	212.64.199.97	65525	TCP
2025-01-03T08:13:14.693244+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46798	212.64.199.97	65525	TCP
2025-01-03T08:13:16.487013+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46800	212.64.199.97	65525	TCP
2025-01-03T08:13:18.271759+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46802	212.64.199.97	65525	TCP
2025-01-03T08:13:20.053653+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46804	212.64.199.97	65525	TCP
2025-01-03T08:13:21.839071+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46806	212.64.199.97	65525	TCP
2025-01-03T08:13:23.624367+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46808	212.64.199.97	65525	TCP
2025-01-03T08:13:25.421644+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46810	212.64.199.97	65525	TCP
2025-01-03T08:13:27.202183+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46812	212.64.199.97	65525	TCP
2025-01-03T08:13:28.999804+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46814	212.64.199.97	65525	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 3, 2025 08:09:56.487623930 CET	46578	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:09:56.492501020 CET	65525	46578	212.64.199.97	192.168.2.14
Jan 3, 2025 08:09:56.492554903 CET	46578	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:09:56.493408918 CET	46578	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:09:56.498150110 CET	65525	46578	212.64.199.97	192.168.2.14
Jan 3, 2025 08:09:58.288042068 CET	65525	46578	212.64.199.97	192.168.2.14
Jan 3, 2025 08:09:58.288552046 CET	46578	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:09:58.288949013 CET	46580	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:09:58.293433905 CET	65525	46578	212.64.199.97	192.168.2.14
Jan 3, 2025 08:09:58.293719053 CET	65525	46580	212.64.199.97	192.168.2.14
Jan 3, 2025 08:09:58.293760061 CET	46580	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:09:58.293786049 CET	46580	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:09:58.298551083 CET	65525	46580	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:00.080513000 CET	65525	46580	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:00.080751896 CET	46580	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:00.081383944 CET	46582	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:00.085650921 CET	65525	46580	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:00.086282969 CET	65525	46582	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:00.086374044 CET	46582	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:00.086437941 CET	46582	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:00.091198921 CET	65525	46582	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:01.859272003 CET	65525	46582	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:01.859564066 CET	46582	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:01.859962940 CET	46584	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:01.864424944 CET	65525	46582	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:01.864831924 CET	65525	46584	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:01.864881992 CET	46584	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:01.864907026 CET	46584	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:01.869714975 CET	65525	46584	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:03.655139923 CET	65525	46584	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:03.655333042 CET	46584	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:03.655831099 CET	46586	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:03.660238028 CET	65525	46584	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:03.660648108 CET	65525	46586	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:03.660742044 CET	46586	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:03.660770893 CET	46586	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:03.665584087 CET	65525	46586	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:05.437423944 CET	65525	46586	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:05.437817097 CET	46586	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:05.438313961 CET	46588	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:05.442626953 CET	65525	46586	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:05.443089008 CET	65525	46588	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:05.443145037 CET	46588	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:05.443178892 CET	46588	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:05.447921991 CET	65525	46588	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:07.217437029 CET	65525	46588	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:07.217813969 CET	46588	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:07.218394995 CET	46590	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:07.222593069 CET	65525	46588	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:07.223269939 CET	65525	46590	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:07.223345995 CET	46590	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:07.223395109 CET	46590	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:07.228286982 CET	65525	46590	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:08.776092052 CET	46540	443	192.168.2.14	185.125.190.26
Jan 3, 2025 08:10:09.121278048 CET	65525	46590	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:09.121723890 CET	46590	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:09.122175932 CET	46592	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:09.126544952 CET	65525	46590	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:09.127074003 CET	65525	46592	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:09.127134085 CET	46592	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:09.127175093 CET	46592	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:09.132003069 CET	65525	46592	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:10.887927055 CET	65525	46592	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:10.888439894 CET	46592	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:10.889132023 CET	46594	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:10.893313885 CET	65525	46592	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:10.893919945 CET	65525	46594	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:10.894042015 CET	46594	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:10.894089937 CET	46594	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:10.898884058 CET	65525	46594	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:12.669769049 CET	65525	46594	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:12.670526981 CET	46594	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:12.671418905 CET	46596	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:12.675400972 CET	65525	46594	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:12.676342964 CET	65525	46596	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:12.676399946 CET	46596	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:12.676434040 CET	46596	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:12.681292057 CET	65525	46596	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:14.454322100 CET	65525	46596	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:14.454654932 CET	46596	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:14.455105066 CET	46598	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:14.459883928 CET	65525	46596	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:14.460273981 CET	65525	46598	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:14.460364103 CET	46598	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:14.460421085 CET	46598	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:14.465662003 CET	65525	46598	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:16.236514091 CET	65525	46598	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:16.236917019 CET	46598	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:16.237440109 CET	46600	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:16.241913080 CET	65525	46598	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:16.242455959 CET	65525	46600	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:16.242515087 CET	46600	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:16.242547989 CET	46600	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:16.247366905 CET	65525	46600	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:18.019973993 CET	65525	46600	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:18.020498037 CET	46600	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:18.021284103 CET	46602	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:18.025280952 CET	65525	46600	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:18.026019096 CET	65525	46602	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:18.026101112 CET	46602	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:18.026128054 CET	46602	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:18.030854940 CET	65525	46602	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:19.834307909 CET	65525	46602	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:19.834676981 CET	46602	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:19.835220098 CET	46604	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:19.839512110 CET	65525	46602	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:19.840007067 CET	65525	46604	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:19.840075016 CET	46604	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:19.840125084 CET	46604	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:19.844866991 CET	65525	46604	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:21.612339973 CET	65525	46604	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:21.612575054 CET	46604	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:21.613152981 CET	46606	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:21.617368937 CET	65525	46604	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:21.617912054 CET	65525	46606	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:21.618051052 CET	46606	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:21.618119955 CET	46606	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:21.622883081 CET	65525	46606	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:23.412904024 CET	65525	46606	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:23.413158894 CET	46606	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:23.414766073 CET	46608	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:23.417942047 CET	65525	46606	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:23.419565916 CET	65525	46608	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:23.419646025 CET	46608	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:23.419666052 CET	46608	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:23.424418926 CET	65525	46608	