Edit tour

Linux Analysis Report
armv7l.elf

Overview

General Information

Sample name:	armv7l.elf
Analysis ID:	1583625
MD5:	d2fe42521426a409d2f9fd13cdebc9fb
SHA1:	defa78308a19fb64db0916a3ac50a1c5fffa96b3
SHA256:	d31f949cbb7aee983fd9c1a7e806a51258fa0c315f658ae8d7a0d795b089231e
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	72
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Sample contains only a LOAD segment without any section mappings

Suricata IDS alerts with low severity for network traffic

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583625
Start date and time:	2025-01-03 08:17:39 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	armv7l.elf
Detection:	MAL
Classification:	mal72.spre.troj.evad.linELF@0/1@2/0

Runtime Messages

Command:	/tmp/armv7l.elf
PID:	5576
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Simps Botnet ;) Infected By Simps Botnet ;)
Standard Error:

Process Tree

system is lnxubuntu20

armv7l.elf (PID: 5576, Parent: 5494, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/armv7l.elf

armv7l.elf New Fork (PID: 5578, Parent: 5576)

armv7l.elf New Fork (PID: 5580, Parent: 5578)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5576.1.00007f2984017000.00007f298403b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5576.1.00007f2984017000.00007f298403b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: armv7l.elf PID: 5576	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: armv7l.elf PID: 5578	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 1 entries

Suricata Signatures

ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-03T08:18:37.450120+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46590	212.64.199.97	65525	TCP
2025-01-03T08:18:39.234673+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46592	212.64.199.97	65525	TCP
2025-01-03T08:18:40.998784+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46594	212.64.199.97	65525	TCP
2025-01-03T08:18:42.770123+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46596	212.64.199.97	65525	TCP
2025-01-03T08:18:44.553407+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46598	212.64.199.97	65525	TCP
2025-01-03T08:18:46.332239+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46600	212.64.199.97	65525	TCP
2025-01-03T08:18:48.092206+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46602	212.64.199.97	65525	TCP
2025-01-03T08:18:49.884081+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46604	212.64.199.97	65525	TCP
2025-01-03T08:18:51.678383+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46606	212.64.199.97	65525	TCP
2025-01-03T08:18:53.457449+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46608	212.64.199.97	65525	TCP
2025-01-03T08:18:55.240158+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46610	212.64.199.97	65525	TCP
2025-01-03T08:18:57.014327+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46612	212.64.199.97	65525	TCP
2025-01-03T08:18:58.800453+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46614	212.64.199.97	65525	TCP
2025-01-03T08:19:00.583104+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46616	212.64.199.97	65525	TCP
2025-01-03T08:19:02.379794+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46618	212.64.199.97	65525	TCP
2025-01-03T08:19:04.180959+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46620	212.64.199.97	65525	TCP
2025-01-03T08:19:05.977050+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46622	212.64.199.97	65525	TCP
2025-01-03T08:19:07.776312+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46624	212.64.199.97	65525	TCP
2025-01-03T08:19:09.554946+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46626	212.64.199.97	65525	TCP
2025-01-03T08:19:11.352340+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46628	212.64.199.97	65525	TCP
2025-01-03T08:19:13.125271+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46630	212.64.199.97	65525	TCP
2025-01-03T08:19:14.895059+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46632	212.64.199.97	65525	TCP
2025-01-03T08:19:16.655261+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46634	212.64.199.97	65525	TCP
2025-01-03T08:19:18.426501+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46636	212.64.199.97	65525	TCP
2025-01-03T08:19:20.219787+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46638	212.64.199.97	65525	TCP
2025-01-03T08:19:22.003823+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46640	212.64.199.97	65525	TCP
2025-01-03T08:19:23.806497+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46642	212.64.199.97	65525	TCP
2025-01-03T08:19:25.579172+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46644	212.64.199.97	65525	TCP
2025-01-03T08:19:27.369560+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46646	212.64.199.97	65525	TCP
2025-01-03T08:19:29.140292+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46648	212.64.199.97	65525	TCP
2025-01-03T08:19:30.926753+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46650	212.64.199.97	65525	TCP
2025-01-03T08:19:32.732317+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46652	212.64.199.97	65525	TCP
2025-01-03T08:19:34.505471+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46654	212.64.199.97	65525	TCP
2025-01-03T08:19:36.308876+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46656	212.64.199.97	65525	TCP
2025-01-03T08:19:38.097289+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46658	212.64.199.97	65525	TCP
2025-01-03T08:19:39.879023+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46660	212.64.199.97	65525	TCP
2025-01-03T08:19:41.663807+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46662	212.64.199.97	65525	TCP
2025-01-03T08:19:43.443060+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46664	212.64.199.97	65525	TCP
2025-01-03T08:19:45.202958+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46666	212.64.199.97	65525	TCP
2025-01-03T08:19:46.984512+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46668	212.64.199.97	65525	TCP
2025-01-03T08:19:48.752723+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46670	212.64.199.97	65525	TCP
2025-01-03T08:19:50.535435+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46672	212.64.199.97	65525	TCP
2025-01-03T08:19:52.338079+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46674	212.64.199.97	65525	TCP
2025-01-03T08:19:54.114786+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46676	212.64.199.97	65525	TCP
2025-01-03T08:19:55.875259+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46678	212.64.199.97	65525	TCP
2025-01-03T08:19:57.662091+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46680	212.64.199.97	65525	TCP
2025-01-03T08:19:59.442109+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46682	212.64.199.97	65525	TCP
2025-01-03T08:20:01.255110+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46684	212.64.199.97	65525	TCP
2025-01-03T08:20:03.038656+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46686	212.64.199.97	65525	TCP
2025-01-03T08:20:04.837712+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46688	212.64.199.97	65525	TCP
2025-01-03T08:20:06.615502+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46690	212.64.199.97	65525	TCP
2025-01-03T08:20:08.392760+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46692	212.64.199.97	65525	TCP
2025-01-03T08:20:10.181925+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46694	212.64.199.97	65525	TCP
2025-01-03T08:20:11.957475+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46696	212.64.199.97	65525	TCP
2025-01-03T08:20:13.719170+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46698	212.64.199.97	65525	TCP
2025-01-03T08:20:15.510559+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46700	212.64.199.97	65525	TCP
2025-01-03T08:20:17.306653+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46702	212.64.199.97	65525	TCP
2025-01-03T08:20:19.091147+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46704	212.64.199.97	65525	TCP
2025-01-03T08:20:20.859990+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46706	212.64.199.97	65525	TCP
2025-01-03T08:20:22.650282+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46708	212.64.199.97	65525	TCP
2025-01-03T08:20:24.449199+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46710	212.64.199.97	65525	TCP
2025-01-03T08:20:26.240780+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46712	212.64.199.97	65525	TCP
2025-01-03T08:20:28.021662+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46714	212.64.199.97	65525	TCP
2025-01-03T08:20:29.781696+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46716	212.64.199.97	65525	TCP
2025-01-03T08:20:31.559593+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46718	212.64.199.97	65525	TCP
2025-01-03T08:20:33.348267+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46720	212.64.199.97	65525	TCP
2025-01-03T08:20:35.147704+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46722	212.64.199.97	65525	TCP
2025-01-03T08:20:36.933479+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46724	212.64.199.97	65525	TCP
2025-01-03T08:20:38.704473+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46726	212.64.199.97	65525	TCP
2025-01-03T08:20:40.476870+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46728	212.64.199.97	65525	TCP
2025-01-03T08:20:42.277500+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46730	212.64.199.97	65525	TCP
2025-01-03T08:20:44.071011+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46732	212.64.199.97	65525	TCP
2025-01-03T08:20:45.865453+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46734	212.64.199.97	65525	TCP
2025-01-03T08:20:47.646824+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46736	212.64.199.97	65525	TCP
2025-01-03T08:20:49.450317+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46738	212.64.199.97	65525	TCP
2025-01-03T08:20:51.219207+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46740	212.64.199.97	65525	TCP
2025-01-03T08:20:53.006922+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46742	212.64.199.97	65525	TCP
2025-01-03T08:20:54.788075+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46744	212.64.199.97	65525	TCP
2025-01-03T08:20:56.573447+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46746	212.64.199.97	65525	TCP
2025-01-03T08:20:58.345347+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46748	212.64.199.97	65525	TCP
2025-01-03T08:21:00.116610+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46750	212.64.199.97	65525	TCP
2025-01-03T08:21:01.899451+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46752	212.64.199.97	65525	TCP
2025-01-03T08:21:03.700750+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46754	212.64.199.97	65525	TCP
2025-01-03T08:21:05.475905+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46756	212.64.199.97	65525	TCP
2025-01-03T08:21:07.236362+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46758	212.64.199.97	65525	TCP
2025-01-03T08:21:09.059736+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46760	212.64.199.97	65525	TCP
2025-01-03T08:21:10.856674+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46762	212.64.199.97	65525	TCP
2025-01-03T08:21:12.628806+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46764	212.64.199.97	65525	TCP
2025-01-03T08:21:14.397847+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46766	212.64.199.97	65525	TCP
2025-01-03T08:21:16.177701+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46768	212.64.199.97	65525	TCP
2025-01-03T08:21:17.939280+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46770	212.64.199.97	65525	TCP
2025-01-03T08:21:19.730143+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46772	212.64.199.97	65525	TCP
2025-01-03T08:21:21.504575+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46774	212.64.199.97	65525	TCP
2025-01-03T08:21:23.292824+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46776	212.64.199.97	65525	TCP
2025-01-03T08:21:25.064873+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46780	212.64.199.97	65525	TCP
2025-01-03T08:21:26.851167+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46782	212.64.199.97	65525	TCP
2025-01-03T08:21:28.611226+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46784	212.64.199.97	65525	TCP
2025-01-03T08:21:30.377790+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46786	212.64.199.97	65525	TCP
2025-01-03T08:21:32.171509+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46788	212.64.199.97	65525	TCP
2025-01-03T08:21:33.958715+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46790	212.64.199.97	65525	TCP
2025-01-03T08:21:35.740124+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46792	212.64.199.97	65525	TCP
2025-01-03T08:21:37.519755+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46794	212.64.199.97	65525	TCP
2025-01-03T08:21:39.283126+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46796	212.64.199.97	65525	TCP
2025-01-03T08:21:41.069154+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46798	212.64.199.97	65525	TCP
2025-01-03T08:21:42.846847+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46800	212.64.199.97	65525	TCP
2025-01-03T08:21:44.652782+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46802	212.64.199.97	65525	TCP
2025-01-03T08:21:46.492413+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46804	212.64.199.97	65525	TCP
2025-01-03T08:21:48.285252+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46806	212.64.199.97	65525	TCP
2025-01-03T08:21:50.071817+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46808	212.64.199.97	65525	TCP
2025-01-03T08:21:51.852441+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46810	212.64.199.97	65525	TCP
2025-01-03T08:21:53.633301+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46812	212.64.199.97	65525	TCP
2025-01-03T08:21:55.393822+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46814	212.64.199.97	65525	TCP
2025-01-03T08:21:57.179161+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46816	212.64.199.97	65525	TCP
2025-01-03T08:21:58.962146+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46818	212.64.199.97	65525	TCP
2025-01-03T08:22:00.742499+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46820	212.64.199.97	65525	TCP
2025-01-03T08:22:02.520301+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46822	212.64.199.97	65525	TCP
2025-01-03T08:22:04.300523+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46824	212.64.199.97	65525	TCP
2025-01-03T08:22:06.105497+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46826	212.64.199.97	65525	TCP
2025-01-03T08:22:07.897846+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46828	212.64.199.97	65525	TCP
2025-01-03T08:22:09.676915+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46830	212.64.199.97	65525	TCP
2025-01-03T08:22:11.449449+0100	2848448	1	A Network Trojan was detected	192.168.2.14	46832	212.64.199.97	65525	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: armv7l.elf	Virustotal: Detection: 42%			Perma Link
Source: armv7l.elf	ReversingLabs: Detection: 39%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/armv7l.elf (PID: 5576)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.14:46590 -> 212.64.199.97:65525

Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46590 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46592 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46622 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46596 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46612 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46774 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46798 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46650 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46786 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46602 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46630 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46594 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46626 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46624 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46664 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46640 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46642 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46820 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46768 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46608 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46618 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46782 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46654 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46652 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46604 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46656 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46616 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46754 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46600 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46692 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46644 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46752 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46606 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46800 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46686 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46666 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46638 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46784 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46720 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46724 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46728 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46746 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46762 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46628 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46610 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46828 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46772 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46614 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46680 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46598 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46632 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46710 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46682 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46636 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46744 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46620 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46714 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46790 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46668 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46648 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46634 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46700 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46758 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46684 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46826 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46726 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46756 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46810 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46646 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46660 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46822 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46702 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46808 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46662 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46760 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46658 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46706 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46690 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46718 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46780 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46688 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46672 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46722 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46704 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46742 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46708 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46770 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46730 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46794 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46736 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46738 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46776 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46806 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46750 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46796 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46824 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46676 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46812 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46792 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46764 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46802 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46670 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46732 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46814 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46678 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46740 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46674 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46766 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46696 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46748 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46694 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46698 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46712 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46804 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46734 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46716 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46830 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46788 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46832 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46816 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.14:46818 -> 212.64.199.97:65525

Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: armv7l.elf, 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	String found in binary or memory: http://212.64.199.97/Simps/mips
Source: armv7l.elf, 5576.1.00007f2984017000.00007f298403b000.r-x.sdmp, armv7l.elf, 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: armv7l.elf, 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: armv7l.elf, 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: armv7l.elf	String found in binary or memory: http://upx.sf.net

Source: LOAD without section mappings

Program segment: 0x8000

Source: classification engine

Classification label: mal72.spre.troj.evad.linELF@0/1@2/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/armv7l.elf (PID: 5576)

Log file created: /tmp/Infected.log

Jump to dropped file

Source: armv7l.elf

Submission file: segment LOAD with 7.9779 entropy (max. 8.0)

Source: /tmp/armv7l.elf (PID: 5576)

Queries kernel information via 'uname':