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:25.190077066 CET	65525	46608	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:25.190289974 CET	46608	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:25.190784931 CET	46610	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:25.195080996 CET	65525	46608	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:25.195578098 CET	65525	46610	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:25.195631981 CET	46610	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:25.195648909 CET	46610	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:25.200387001 CET	65525	46610	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:26.974996090 CET	65525	46610	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:26.975254059 CET	46610	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:26.975964069 CET	46612	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:26.980103970 CET	65525	46610	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:26.980806112 CET	65525	46612	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:26.980890036 CET	46612	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:26.980945110 CET	46612	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:26.985785007 CET	65525	46612	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:28.767786026 CET	65525	46612	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:28.768030882 CET	46612	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:28.768529892 CET	46614	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:28.773001909 CET	65525	46612	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:28.773354053 CET	65525	46614	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:28.773411036 CET	46614	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:28.773438931 CET	46614	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:28.778250933 CET	65525	46614	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:30.570338964 CET	65525	46614	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:30.570488930 CET	46614	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:30.571007013 CET	46616	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:30.575232983 CET	65525	46614	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:30.575794935 CET	65525	46616	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:30.575855970 CET	46616	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:30.575892925 CET	46616	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:30.580719948 CET	65525	46616	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:32.363699913 CET	65525	46616	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:32.363943100 CET	46616	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:32.364370108 CET	46618	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:32.368880033 CET	65525	46616	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:32.369196892 CET	65525	46618	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:32.369254112 CET	46618	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:32.369277954 CET	46618	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:32.374094963 CET	65525	46618	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:34.162902117 CET	65525	46618	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:34.163204908 CET	46618	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:34.163655043 CET	46620	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:34.168034077 CET	65525	46618	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:34.168528080 CET	65525	46620	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:34.168600082 CET	46620	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:34.168622971 CET	46620	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:34.173408985 CET	65525	46620	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:35.940489054 CET	65525	46620	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:35.940675020 CET	46620	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:35.941138029 CET	46622	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:35.945508957 CET	65525	46620	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:35.945972919 CET	65525	46622	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:35.946017027 CET	46622	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:35.946043015 CET	46622	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:35.950819016 CET	65525	46622	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:37.743377924 CET	65525	46622	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:37.743738890 CET	46622	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:37.744436026 CET	46624	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:37.748578072 CET	65525	46622	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:37.749188900 CET	65525	46624	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:37.749253035 CET	46624	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:37.749320984 CET	46624	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:37.754111052 CET	65525	46624	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:39.537446976 CET	65525	46624	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:39.537931919 CET	46624	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:39.538692951 CET	46626	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:39.542861938 CET	65525	46624	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:39.543559074 CET	65525	46626	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:39.543665886 CET	46626	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:39.543715000 CET	46626	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:39.548510075 CET	65525	46626	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:39.750648022 CET	46540	443	192.168.2.14	185.125.190.26
Jan 3, 2025 08:10:41.343622923 CET	65525	46626	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:41.343816042 CET	46626	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:41.344307899 CET	46628	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:41.348591089 CET	65525	46626	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:41.349071980 CET	65525	46628	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:41.349117994 CET	46628	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:41.349133968 CET	46628	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:41.353863955 CET	65525	46628	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:43.150382042 CET	65525	46628	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:43.150561094 CET	46628	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:43.151103973 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:43.155304909 CET	65525	46628	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:43.155886889 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:43.155997992 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:43.156025887 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:43.160761118 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:45.627054930 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:45.627213001 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:45.627217054 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:45.627265930 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:45.627665997 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:45.627711058 CET	46632	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:45.627716064 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:45.635519981 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:45.636200905 CET	65525	46632	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:45.636246920 CET	46632	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:45.636274099 CET	46632	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:45.641534090 CET	65525	46632	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:47.424561024 CET	65525	46632	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:47.425029039 CET	46632	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:47.425720930 CET	46634	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:47.429868937 CET	65525	46632	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:47.430594921 CET	65525	46634	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:47.430676937 CET	46634	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:47.430726051 CET	46634	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:47.435511112 CET	65525	46634	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:49.184533119 CET	65525	46634	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:49.184947014 CET	46634	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:49.185767889 CET	46636	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:49.189769030 CET	65525	46634	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:49.190558910 CET	65525	46636	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:49.190639973 CET	46636	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:49.190699100 CET	46636	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:49.195451021 CET	65525	46636	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:50.955940008 CET	65525	46636	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:50.956348896 CET	46636	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:50.957005024 CET	46638	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:50.961168051 CET	65525	46636	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:50.961885929 CET	65525	46638	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:50.961977005 CET	46638	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:50.962042093 CET	46638	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:50.966799021 CET	65525	46638	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:52.764298916 CET	65525	46638	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:52.764542103 CET	46638	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:52.764997005 CET	46640	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:52.769469976 CET	65525	46638	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:52.769774914 CET	65525	46640	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:52.769834042 CET	46640	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:52.769845963 CET	46640	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:52.774643898 CET	65525	46640	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:54.528450966 CET	65525	46640	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:54.528620958 CET	46640	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:54.529090881 CET	46642	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:54.533401966 CET	65525	46640	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:54.533838034 CET	65525	46642	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:54.533885002 CET	46642	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:54.533912897 CET	46642	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:54.538728952 CET	65525	46642	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:56.315063000 CET	65525	46642	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:56.315224886 CET	46642	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:56.315645933 CET	46644	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:56.319998026 CET	65525	46642	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:56.320502996 CET	65525	46644	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:56.320590973 CET	46644	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:56.320611954 CET	46644	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:56.325376034 CET	65525	46644	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:58.092617035 CET	65525	46644	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:58.092782974 CET	46644	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:58.093218088 CET	46646	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:58.097553968 CET	65525	46644	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:58.097974062 CET	65525	46646	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:58.098022938 CET	46646	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:58.098076105 CET	46646	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:58.102797031 CET	65525	46646	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:59.881830931 CET	65525	46646	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:59.881972075 CET	46646	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:59.882432938 CET	46648	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:59.886830091 CET	65525	46646	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:59.887341976 CET	65525	46648	212.64.199.97	192.168.2.14
Jan 3, 2025 08:10:59.887459993 CET	46648	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:59.887471914 CET	46648	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:10:59.892328024 CET	65525	46648	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:01.653402090 CET	65525	46648	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:01.653588057 CET	46648	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:01.654120922 CET	46650	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:01.658410072 CET	65525	46648	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:01.658982038 CET	65525	46650	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:01.659037113 CET	46650	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:01.659051895 CET	46650	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:01.663868904 CET	65525	46650	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:03.443717957 CET	65525	46650	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:03.443880081 CET	46650	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:03.444392920 CET	46652	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:03.448683023 CET	65525	46650	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:03.449174881 CET	65525	46652	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:03.449295044 CET	46652	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:03.449311018 CET	46652	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:03.454118013 CET	65525	46652	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:05.256766081 CET	65525	46652	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:05.257024050 CET	46652	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:05.257644892 CET	46654	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:05.261832952 CET	65525	46652	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:05.262388945 CET	65525	46654	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:05.262490034 CET	46654	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:05.262521982 CET	46654	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:05.267365932 CET	65525	46654	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:07.051863909 CET	65525	46654	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:07.052048922 CET	46654	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:07.052711010 CET	46656	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:07.056927919 CET	65525	46654	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:07.057558060 CET	65525	46656	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:07.057640076 CET	46656	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:07.057692051 CET	46656	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:07.062472105 CET	65525	46656	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:08.832552910 CET	65525	46656	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:08.832813978 CET	46656	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:08.833513975 CET	46658	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:08.837826014 CET	65525	46656	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:08.838413954 CET	65525	46658	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:08.838547945 CET	46658	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:08.838599920 CET	46658	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:08.843359947 CET	65525	46658	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:10.610862017 CET	65525	46658	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:10.611236095 CET	46658	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:10.611987114 CET	46660	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:10.616084099 CET	65525	46658	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:10.616854906 CET	65525	46660	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:10.616951942 CET	46660	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:10.617023945 CET	46660	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:10.621747017 CET	65525	46660	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:12.402504921 CET	65525	46660	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:12.402816057 CET	46660	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:12.403481007 CET	46662	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:12.407692909 CET	65525	46660	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:12.408313036 CET	65525	46662	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:12.408396959 CET	46662	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:12.408468008 CET	46662	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:12.413216114 CET	65525	46662	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:14.210177898 CET	65525	46662	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:14.210489035 CET	46662	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:14.211066961 CET	46664	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:14.215240955 CET	65525	46662	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:14.215847015 CET	65525	46664	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:14.215895891 CET	46664	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:14.215925932 CET	46664	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:14.220704079 CET	65525	46664	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:15.981380939 CET	65525	46664	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:15.981605053 CET	46664	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:15.982285023 CET	46666	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:15.986439943 CET	65525	46664	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:15.987078905 CET	65525	46666	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:15.987190962 CET	46666	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:15.987245083 CET	46666	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:15.992016077 CET	65525	46666	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:17.775723934 CET	65525	46666	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:17.776113987 CET	46666	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:17.776890039 CET	46668	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:17.780966997 CET	65525	46666	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:17.781763077 CET	65525	46668	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:17.781832933 CET	46668	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:17.781892061 CET	46668	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:17.786644936 CET	65525	46668	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:19.545222044 CET	65525	46668	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:19.545377970 CET	46668	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:19.545886040 CET	46670	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:19.550120115 CET	65525	46668	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:19.550704002 CET	65525	46670	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:19.550827026 CET	46670	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:19.550841093 CET	46670	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:19.555598021 CET	65525	46670	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:21.335355997 CET	65525	46670	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:21.335592031 CET	46670	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:21.336389065 CET	46672	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:21.340389013 CET	65525	46670	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:21.341237068 CET	65525	46672	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:21.341319084 CET	46672	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:21.341382027 CET	46672	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:21.346127033 CET	65525	46672	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:23.145070076 CET	65525	46672	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:23.145226955 CET	46672	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:23.145776033 CET	46674	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:23.150015116 CET	65525	46672	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:23.150625944 CET	65525	46674	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:23.150671959 CET	46674	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:23.150697947 CET	46674	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:23.155569077 CET	65525	46674	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:24.949701071 CET	65525	46674	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:24.949846029 CET	46674	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:24.950534105 CET	46676	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:24.954756021 CET	65525	46674	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:24.955334902 CET	65525	46676	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:24.955430031 CET	46676	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:24.955446959 CET	46676	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:24.960262060 CET	65525	46676	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:26.717210054 CET	65525	46676	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:26.717478037 CET	46676	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:26.718082905 