Jump to behavior

Source: armv7l.elf, 5576.1.000055f2c46e2000.000055f2c4930000.rw-.sdmp, armv7l.elf, 5578.1.000055f2c46e2000.000055f2c4930000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: armv7l.elf, 5576.1.00007ffcace58000.00007ffcace79000.rw-.sdmp, armv7l.elf, 5578.1.00007ffcace58000.00007ffcace79000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/armv7l.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/armv7l.elf
Source: armv7l.elf, 5576.1.000055f2c46e2000.000055f2c4930000.rw-.sdmp, armv7l.elf, 5578.1.000055f2c46e2000.000055f2c4930000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: armv7l.elf, 5576.1.00007ffcace58000.00007ffcace79000.rw-.sdmp, armv7l.elf, 5578.1.00007ffcace58000.00007ffcace79000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5576.1.00007f2984017000.00007f298403b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv7l.elf PID: 5576, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv7l.elf PID: 5578, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5576.1.00007f2984017000.00007f298403b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv7l.elf PID: 5576, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv7l.elf PID: 5578, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
armv7l.elf	43%	Virustotal		Browse
armv7l.elf	39%	ReversingLabs	Linux.Trojan.Gafgyt

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://upx.sf.net	armv7l.elf	false	high
http://212.64.199.97/Simps/mips	armv7l.elf, 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	false	high
http://schemas.xmlsoap.org/soap/encoding/	armv7l.elf, 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	false	high
http://purenetworks.com/HNAP1/	armv7l.elf, 5576.1.00007f2984017000.00007f298403b000.r-x.sdmp, armv7l.elf, 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	false	high
http://schemas.xmlsoap.org/soap/envelope/	armv7l.elf, 5578.1.00007f2984017000.00007f298403b000.r-x.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
212.64.199.97	unknown	Turkey		12599	ATLAS-ASTR	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
212.64.199.97	i586.elf	Get hash	malicious	Mirai	Browse
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	armv6l.elf	Get hash	malicious	Mirai	Browse
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	armv4l.elf	Get hash	malicious	Mirai	Browse
	mipsel.elf	Get hash	malicious	Mirai	Browse
	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	powerpc.elf	Get hash	malicious	Mirai	Browse
	i686.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	i586.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	2.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	armv6l.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	armv4l.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	mipsel.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	i686.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	X86_64.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	4.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ATLAS-ASTR	i586.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.64.199.97
	mips.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	armv6l.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.64.199.97
	armv4l.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	mipsel.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.64.199.97
	powerpc.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	i686.elf	Get hash	malicious	Mirai	Browse	212.64.199.97

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/Infected.log

Download File

Process:	/tmp/armv7l.elf
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	149
Entropy (8bit):	5.041576920829991
Encrypted:	false
SSDEEP:	3:xRbQRAZvbFhSZWFBAK8dAuFUJ4gnicMMIVDt8TovZ2XCRA5Adcovn:xR0qvbFhSZW8K8djmHicNoDt8kBSKBcy
MD5:	68CEF17158AB7C78815F4829CA182DF0
SHA1:	1964BD86E351AE38341975A5A35C2A606093220E
SHA-256:	8CB5D165724D5990B6C6161D24AD22E55328C2CF72E46B58104EFE0CC07E82E3
SHA-512:	C39117FAEEB6103E531FDBDD517BB259A1E21E2C0F67B203D8AA8787F5D11F3CC090BCE9E951146C7CB163E1F36F15C3AEAF82CCE953DF715CD59BE7846206FA
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	Thank You For Your Services...This Device Has successfully Been Infected..With Malware By Simps Botnet ;)..\| instagram: @ur0a_ \| Discord: UR0A#2199..