CET	46678	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:26.722198009 CET	65525	46676	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:26.722812891 CET	65525	46678	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:26.722893000 CET	46678	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:26.722976923 CET	46678	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:26.727691889 CET	65525	46678	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:28.742364883 CET	65525	46678	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:28.742496967 CET	46678	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:28.742964029 CET	46680	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:28.747556925 CET	65525	46678	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:28.748023987 CET	65525	46680	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:28.748087883 CET	46680	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:28.748423100 CET	46680	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:28.753647089 CET	65525	46680	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:30.526417017 CET	65525	46680	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:30.526765108 CET	46680	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:30.527489901 CET	46682	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:30.531682968 CET	65525	46680	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:30.532430887 CET	65525	46682	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:30.532500982 CET	46682	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:30.532579899 CET	46682	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:30.537303925 CET	65525	46682	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:32.294816971 CET	65525	46682	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:32.295178890 CET	46682	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:32.295875072 CET	46684	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:32.300169945 CET	65525	46682	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:32.301161051 CET	65525	46684	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:32.301244020 CET	46684	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:32.301294088 CET	46684	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:32.306260109 CET	65525	46684	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:34.062105894 CET	65525	46684	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:34.062355042 CET	46684	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:34.063108921 CET	46686	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:34.067214012 CET	65525	46684	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:34.067888021 CET	65525	46686	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:34.067954063 CET	46686	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:34.068025112 CET	46686	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:34.072772980 CET	65525	46686	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:35.842334032 CET	65525	46686	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:35.842706919 CET	46686	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:35.843451023 CET	46688	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:35.847511053 CET	65525	46686	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:35.848242044 CET	65525	46688	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:35.848309994 CET	46688	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:35.848385096 CET	46688	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:35.853235006 CET	65525	46688	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:37.607353926 CET	65525	46688	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:37.607631922 CET	46688	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:37.608397961 CET	46690	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:37.612479925 CET	65525	46688	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:37.613254070 CET	65525	46690	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:37.613332033 CET	46690	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:37.613392115 CET	46690	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:37.618184090 CET	65525	46690	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:39.373729944 CET	65525	46690	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:39.373996019 CET	46690	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:39.374473095 CET	46692	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:39.378801107 CET	65525	46690	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:39.379234076 CET	65525	46692	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:39.379283905 CET	46692	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:39.379319906 CET	46692	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:39.384105921 CET	65525	46692	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:41.138674021 CET	65525	46692	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:41.138942003 CET	46692	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:41.139646053 CET	46694	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:41.143759012 CET	65525	46692	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:41.144395113 CET	65525	46694	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:41.144484997 CET	46694	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:41.144546032 CET	46694	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:41.149281025 CET	65525	46694	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:42.929244995 CET	65525	46694	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:42.929450989 CET	46694	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:42.930223942 CET	46696	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:42.934245110 CET	65525	46694	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:42.934977055 CET	65525	46696	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:42.935040951 CET	46696	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:42.935112953 CET	46696	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:42.939918995 CET	65525	46696	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:44.708724976 CET	65525	46696	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:44.708878040 CET	46696	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:44.709505081 CET	46698	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:44.713706017 CET	65525	46696	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:44.714338064 CET	65525	46698	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:44.714411020 CET	46698	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:44.714452982 CET	46698	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:44.719285011 CET	65525	46698	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:46.482445002 CET	65525	46698	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:46.482547045 CET	46698	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:46.482870102 CET	46700	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:46.487328053 CET	65525	46698	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:46.487694025 CET	65525	46700	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:46.487766027 CET	46700	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:46.487824917 CET	46700	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:46.492573977 CET	65525	46700	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:48.281759977 CET	65525	46700	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:48.281996965 CET	46700	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:48.282519102 CET	46702	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:48.286772966 CET	65525	46700	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:48.287324905 CET	65525	46702	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:48.287445068 CET	46702	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:48.287455082 CET	46702	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:48.292268991 CET	65525	46702	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:50.064233065 CET	65525	46702	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:50.064398050 CET	46702	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:50.064824104 CET	46704	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:50.069250107 CET	65525	46702	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:50.069670916 CET	65525	46704	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:50.069725037 CET	46704	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:50.069736958 CET	46704	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:50.074546099 CET	65525	46704	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:51.841134071 CET	65525	46704	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:51.841290951 CET	46704	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:51.841727972 CET	46706	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:51.846133947 CET	65525	46704	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:51.846477032 CET	65525	46706	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:51.846519947 CET	46706	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:51.846543074 CET	46706	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:51.851272106 CET	65525	46706	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:53.624851942 CET	65525	46706	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:53.625200987 CET	46706	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:53.625875950 CET	46708	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:53.629940033 CET	65525	46706	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:53.630637884 CET	65525	46708	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:53.630789042 CET	46708	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:53.630831003 CET	46708	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:53.635623932 CET	65525	46708	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:55.412040949 CET	65525	46708	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:55.412295103 CET	46708	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:55.412996054 CET	46710	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:55.417093992 CET	65525	46708	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:55.417784929 CET	65525	46710	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:55.417851925 CET	46710	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:55.417913914 CET	46710	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:55.422682047 CET	65525	46710	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:57.402002096 CET	65525	46710	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:57.402357101 CET	46710	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:57.402626038 CET	65525	46710	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:57.402694941 CET	46710	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:57.403059959 CET	46712	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:57.407140970 CET	65525	46710	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:57.407783985 CET	65525	46712	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:57.407866955 CET	46712	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:57.407922029 CET	46712	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:57.412692070 CET	65525	46712	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:59.169975996 CET	65525	46712	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:59.170237064 CET	46712	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:59.170913935 CET	46714	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:59.175054073 CET	65525	46712	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:59.175643921 CET	65525	46714	212.64.199.97	192.168.2.14