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (GNU/Linux), statically linked, no section header
Entropy (8bit):	7.9910602118997
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	armv7l.elf
File size:	87'812 bytes
MD5:	d2fe42521426a409d2f9fd13cdebc9fb
SHA1:	defa78308a19fb64db0916a3ac50a1c5fffa96b3
SHA256:	d31f949cbb7aee983fd9c1a7e806a51258fa0c315f658ae8d7a0d795b089231e
SHA512:	77e980691782fecf67a358872044822fe7349e4295a041b705d395ed64cb936591e7dc5bc237510dfd51203f764f22c8468ef9be7eea7dbfde17cb6c7f8adb4d
SSDEEP:	1536:Vs4P7mpvJ8l4ZoTFJZSHVa8/LI63/ZxXDvNoe92Xtd0IEj:aoypKl4Zo3Z0/LIS/ZRCO2XkIk
TLSH:	46831284E963C617D7504EF1CBAC31815D2BDFACC6D876B7A0C5A816E78584433E8B1B
File Content Preview:	.ELF..............(......-..4...........4. ...(.....................u...u...............P...P...P...................Q.td............................?..`UPX!....................j..........?.E.h;....#..$...o...8..._*.Mv...!@.........8..kh..>..A....f.....2l.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0x12d88
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8000	0x8000	0xbf75	0xbf75	7.9779	0x5	R E	0x8000
LOAD	0x2e50	0x3ae50	0x3ae50	0x0	0x0	0.0000	0x6	RW	0x8000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-03T08:18:37.450120+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46590	212.64.199.97	65525	TCP
2025-01-03T08:18:39.234673+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46592	212.64.199.97	65525	TCP
2025-01-03T08:18:40.998784+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46594	212.64.199.97	65525	TCP
2025-01-03T08:18:42.770123+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46596	212.64.199.97	65525	TCP
2025-01-03T08:18:44.553407+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46598	212.64.199.97	65525	TCP
2025-01-03T08:18:46.332239+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46600	212.64.199.97	65525	TCP
2025-01-03T08:18:48.092206+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46602	212.64.199.97	65525	TCP
2025-01-03T08:18:49.884081+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46604	212.64.199.97	65525	TCP
2025-01-03T08:18:51.678383+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46606	212.64.199.97	65525	TCP
2025-01-03T08:18:53.457449+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46608	212.64.199.97	65525	TCP
2025-01-03T08:18:55.240158+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46610	212.64.199.97	65525	TCP
2025-01-03T08:18:57.014327+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46612	212.64.199.97	65525	TCP
2025-01-03T08:18:58.800453+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46614	212.64.199.97	65525	TCP
2025-01-03T08:19:00.583104+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46616	212.64.199.97	65525	TCP
2025-01-03T08:19:02.379794+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46618	212.64.199.97	65525	TCP
2025-01-03T08:19:04.180959+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46620	212.64.199.97	65525	TCP
2025-01-03T08:19:05.977050+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46622	212.64.199.97	65525	TCP
2025-01-03T08:19:07.776312+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46624	212.64.199.97	65525	TCP
2025-01-03T08:19:09.554946+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46626	212.64.199.97	65525	TCP
2025-01-03T08:19:11.352340+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46628	212.64.199.97	65525	TCP
2025-01-03T08:19:13.125271+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46630	212.64.199.97	65525	TCP
2025-01-03T08:19:14.895059+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46632	212.64.199.97	65525	TCP
2025-01-03T08:19:16.655261+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46634	212.64.199.97	65525	TCP
2025-01-03T08:19:18.426501+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46636	212.64.199.97	65525	TCP
2025-01-03T08:19:20.219787+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46638	212.64.199.97	65525	TCP
2025-01-03T08:19:22.003823+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46640	212.64.199.97	65525	TCP
2025-01-03T08:19:23.806497+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46642	212.64.199.97	65525	TCP
2025-01-03T08:19:25.579172+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46644	212.64.199.97	65525	TCP
2025-01-03T08:19:27.369560+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46646	212.64.199.97	65525	TCP
2025-01-03T08:19:29.140292+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46648	212.64.199.97	65525	TCP
2025-01-03T08:19:30.926753+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46650	212.64.199.97	65525	TCP
2025-01-03T08:19:32.732317+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46652	212.64.199.97	65525	TCP
2025-01-03T08:19:34.505471+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46654	212.64.199.97	65525	TCP
2025-01-03T08:19:36.308876+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46656	212.64.199.97	65525	TCP
2025-01-03T08:19:38.097289+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46658	212.64.199.97	65525	TCP
2025-01-03T08:19:39.879023+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46660	212.64.199.97	65525	TCP
2025-01-03T08:19:41.663807+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46662	212.64.199.97	65525	TCP
2025-01-03T08:19:43.443060+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46664	212.64.199.97	65525	TCP
2025-01-03T08:19:45.202958+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46666	212.64.199.97	65525	TCP
2025-01-03T08:19:46.984512+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46668	212.64.199.97	65525	TCP
2025-01-03T08:19:48.752723+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46670	212.64.199.97	65525	TCP
2025-01-03T08:19:50.535435+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46672	212.64.199.97	65525	TCP
2025-01-03T08:19:52.338079+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46674	212.64.199.97	65525	TCP
2025-01-03T08:19:54.114786+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46676	212.64.199.97	65525	TCP
2025-01-03T08:19:55.875259+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46678	212.64.199.97	65525	TCP
2025-01-03T08:19:57.662091+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46680	212.64.199.97	65525	TCP
2025-01-03T08:19:59.442109+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46682	212.64.199.97	65525	TCP
2025-01-03T08:20:01.255110+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46684	212.64.199.97	65525	TCP
2025-01-03T08:20:03.038656+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46686	212.64.199.97	65525	TCP
2025-01-03T08:20:04.837712+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46688	212.64.199.97	65525	TCP
2025-01-03T08:20:06.615502+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46690	212.64.199.97	65525	TCP
2025-01-03T08:20:08.392760+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46692	212.64.199.97	65525	TCP
2025-01-03T08:20:10.181925+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46694	212.64.199.97	65525	TCP
2025-01-03T08:20:11.957475+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46696	212.64.199.97	65525	TCP
2025-01-03T08:20:13.719170+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46698	212.64.199.97	65525	TCP
2025-01-03T08:20:15.510559+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46700	212.64.199.97	65525	TCP
2025-01-03T08:20:17.306653+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46702	212.64.199.97	65525	TCP
2025-01-03T08:20:19.091147+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46704	212.64.199.97	65525	TCP
2025-01-03T08:20:20.859990+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46706	212.64.199.97	65525	TCP
2025-01-03T08:20:22.650282+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46708	212.64.199.97	65525	TCP
2025-01-03T08:20:24.449199+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46710	212.64.199.97	65525	TCP
2025-01-03T08:20:26.240780+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46712	212.64.199.97	65525	TCP
2025-01-03T08:20:28.021662+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46714	212.64.199.97	65525	TCP
2025-01-03T08:20:29.781696+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46716	212.64.199.97	65525	TCP
2025-01-03T08:20:31.559593+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46718	212.64.199.97	65525	TCP
2025-01-03T08:20:33.348267+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46720	212.64.199.97	65525	TCP
2025-01-03T08:20:35.147704+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46722	212.64.199.97	65525	TCP
2025-01-03T08:20:36.933479+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46724	212.64.199.97	65525	TCP
2025-01-03T08:20:38.704473+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46726	212.64.199.97	65525	TCP
2025-01-03T08:20:40.476870+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46728	212.64.199.97	65525	TCP
2025-01-03T08:20:42.277500+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46730	212.64.199.97	65525	TCP
2025-01-03T08:20:44.071011+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46732	212.64.199.97	65525	TCP
2025-01-03T08:20:45.865453+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46734	212.64.199.97	65525	TCP
2025-01-03T08:20:47.646824+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46736	212.64.199.97	65525	TCP
2025-01-03T08:20:49.450317+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46738	212.64.199.97	65525	TCP
2025-01-03T08:20:51.219207+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46740	212.64.199.97	65525	TCP
2025-01-03T08:20:53.006922+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46742	212.64.199.97	65525	TCP
2025-01-03T08:20:54.788075+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46744	212.64.199.97	65525	TCP
2025-01-03T08:20:56.573447+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46746	212.64.199.97	65525	TCP
2025-01-03T08:20:58.345347+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46748	212.64.199.97	65525	TCP
2025-01-03T08:21:00.116610+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46750	212.64.199.97	65525	TCP
2025-01-03T08:21:01.899451+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46752	212.64.199.97	65525	TCP
2025-01-03T08:21:03.700750+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46754	212.64.199.97	65525	TCP
2025-01-03T08:21:05.475905+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46756	212.64.199.97	65525	TCP
2025-01-03T08:21:07.236362+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46758	212.64.199.97	65525	TCP
2025-01-03T08:21:09.059736+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46760	212.64.199.97	65525	TCP
2025-01-03T08:21:10.856674+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46762	212.64.199.97	65525	TCP
2025-01-03T08:21:12.628806+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46764	212.64.199.97	65525	TCP
2025-01-03T08:21:14.397847+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46766	212.64.199.97	65525	TCP
2025-01-03T08:21:16.177701+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46768	212.64.199.97	65525	TCP
2025-01-03T08:21:17.939280+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46770	212.64.199.97	65525	TCP
2025-01-03T08:21:19.730143+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46772	212.64.199.97	65525	TCP
2025-01-03T08:21:21.504575+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46774	212.64.199.97	65525	TCP
2025-01-03T08:21:23.292824+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46776	212.64.199.97	65525	TCP
2025-01-03T08:21:25.064873+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46780	212.64.199.97	65525	TCP
2025-01-03T08:21:26.851167+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46782	212.64.199.97	65525	TCP
2025-01-03T08:21:28.611226+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46784	212.64.199.97	65525	TCP
2025-01-03T08:21:30.377790+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46786	212.64.199.97	65525	TCP
2025-01-03T08:21:32.171509+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46788	212.64.199.97	65525	TCP
2025-01-03T08:21:33.958715+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46790	212.64.199.97	65525	TCP
2025-01-03T08:21:35.740124+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46792	212.64.199.97	65525	TCP
2025-01-03T08:21:37.519755+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46794	212.64.199.97	65525	TCP
2025-01-03T08:21:39.283126+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46796	212.64.199.97	65525	TCP
2025-01-03T08:21:41.069154+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46798	212.64.199.97	65525	TCP
2025-01-03T08:21:42.846847+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46800	212.64.199.97	65525	TCP
2025-01-03T08:21:44.652782+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46802	212.64.199.97	65525	TCP
2025-01-03T08:21:46.492413+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46804	212.64.199.97	65525	TCP
2025-01-03T08:21:48.285252+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46806	212.64.199.97	65525	TCP
2025-01-03T08:21:50.071817+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46808	212.64.199.97	65525	TCP
2025-01-03T08:21:51.852441+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46810	212.64.199.97	65525	TCP
2025-01-03T08:21:53.633301+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46812	212.64.199.97	65525	TCP
2025-01-03T08:21:55.393822+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46814	212.64.199.97	65525	TCP
2025-01-03T08:21:57.179161+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46816	212.64.199.97	65525	TCP
2025-01-03T08:21:58.962146+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46818	212.64.199.97	65525	TCP
2025-01-03T08:22:00.742499+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46820	212.64.199.97	65525	TCP
2025-01-03T08:22:02.520301+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46822	212.64.199.97	65525	TCP
2025-01-03T08:22:04.300523+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46824	212.64.199.97	65525	TCP
2025-01-03T08:22:06.105497+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46826	212.64.199.97	65525	TCP
2025-01-03T08:22:07.897846+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46828	212.64.199.97	65525	TCP
2025-01-03T08:22:09.676915+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46830	212.64.199.97	65525	TCP
2025-01-03T08:22:11.449449+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.14	46832	212.64.199.97	65525	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 3, 2025 08:18:37.443759918 CET	46590	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:37.448762894 CET	65525	46590	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:37.448843002 CET	46590	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:37.450119972 CET	46590	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:37.454837084 CET	65525	46590	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:39.228806973 CET	65525	46590	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:39.229317904 CET	46590	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:39.229827881 CET	46592	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:39.234200001 CET	65525	46590	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:39.234586954 CET	65525	46592	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:39.234633923 CET	46592	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:39.234673023 CET	46592	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:39.239453077 CET	65525	46592	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:40.993016005 CET	65525	46592	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:40.993359089 CET	46592	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:40.993819952 CET	46594	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:40.998260975 CET	65525	46592	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:40.998714924 CET	65525	46594	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:40.998759985 CET	46594	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:40.998784065 CET	46594	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:41.003918886 CET	65525	46594	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:42.764355898 CET	65525	46594	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:42.764590025 CET	46594	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:42.765234947 CET	46596	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:42.769510031 CET	65525	46594	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:42.770052910 CET	65525	46596	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:42.770088911 CET	46596	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:42.770123005 CET	46596	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:42.774991989 CET	65525	46596	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:44.547703028 CET	65525	46596	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:44.547946930 CET	46596	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:44.548526049 CET	46598	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:44.552778006 CET	65525	46596	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:44.553335905 CET	65525	46598	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:44.553390980 CET	46598	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:44.553406954 CET	46598	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:44.558202982 CET	65525	46598	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:46.326361895 CET	65525	46598	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:46.326709032 CET	46598	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:46.327341080 CET	46600	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:46.331600904 CET	65525	46598	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:46.332139969 CET	65525	46600	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:46.332199097 CET	46600	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:46.332238913 CET	46600	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:46.337064981 CET	65525	46600	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:48.086312056 CET	65525	46600	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:48.086647987 CET	46600	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:48.087220907 CET	46602	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:48.091487885 CET	65525	46600	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:48.092076063 CET	65525	46602	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:48.092140913 CET	46602	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:48.092206001 CET	46602	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:48.098042011 CET	65525	46602	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:49.877717972 CET	65525	46602	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:49.878225088 CET	46602	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:49.879076958 CET	46604	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:49.883148909 CET	65525	46602	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:49.883940935 CET	65525	46604	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:49.884016037 CET	46604	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:49.884080887 CET	46604	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:49.888895035 CET	65525	46604	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:51.672147036 CET	65525	46604	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:51.672653913 CET	46604	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:51.673440933 CET	46606	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:51.677536964 CET	65525	46604	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:51.678248882 CET	65525	46606	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:51.678313017 CET	46606	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:51.678383112 CET	46606	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:51.683163881 CET	65525	46606	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:53.451458931 CET	65525	46606	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:53.451718092 CET	46606	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:53.452502012 CET	46608	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:53.456584930 CET	65525	46606	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:53.457314014 CET	65525	46608	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:53.457385063 CET	46608	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:53.457448959 CET	46608	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:53.462214947 CET	65525	46608	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:55.234066010 CET	65525	46608	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:55.234461069 CET	46608	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:55.235105991 CET	46610	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:55.239377022 CET	65525	46608	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:55.240020990 CET	65525	46610	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:55.240092039 CET	46610	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:55.240158081 CET	46610	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:55.244950056 CET	65525	46610	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:57.008286953 CET	65525	46610	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:57.008596897 CET	46610	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:57.009358883 CET	46612	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:57.013478994 CET	65525	46610	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:57.014189959 CET	65525	46612	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:57.014260054 CET	46612	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:57.014327049 CET	46612	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:57.019079924 CET	65525	46612	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:58.794919968 CET	65525	46612	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:58.795106888 CET	46612	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:58.795577049 CET	46614	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:58.799920082 CET	65525	46612	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:58.800379038 CET	65525	46614	212.64.199.97	192.168.2.14
Jan 3, 2025 08:18:58.800424099 CET	46614	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:58.800452948 CET	46614	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:18:58.805171013 CET	65525	46614	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:00.577249050 CET	65525	46614	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:00.577440023 CET	46614	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:00.578087091 CET	46616	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:00.582227945 CET	65525	46614	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:00.582923889 CET	65525	46616	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:00.582994938 CET	46616	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:00.583103895 CET	46616	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:00.587855101 CET	65525	46616	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:02.373620987 CET	65525	46616	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:02.374124050 CET	46616	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:02.374809980 CET	46618	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:02.379014969 CET	65525	46616	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:02.379714966 CET	65525	46618	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:02.379760981 CET	46618	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:02.379793882 CET	46618	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:02.384574890 CET	65525	46618	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:04.174882889 CET	65525	46618	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:04.175139904 CET	46618	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:04.175947905 CET	46620	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:04.180023909 CET	65525	46618	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:04.180829048 CET	65525	46620	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:04.180897951 CET	46620	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:04.180958986 CET	46620	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:04.185761929 CET	65525	46620	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:05.970858097 CET	65525	46620	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:05.971291065 CET	46620	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:05.972095013 CET	46622	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:05.976186037 CET	65525	46620	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:05.976913929 CET	65525	46622	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:05.976980925 CET	46622	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:05.977050066 CET	46622	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:05.981817961 CET	65525	46622	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:07.770147085 CET	65525	46622	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:07.770438910 CET	46622	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:07.771197081 CET	46624	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:07.775306940 CET	65525	46622	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:07.776160955 CET	65525	46624	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:07.776236057 CET	46624	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:07.776312113 CET	46624	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:07.781090975 CET	65525	46624	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:09.549287081 CET	65525	46624	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:09.549465895 CET	46624	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:09.550036907 CET	46626	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:09.554423094 CET	65525	46624	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:09.554864883 CET	65525	46626	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:09.554910898 CET	46626	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:09.554945946 CET	46626	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:09.559745073 CET	65525	46626	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:11.346653938 CET	65525	46626	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:11.346982002 CET	46626	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:11.347482920 CET	46628	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:11.351835012 CET	65525	46626	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:11.352253914 CET	65525	46628	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:11.352313042 CET	46628	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:11.352339983 CET	46628	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:11.357146025 CET	65525	46628	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:13.119673967 CET	65525	46628	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:13.119869947 CET	46628	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:13.120424032 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:13.124629974 CET	65525	46628	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:13.125188112 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:13.125247002 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:13.125271082 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:13.130104065 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:14.889502048 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:14.889679909 CET	46630	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:14.890166998 CET	46632	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:14.894488096 CET	65525	46630	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:14.894961119 CET	65525	46632	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:14.895018101 CET	46632	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:14.895059109 CET	46632	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:14.899851084 CET	65525	46632	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:16.649434090 CET	65525	46632	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:16.649607897 CET	46632	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:16.650257111 CET	46634	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:16.654546022 CET	65525	46632	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:16.655163050 CET	65525	46634	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:16.655222893 CET	46634	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:16.655261040 CET	46634	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:16.660028934 CET	65525	46634	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:18.420847893 CET	65525	46634	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:18.421055079 CET	46634	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:18.421586037 CET	46636	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:18.425909042 CET	65525	46634	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:18.426409960 CET	65525	46636	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:18.426471949 