Jan 3, 2025 08:11:59.175718069 CET	46714	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:59.175791979 CET	46714	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:11:59.180732012 CET	65525	46714	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:00.955226898 CET	65525	46714	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:00.955583096 CET	46714	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:00.956267118 CET	46716	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:00.960406065 CET	65525	46714	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:00.961097956 CET	65525	46716	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:00.961214066 CET	46716	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:00.961270094 CET	46716	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:00.966002941 CET	65525	46716	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:02.736648083 CET	65525	46716	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:02.737019062 CET	46716	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:02.737759113 CET	46718	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:02.741848946 CET	65525	46716	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:02.742609024 CET	65525	46718	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:02.742690086 CET	46718	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:02.742753983 CET	46718	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:02.747493982 CET	65525	46718	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:04.521702051 CET	65525	46718	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:04.521864891 CET	46718	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:04.522331953 CET	46720	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:04.526726961 CET	65525	46718	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:04.527071953 CET	65525	46720	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:04.527173042 CET	46720	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:04.527190924 CET	46720	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:04.531972885 CET	65525	46720	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:06.300956964 CET	65525	46720	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:06.301106930 CET	46720	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:06.301604033 CET	46722	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:06.305898905 CET	65525	46720	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:06.306361914 CET	65525	46722	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:06.306412935 CET	46722	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:06.306438923 CET	46722	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:06.311193943 CET	65525	46722	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:08.082386017 CET	65525	46722	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:08.082520008 CET	46722	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:08.082940102 CET	46724	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:08.087328911 CET	65525	46722	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:08.087802887 CET	65525	46724	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:08.087923050 CET	46724	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:08.087938070 CET	46724	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:08.092793941 CET	65525	46724	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:09.863816023 CET	65525	46724	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:09.864065886 CET	46724	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:09.864758968 CET	46726	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:09.868855000 CET	65525	46724	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:09.869520903 CET	65525	46726	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:09.869595051 CET	46726	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:09.869666100 CET	46726	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:09.874449015 CET	65525	46726	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:11.645071983 CET	65525	46726	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:11.645535946 CET	46726	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:11.646441936 CET	46728	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:11.650386095 CET	65525	46726	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:11.651269913 CET	65525	46728	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:11.651355028 CET	46728	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:11.651420116 CET	46728	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:11.656279087 CET	65525	46728	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:13.429169893 CET	65525	46728	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:13.429433107 CET	46728	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:13.430125952 CET	46730	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:13.434243917 CET	65525	46728	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:13.434921980 CET	65525	46730	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:13.434983969 CET	46730	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:13.435051918 CET	46730	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:13.439937115 CET	65525	46730	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:15.227057934 CET	65525	46730	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:15.227238894 CET	46730	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:15.227719069 CET	46732	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:15.232093096 CET	65525	46730	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:15.232579947 CET	65525	46732	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:15.232676029 CET	46732	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:15.232692003 CET	46732	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:15.237503052 CET	65525	46732	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:17.047898054 CET	65525	46732	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:17.048069954 CET	46732	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:17.048537970 CET	46734	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:17.052974939 CET	65525	46732	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:17.053292990 CET	65525	46734	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:17.053344965 CET	46734	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:17.053366899 CET	46734	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:17.059109926 CET	65525	46734	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:18.826796055 CET	65525	46734	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:18.827009916 CET	46734	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:18.827636003 CET	46736	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:18.831798077 CET	65525	46734	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:18.832470894 CET	65525	46736	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:18.832537889 CET	46736	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:18.832640886 CET	46736	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:18.837373018 CET	65525	46736	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:20.629396915 CET	65525	46736	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:20.629748106 CET	46736	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:20.630436897 CET	46738	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:20.634521961 CET	65525	46736	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:20.635199070 CET	65525	46738	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:20.635282040 CET	46738	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:20.635341883 CET	46738	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:20.640068054 CET	65525	46738	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:22.410891056 CET	65525	46738	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:22.411129951 CET	46738	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:22.411679029 CET	46740	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:22.416013956 CET	65525	46738	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:22.416497946 CET	65525	46740	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:22.416543961 CET	46740	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:22.416573048 CET	46740	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:22.421360970 CET	65525	46740	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:24.186243057 CET	65525	46740	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:24.186405897 CET	46740	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:24.186891079 CET	46742	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:24.191196918 CET	65525	46740	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:24.191714048 CET	65525	46742	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:24.191864014 CET	46742	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:24.191874027 CET	46742	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:24.196614027 CET	65525	46742	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:25.977699041 CET	65525	46742	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:25.978065014 CET	46742	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:25.979017019 CET	46744	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:25.983413935 CET	65525	46742	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:25.983865976 CET	65525	46744	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:25.983936071 CET	46744	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:25.983989954 CET	46744	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:25.988812923 CET	65525	46744	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:27.754605055 CET	65525	46744	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:27.754973888 CET	46744	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:27.755626917 CET	46746	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:27.759783983 CET	65525	46744	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:27.760375023 CET	65525	46746	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:27.760497093 CET	