CET	46636	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:18.426501036 CET	46636	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:18.431257010 CET	65525	46636	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:20.213959932 CET	65525	46636	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:20.214351892 CET	46636	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:20.214975119 CET	46638	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:20.219153881 CET	65525	46636	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:20.219682932 CET	65525	46638	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:20.219729900 CET	46638	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:20.219786882 CET	46638	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:20.224575996 CET	65525	46638	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:21.998013973 CET	65525	46638	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:21.998308897 CET	46638	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:21.998908043 CET	46640	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:22.003161907 CET	65525	46638	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:22.003730059 CET	65525	46640	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:22.003812075 CET	46640	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:22.003823042 CET	46640	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:22.008589029 CET	65525	46640	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:23.800575018 CET	65525	46640	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:23.800901890 CET	46640	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:23.801492929 CET	46642	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:23.805757999 CET	65525	46640	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:23.806360006 CET	65525	46642	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:23.806469917 CET	46642	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:23.806497097 CET	46642	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:23.811230898 CET	65525	46642	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:25.573116064 CET	65525	46642	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:25.573555946 CET	46642	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:25.574259043 CET	46644	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:25.578413010 CET	65525	46642	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:25.579094887 CET	65525	46644	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:25.579149961 CET	46644	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:25.579171896 CET	46644	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:25.583962917 CET	65525	46644	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:27.363123894 CET	65525	46644	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:27.363369942 CET	46644	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:27.364068985 CET	46646	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:27.368257046 CET	65525	46644	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:27.369452000 CET	65525	46646	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:27.369517088 CET	46646	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:27.369560003 CET	46646	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:27.374643087 CET	65525	46646	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:29.134164095 CET	65525	46646	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:29.134613037 CET	46646	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:29.135320902 CET	46648	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:29.139522076 CET	65525	46646	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:29.140188932 CET	65525	46648	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:29.140273094 CET	46648	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:29.140291929 CET	46648	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:29.145097971 CET	65525	46648	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:30.920758963 CET	65525	46648	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:30.921298027 CET	46648	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:30.921838999 CET	46650	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:30.926136017 CET	65525	46648	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:30.926609039 CET	65525	46650	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:30.926697016 CET	46650	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:30.926753044 CET	46650	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:30.931543112 CET	65525	46650	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:32.726248980 CET	65525	46650	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:32.726759911 CET	46650	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:32.727380037 CET	46652	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:32.731565952 CET	65525	46650	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:32.732170105 CET	65525	46652	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:32.732256889 CET	46652	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:32.732316971 CET	46652	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:32.737101078 CET	65525	46652	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:34.499294043 CET	65525	46652	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:34.499809980 CET	46652	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:34.500492096 CET	46654	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:34.504597902 CET	65525	46652	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:34.505316019 CET	65525	46654	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:34.505399942 CET	46654	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:34.505470991 CET	46654	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:34.510270119 CET	65525	46654	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:36.301868916 CET	65525	46654	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:36.302123070 CET	46654	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:36.302866936 CET	46656	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:36.308228016 CET	65525	46654	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:36.308736086 CET	65525	46656	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:36.308809042 CET	46656	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:36.308876038 CET	46656	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:36.313653946 CET	65525	46656	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:38.091279030 CET	65525	46656	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:38.091552019 CET	46656	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:38.092329979 CET	46658	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:38.096462011 CET	65525	46656	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:38.097157955 CET	65525	46658	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:38.097240925 CET	46658	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:38.097289085 CET	46658	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:38.102057934 CET	65525	46658	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:39.873049021 CET	65525	46658	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:39.873358965 CET	46658	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:39.874057055 CET	46660	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:39.878228903 CET	65525	46658	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:39.878889084 CET	65525	46660	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:39.878968000 CET	46660	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:39.879023075 CET	46660	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:39.883830070 CET	65525	46660	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:41.657540083 CET	65525	46660	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:41.657805920 CET	46660	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:41.658282042 CET	46662	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:41.663470030 CET	65525	46660	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:41.663703918 CET	65525	46662	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:41.663749933 CET	46662	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:41.663806915 CET	46662	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:41.669828892 CET	65525	46662	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:43.436949015 CET	65525	46662	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:43.437349081 CET	46662	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:43.438132048 CET	46664	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:43.442132950 CET	65525	46662	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:43.442918062 CET	65525	46664	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:43.442996979 CET	46664	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:43.443059921 CET	46664	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:43.447879076 CET	65525	46664	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:45.196877956 CET	65525	46664	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:45.197256088 CET	46664	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:45.198040962 CET	46666	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:45.202128887 CET	65525	46664	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:45.202804089 CET	65525	46666	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:45.202897072 CET	46666	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:45.202958107 CET	46666	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:45.207726002 CET	65525	46666	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:46.978276014 CET	65525	46666	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:46.978727102 CET	46666	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:46.979540110 CET	46668	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:46.983515978 CET	65525	46666	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:46.984379053 CET	65525	46668	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:46.984457016 CET	46668	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:46.984512091 CET	46668	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:46.989306927 CET	65525	46668	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:48.746850014 CET	65525	46668	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:48.747066021 CET	46668	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:48.747806072 CET	46670	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:48.751889944 CET	65525	46668	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:48.752592087 CET	65525	46670	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:48.752676010 CET	46670	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:48.752722979 CET	46670	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:48.757503986 CET	65525	46670	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:50.529175997 CET	65525	46670	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:50.529690027 CET	46670	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:50.530376911 CET	46672	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:50.534526110 CET	65525	46670	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:50.535295010 CET	65525	46672	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:50.535373926 CET	46672	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:50.535434961 CET	46672	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:50.540157080 CET	65525	46672	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:52.332125902 CET	65525	46672	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:52.332496881 CET	46672	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:52.333129883 CET	46674	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:52.337316036 CET	65525	46672	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:52.337944031 CET	65525	46674	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:52.338021040 CET	46674	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:52.338078976 CET	46674	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:52.342823029 CET	65525	46674	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:54.109179020 CET	65525	46674	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:54.109422922 CET	46674	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:54.109889984 CET	46676	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:54.114162922 CET	65525	46674	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:54.114684105 CET	65525	46676	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:54.114746094 CET	46676	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:54.114785910 CET	46676	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:54.119566917 CET	65525	46676	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:55.869093895 CET	65525	46676	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:55.869429111 CET	46676	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:55.870338917 CET	46678	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:55.874172926 CET	65525	46676	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:55.875168085 CET	65525	46678	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:55.875231028 CET	46678	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:55.875258923 CET	46678	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:55.880044937 CET	65525	46678	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:57.655848980 CET	65525	46678	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:57.656272888 CET	46678	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:57.657114983 CET	46680	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:57.661168098 CET	65525	46678	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:57.661978960 CET	65525	46680	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:57.662029028 CET	46680	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:57.662091017 CET	46680	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:57.666877985 CET	65525	46680	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:59.435935020 CET	65525	46680	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:59.436399937 CET	46680	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:59.437171936 CET	46682	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:59.441211939 CET	65525	46680	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:59.441968918 CET	65525	46682	212.64.199.97	192.168.2.14