46746	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:27.760551929 CET	46746	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:27.765325069 CET	65525	46746	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:29.535851002 CET	65525	46746	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:29.536237001 CET	46746	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:29.536928892 CET	46748	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:29.541029930 CET	65525	46746	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:29.541832924 CET	65525	46748	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:29.541902065 CET	46748	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:29.541954994 CET	46748	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:29.546735048 CET	65525	46748	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:31.726444960 CET	65525	46748	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:31.726597071 CET	46748	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:31.726632118 CET	65525	46748	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:31.726672888 CET	46748	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:31.727034092 CET	46750	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:31.732352972 CET	65525	46748	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:31.732393026 CET	65525	46750	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:31.732469082 CET	46750	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:31.732491016 CET	46750	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:31.739907980 CET	65525	46750	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:33.498994112 CET	65525	46750	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:33.499366045 CET	46750	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:33.499881029 CET	46752	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:33.504141092 CET	65525	46750	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:33.504782915 CET	65525	46752	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:33.504878044 CET	46752	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:33.504905939 CET	46752	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:33.509689093 CET	65525	46752	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:35.323060989 CET	65525	46752	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:35.323216915 CET	46752	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:35.323685884 CET	46754	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:35.328831911 CET	65525	46752	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:35.329133034 CET	65525	46754	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:35.329179049 CET	46754	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:35.329204082 CET	46754	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:35.333962917 CET	65525	46754	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:37.148322105 CET	65525	46754	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:37.148607016 CET	46754	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:37.149079084 CET	46756	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:37.153381109 CET	65525	46754	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:37.153892994 CET	65525	46756	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:37.153976917 CET	46756	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:37.154032946 CET	46756	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:37.158843994 CET	65525	46756	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:38.920885086 CET	65525	46756	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:38.921061993 CET	46756	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:38.921483040 CET	46758	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:38.925827026 CET	65525	46756	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:38.926246881 CET	65525	46758	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:38.926317930 CET	46758	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:38.926364899 CET	46758	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:38.931087017 CET	65525	46758	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:40.710656881 CET	65525	46758	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:40.710895061 CET	46758	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:40.711512089 CET	46760	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:40.715670109 CET	65525	46758	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:40.716288090 CET	65525	46760	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:40.716375113 CET	46760	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:40.716439962 CET	46760	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:40.721148014 CET	65525	46760	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:42.523534060 CET	65525	46760	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:42.523616076 CET	46760	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:42.524107933 CET	46762	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:42.528390884 CET	65525	46760	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:42.528966904 CET	65525	46762	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:42.529006958 CET	46762	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:42.529043913 CET	46762	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:42.533770084 CET	65525	46762	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:44.320477962 CET	65525	46762	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:44.320638895 CET	46762	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:44.321065903 CET	46764	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:44.325421095 CET	65525	46762	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:44.325877905 CET	65525	46764	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:44.325957060 CET	46764	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:44.325973988 CET	46764	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:44.330745935 CET	65525	46764	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:46.118104935 CET	65525	46764	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:46.118228912 CET	46764	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:46.118647099 CET	46766	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:46.122996092 CET	65525	46764	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:46.123373985 CET	65525	46766	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:46.123414993 CET	46766	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:46.123442888 CET	46766	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:46.128163099 CET	65525	46766	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:47.911588907 CET	65525	46766	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:47.911782026 CET	46766	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:47.912231922 CET	46768	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:47.916563988 CET	65525	46766	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:47.917016029 CET	65525	46768	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:47.917061090 CET	46768	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:47.917083979 CET	46768	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:47.921816111 CET	65525	46768	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:49.692683935 CET	65525	46768	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:49.692833900 CET	46768	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:49.693274975 CET	46770	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:49.697594881 CET	65525	46768	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:49.698077917 CET	65525	46770	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:49.698156118 CET	46770	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:49.698172092 CET	46770	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:49.702951908 CET	65525	46770	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:51.477679968 CET	65525	46770	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:51.477890015 CET	46770	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:51.478481054 CET	46772	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:51.482675076 CET	65525	46770	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:51.483268023 CET	65525	46772	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:51.483320951 CET	46772	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:51.483333111 CET	46772	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:51.488096952 CET	65525	46772	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:53.264910936 CET	65525	46772	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:53.265172005 CET	46772	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:53.265604973 CET	46774	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:53.270009041 CET	65525	46772	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:53.270437002 CET	65525	46774	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:53.270488024 CET	46774	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:53.270522118 CET	46774	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:53.275286913 CET	65525	46774	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:55.069888115 CET	65525	46774	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:55.070148945 CET	46774	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:55.070570946 CET	46776	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:55.074898005 CET	65525	46774	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:55.075341940 CET	65525	46776	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:55.075387001 CET	46776	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:55.075407028 CET	46776	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:55.080154896 CET	65525	46776	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:56.882666111 CET	65525	46776	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:56.882896900 CET	46776	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:56.883589983 CET	46778	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:56.887706995 CET	65525	46776	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:56.888361931 CET	65525	46778	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:56.888434887 CET	46778	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:56.888494015 CET	46778	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:56.893311977 CET	65525	46778	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:58.657210112 CET	65525	46778	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:58.657620907 CET	46778	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:58.658308029 CET	46780	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:58.662436008 CET	65525	46778	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:58.663079023 CET	65525	46780	212.64.199.97	192.168.2.14