Jan 3, 2025 08:19:59.442054987 CET	46682	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:59.442109108 CET	46682	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:19:59.446877956 CET	65525	46682	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:01.248997927 CET	65525	46682	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:01.249301910 CET	46682	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:01.250082016 CET	46684	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:01.254168987 CET	65525	46682	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:01.254980087 CET	65525	46684	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:01.255055904 CET	46684	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:01.255110025 CET	46684	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:01.259850979 CET	65525	46684	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:03.032797098 CET	65525	46684	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:03.033047915 CET	46684	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:03.033721924 CET	46686	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:03.037842989 CET	65525	46684	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:03.038506985 CET	65525	46686	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:03.038589954 CET	46686	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:03.038655996 CET	46686	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:03.043406010 CET	65525	46686	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:04.831947088 CET	65525	46686	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:04.832166910 CET	46686	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:04.832835913 CET	46688	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:04.837002993 CET	65525	46686	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:04.837618113 CET	65525	46688	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:04.837672949 CET	46688	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:04.837712049 CET	46688	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:04.842504025 CET	65525	46688	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:06.609472036 CET	65525	46688	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:06.609890938 CET	46688	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:06.610590935 CET	46690	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:06.614692926 CET	65525	46688	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:06.615386963 CET	65525	46690	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:06.615439892 CET	46690	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:06.615502119 CET	46690	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:06.620301008 CET	65525	46690	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:08.386579037 CET	65525	46690	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:08.387022018 CET	46690	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:08.387773991 CET	46692	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:08.391817093 CET	65525	46690	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:08.392591000 CET	65525	46692	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:08.392692089 CET	46692	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:08.392760038 CET	46692	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:08.397511005 CET	65525	46692	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:10.176176071 CET	65525	46692	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:10.176382065 CET	46692	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:10.177047014 CET	46694	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:10.181262970 CET	65525	46692	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:10.181812048 CET	65525	46694	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:10.181900024 CET	46694	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:10.181925058 CET	46694	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:10.186769962 CET	65525	46694	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:11.951082945 CET	65525	46694	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:11.951634884 CET	46694	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:11.952481031 CET	46696	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:11.956470013 CET	65525	46694	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:11.957329035 CET	65525	46696	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:11.957408905 CET	46696	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:11.957474947 CET	46696	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:11.962224960 CET	65525	46696	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:13.713316917 CET	65525	46696	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:13.713499069 CET	46696	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:13.714292049 CET	46698	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:13.718334913 CET	65525	46696	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:13.719058990 CET	65525	46698	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:13.719145060 CET	46698	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:13.719170094 CET	46698	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:13.723978043 CET	65525	46698	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:15.504746914 CET	65525	46698	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:15.505019903 CET	46698	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:15.505556107 CET	46700	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:15.509875059 CET	65525	46698	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:15.510482073 CET	65525	46700	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:15.510540962 CET	46700	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:15.510559082 CET	46700	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:15.515413046 CET	65525	46700	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:17.301104069 CET	65525	46700	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:17.301281929 CET	46700	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:17.301774025 CET	46702	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:17.306111097 CET	65525	46700	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:17.306560993 CET	65525	46702	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:17.306621075 CET	46702	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:17.306653023 CET	46702	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:17.311389923 CET	65525	46702	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:19.085510969 CET	65525	46702	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:19.085706949 CET	46702	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:19.086241007 CET	46704	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:19.090528011 CET	65525	46702	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:19.091026068 CET	65525	46704	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:19.091078043 CET	46704	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:19.091146946 CET	46704	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:19.095954895 CET	65525	46704	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:20.853964090 CET	65525	46704	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:20.854296923 CET	46704	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:20.855082989 CET	46706	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:20.859107971 CET	65525	46704	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:20.859839916 CET	65525	46706	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:20.859921932 CET	46706	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:20.859989882 CET	46706	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:20.864751101 CET	65525	46706	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:22.644695997 CET	65525	46706	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:22.644874096 CET	46706	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:22.645426989 CET	46708	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:22.649708986 CET	65525	46706	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:22.650190115 CET	65525	46708	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:22.650248051 CET	46708	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:22.650281906 CET	46708	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:22.655086994 CET	65525	46708	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:24.443595886 CET	65525	46708	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:24.443754911 CET	46708	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:24.444230080 CET	46710	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:24.448621035 CET	65525	46708	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:24.449043036 CET	65525	46710	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:24.449125051 CET	46710	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:24.449198961 CET	46710	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:24.453977108 CET	65525	46710	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:26.234906912 CET	65525	46710	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:26.235086918 CET	46710	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:26.235873938 CET	46712	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:26.239923954 CET	65525	46710	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:26.240678072 CET	65525	46712	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:26.240766048 CET	46712	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:26.240780115 CET	46712	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:26.245572090 CET	65525	46712	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:28.015928984 CET	65525	46712	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:28.016227961 CET	46712	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:28.016818047 CET	46714	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:28.021121025 CET	65525	46712	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:28.021579027 CET	65525	46714	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:28.021634102 CET	46714	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:28.021661997 CET	46714	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:28.026447058 CET	65525	46714	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:29.776144981 CET	65525	46714	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:29.776304960 CET	46714	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:29.776834011 CET	46716	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:29.781172991 CET	65525	46714	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:29.781570911 CET	65525	46716	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:29.781661987 CET	46716	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:29.781696081 CET	46716	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:29.786469936 CET	65525	46716	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:31.553926945 CET	65525	46716	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:31.554128885 CET	46716	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:31.554732084 CET	46718	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:31.558934927 CET	65525	46716	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:31.559510946 CET	65525	46718	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:31.559566975 CET	46718	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:31.559592962 CET	46718	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:31.564353943 CET	65525	46718	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:33.342413902 CET	65525	46718	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:33.342576027 CET	46718	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:33.343297958 CET	46720	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:33.347418070 CET	65525	46718	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:33.348149061 CET	65525	46720	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:33.348247051 CET	46720	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:33.348267078 CET	46720	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:33.353014946 CET	65525	46720	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:35.142000914 CET	65525	46720	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:35.142182112 CET	46720	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:35.142832041 CET	46722	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:35.147017002 CET	65525	46720	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:35.147619963 CET	65525	46722	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:35.147680998 CET	46722	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:35.147703886 CET	46722	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:35.152471066 CET	65525	46722	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:36.927401066 CET	65525	46722	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:36.927778959 CET	46722	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:36.927844048 CET	46722	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:36.928586006 CET	46724	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:36.932599068 CET	65525	46722	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:36.933355093 CET	65525	46724	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:36.933412075 CET	46724	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:36.933479071 CET	46724	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:36.938215017 CET	65525	46724	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:38.698285103 CET	65525	46724	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:38.698545933 CET	46724	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:38.699516058 CET	46726	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:38.703476906 CET	65525	46724	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:38.704329967 CET	65525	46726	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:38.704406023 CET	46726	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:38.704473019 CET	46726	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:38.709198952 CET	65525	46726	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:40.471225023 CET	65525	46726	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:40.471424103 CET	46726	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:40.472002029 CET	46728	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:40.476263046 CET	65525	46726	