Jan 3, 2025 08:12:58.663147926 CET	46780	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:58.663223982 CET	46780	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:12:58.667989016 CET	65525	46780	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:00.446557045 CET	65525	46780	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:00.446789026 CET	46780	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:00.447448015 CET	46782	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:00.451608896 CET	65525	46780	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:00.452188969 CET	65525	46782	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:00.452270985 CET	46782	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:00.452320099 CET	46782	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:00.457072973 CET	65525	46782	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:02.245824099 CET	65525	46782	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:02.246077061 CET	46782	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:02.246695042 CET	46784	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:02.250818014 CET	65525	46782	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:02.251498938 CET	65525	46784	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:02.251554966 CET	46784	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:02.251610041 CET	46784	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:02.256345034 CET	65525	46784	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:04.015062094 CET	65525	46784	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:04.015440941 CET	46784	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:04.016124964 CET	46786	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:04.020210028 CET	65525	46784	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:04.020945072 CET	65525	46786	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:04.021011114 CET	46786	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:04.021085978 CET	46786	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:04.025877953 CET	65525	46786	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:05.785980940 CET	65525	46786	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:05.786223888 CET	46786	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:05.786911964 CET	46788	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:05.791070938 CET	65525	46786	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:05.791734934 CET	65525	46788	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:05.791848898 CET	46788	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:05.791892052 CET	46788	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:05.796678066 CET	65525	46788	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:07.577862978 CET	65525	46788	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:07.578250885 CET	46788	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:07.578952074 CET	46790	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:07.583044052 CET	65525	46788	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:07.583709955 CET	65525	46790	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:07.583775997 CET	46790	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:07.583832979 CET	46790	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:07.588537931 CET	65525	46790	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:09.352610111 CET	65525	46790	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:09.352775097 CET	46790	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:09.353212118 CET	46792	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:09.357532978 CET	65525	46790	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:09.357943058 CET	65525	46792	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:09.358022928 CET	46792	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:09.358050108 CET	46792	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:09.362770081 CET	65525	46792	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:11.145977020 CET	65525	46792	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:11.146327972 CET	46792	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:11.147017002 CET	46794	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:11.151132107 CET	65525	46792	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:11.151748896 CET	65525	46794	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:11.151819944 CET	46794	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:11.151881933 CET	46794	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:11.156621933 CET	65525	46794	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:12.925312042 CET	65525	46794	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:12.925761938 CET	46794	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:12.926496029 CET	46796	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:12.930577040 CET	65525	46794	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:12.931256056 CET	65525	46796	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:12.931380987 CET	46796	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:12.931425095 CET	46796	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:12.936285019 CET	65525	46796	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:14.687032938 CET	65525	46796	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:14.687541962 CET	46796	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:14.688395977 CET	46798	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:14.692379951 CET	65525	46796	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:14.693176985 CET	65525	46798	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:14.693223000 CET	46798	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:14.693243980 CET	46798	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:14.698004007 CET	65525	46798	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:16.481311083 CET	65525	46798	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:16.481548071 CET	46798	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:16.482072115 CET	46800	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:16.486262083 CET	65525	46798	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:16.486867905 CET	65525	46800	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:16.486931086 CET	46800	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:16.487013102 CET	46800	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:16.491734028 CET	65525	46800	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:18.266125917 CET	65525	46800	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:18.266375065 CET	46800	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:18.266843081 CET	46802	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:18.271155119 CET	65525	46800	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:18.271632910 CET	65525	46802	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:18.271691084 CET	46802	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:18.271759033 CET	46802	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:18.276514053 CET	65525	46802	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:20.048044920 CET	65525	46802	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:20.048239946 CET	46802	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:20.048743963 CET	46804	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:20.052999973 CET	65525	46802	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:20.053555012 CET	65525	46804	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:20.053626060 CET	46804	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:20.053653002 CET	46804	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:20.058443069 CET	65525	46804	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:21.833655119 CET	65525	46804	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:21.833782911 CET	46804	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:21.834242105 CET	46806	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:21.838568926 CET	65525	46804	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:21.838974953 CET	65525	46806	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:21.839060068 CET	46806	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:21.839071035 CET	46806	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:21.843861103 CET	65525	46806	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:23.618633032 CET	65525	46806	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:23.618937016 CET	46806	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:23.619425058 CET	46808	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:23.623761892 CET	65525	46806	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:23.624289989 CET	65525	46808	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:23.624336958 CET	46808	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:23.624366999 CET	46808	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:23.629184961 CET	65525	46808	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:25.416213036 CET	65525	46808	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:25.416352987 CET	46808	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:25.416788101 CET	46810	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:25.421200991 CET	65525	46808	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:25.421561003 CET	65525	46810	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:25.421632051 CET	46810	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:25.421643972 CET	46810	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:25.426429987 CET	65525	46810	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:27.195033073 CET	65525	46810	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:27.196505070 CET	46810	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:27.196572065 CET	46810	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:27.197293043 CET	46812	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:27.201369047 CET	65525	46810	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:27.202039957 CET	65525	46812	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:27.202111006 CET	46812	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:27.202183008 CET	46812	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:27.207036018 CET	65525	46812	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:28.993875027 CET	65525	46812	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:28.994086981 CET	46812	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:28.994918108 CET	46814	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:28.998956919 CET	65525	46812	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:28.999661922 CET	65525	46814	212.64.199.97	192.168.2.14
Jan 3, 2025 08:13:28.999723911 CET	46814	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:28.999804020 CET	46814	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:13:29.004878044 CET	65525	46814	212.64.199.97	192.168.2.14

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 3, 2025 08:12:42.417520046 CET	33130	53	192.168.2.14	8.8.8.8
Jan 3, 2025 08:12:42.417567015 CET	60528	53	192.168.2.14	8.8.8.8
Jan 3, 2025 08:12:42.423933029 CET	53	60528	8.8.8.8	192.168.2.14
Jan 3, 2025 08:12:42.424525976 CET	53	33130	8.8.8.8	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 3, 2025 08:12:42.417520046 CET	192.168.2.14	8.8.8.8	0x977c	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 08:12:42.417567015 CET	192.168.2.14	8.8.8.8	0x71b7	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 3, 2025 08:12:42.424525976 CET	8.8.8.8	192.168.2.14	0x977c	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 3, 2025 08:12:42.424525976 CET	8.8.8.8	192.168.2.14	0x977c	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: armv6l.elf PID: 5536, Parent PID: 5456

General

Start time (UTC):	07:09:55
Start date (UTC):	03/01/2025
Path:	/tmp/armv6l.elf
Arguments:	/tmp/armv6l.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv6l.elf PID: 5538, Parent PID: 5536

General

Start time (UTC):	07:09:55
Start date (UTC):	03/01/2025
Path:	/tmp/armv6l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv6l.elf PID: 5540, Parent PID: 5538

General

Start time (UTC):	07:09:55
Start date (UTC):	03/01/2025
Path:	/tmp/armv6l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report armv6l.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/Infected.log

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: armv6l.elf PID: 5536, Parent PID: 5456

General

Chronological Activities

Analysis Process: armv6l.elf PID: 5538, Parent PID: 5536

General

Chronological Activities

Analysis Process: armv6l.elf PID: 5540, Parent PID: 5538

General

Chronological Activities

Linux Analysis Report
armv6l.elf