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:40.476779938 CET	65525	46728	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:40.476838112 CET	46728	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:40.476870060 CET	46728	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:40.481673002 CET	65525	46728	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:42.271712065 CET	65525	46728	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:42.271884918 CET	46728	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:42.272617102 CET	46730	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:42.276726007 CET	65525	46728	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:42.277417898 CET	65525	46730	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:42.277477026 CET	46730	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:42.277499914 CET	46730	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:42.282334089 CET	65525	46730	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:44.065359116 CET	65525	46730	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:44.065512896 CET	46730	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:44.066121101 CET	46732	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:44.070383072 CET	65525	46730	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:44.070929050 CET	65525	46732	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:44.070986986 CET	46732	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:44.071011066 CET	46732	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:44.075752974 CET	65525	46732	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:45.858791113 CET	65525	46732	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:45.859098911 CET	46732	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:45.860488892 CET	46734	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:45.863970041 CET	65525	46732	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:45.865318060 CET	65525	46734	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:45.865397930 CET	46734	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:45.865453005 CET	46734	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:45.870215893 CET	65525	46734	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:47.641294003 CET	65525	46734	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:47.641443968 CET	46734	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:47.641889095 CET	46736	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:47.646225929 CET	65525	46734	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:47.646704912 CET	65525	46736	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:47.646771908 CET	46736	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:47.646823883 CET	46736	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:47.651577950 CET	65525	46736	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:49.444139957 CET	65525	46736	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:49.444425106 CET	46736	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:49.445207119 CET	46738	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:49.449280024 CET	65525	46736	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:49.450190067 CET	65525	46738	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:49.450251102 CET	46738	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:49.450316906 CET	46738	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:49.455100060 CET	65525	46738	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:51.213464975 CET	65525	46738	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:51.213635921 CET	46738	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:51.214396000 CET	46740	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:51.218420029 CET	65525	46738	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:51.219136953 CET	65525	46740	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:51.219189882 CET	46740	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:51.219207048 CET	46740	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:51.223938942 CET	65525	46740	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:53.001014948 CET	65525	46740	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:53.001199961 CET	46740	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:53.002053022 CET	46742	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:53.005947113 CET	65525	46740	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:53.006819963 CET	65525	46742	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:53.006908894 CET	46742	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:53.006922007 CET	46742	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:53.011653900 CET	65525	46742	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:54.781924963 CET	65525	46742	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:54.782327890 CET	46742	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:54.783159971 CET	46744	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:54.787130117 CET	65525	46742	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:54.787935019 CET	65525	46744	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:54.788017035 CET	46744	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:54.788074970 CET	46744	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:54.792792082 CET	65525	46744	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:56.567724943 CET	65525	46744	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:56.567886114 CET	46744	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:56.568448067 CET	46746	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:56.572664976 CET	65525	46744	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:56.573261976 CET	65525	46746	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:56.573435068 CET	46746	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:56.573446989 CET	46746	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:56.578202009 CET	65525	46746	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:58.339579105 CET	65525	46746	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:58.339879990 CET	46746	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:58.340447903 CET	46748	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:58.344692945 CET	65525	46746	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:58.345261097 CET	65525	46748	212.64.199.97	192.168.2.14
Jan 3, 2025 08:20:58.345319033 CET	46748	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:58.345346928 CET	46748	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:20:58.350111008 CET	65525	46748	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:00.110882998 CET	65525	46748	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:00.111089945 CET	46748	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:00.111764908 CET	46750	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:00.115889072 CET	65525	46748	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:00.116512060 CET	65525	46750	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:00.116599083 CET	46750	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:00.116610050 CET	46750	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:00.121366978 CET	65525	46750	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:01.893714905 CET	65525	46750	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:01.893913031 CET	46750	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:01.894495010 CET	46752	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:01.898787022 CET	65525	46750	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:01.899308920 CET	65525	46752	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:01.899386883 CET	46752	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:01.899451017 CET	46752	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:01.904156923 CET	65525	46752	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:03.694247961 CET	65525	46752	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:03.694559097 CET	46752	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:03.695154905 CET	46754	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:03.700093985 CET	65525	46752	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:03.700664997 CET	65525	46754	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:03.700726986 CET	46754	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:03.700750113 CET	46754	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:03.706064939 CET	65525	46754	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:05.470273018 CET	65525	46754	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:05.470482111 CET	46754	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:05.471038103 CET	46756	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:05.475301027 CET	65525	46754	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:05.475828886 CET	65525	46756	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:05.475888014 CET	46756	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:05.475904942 CET	46756	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:05.480622053 CET	65525	46756	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:07.231024027 CET	65525	46756	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:07.231203079 CET	46756	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:07.231547117 CET	46758	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:07.235986948 CET	65525	46756	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:07.236294985 CET	65525	46758	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:07.236346006 CET	46758	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:07.236361980 CET	46758	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:07.241225004 CET	65525	46758	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:09.054150105 CET	65525	46758	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:09.054352999 CET	46758	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:09.054882050 CET	46760	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:09.059165955 CET	65525	46758	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:09.059644938 CET	65525	46760	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:09.059704065 CET	46760	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:09.059736013 CET	46760	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:09.064505100 CET	65525	46760	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:10.850702047 CET	65525	46760	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:10.850955009 CET	46760	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:10.851696014 CET	46762	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:10.855838060 CET	65525	46760	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:10.856523991 CET	65525	46762	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:10.856604099 CET	46762	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:10.856673956 CET	46762	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:10.861407995 CET	65525	46762	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:12.622445107 CET	65525	46762	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:12.622937918 CET	46762	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:12.623887062 CET	46764	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:12.627721071 CET	65525	46762	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:12.628669024 CET	65525	46764	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:12.628757954 CET	46764	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:12.628806114 CET	46764	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:12.633529902 CET	65525	46764	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:14.391514063 CET	65525	46764	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:14.392050982 CET	46764	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:14.392872095 CET	46766	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:14.396913052 CET	65525	46764	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:14.397703886 CET	65525	46766	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:14.397788048 CET	46766	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:14.397846937 CET	46766	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:14.402574062 CET	65525	46766	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:16.169476032 CET	65525	46766	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:16.169748068 CET	46766	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:16.170509100 CET	46768	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:16.176517963 CET	65525	46766	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:16.177557945 CET	65525	46768	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:16.177623034 CET	46768	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:16.177700996 CET	46768	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:16.184436083 CET	65525	46768	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:17.933685064 CET	65525	46768	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:17.933850050 CET	46768	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:17.934369087 CET	46770	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:17.938642025 CET	65525	46768	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:17.939210892 CET	65525	46770	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:17.939269066 CET	46770	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:17.939280033 CET	46770	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:17.943996906 CET	65525	46770	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:19.724265099 CET	65525	46770	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:19.724473953 CET	46770	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:19.725096941 CET	46772	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:19.729466915 CET	65525	46770	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:19.730051041 CET	65525	46772	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:19.730117083 CET	46772	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:19.730143070 CET	46772	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:19.735058069 CET	65525	46772	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:21.498800039 CET	65525	46772	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:21.498961926 CET	46772	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:21.499624014 CET	46774	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:21.503813982 CET	65525	46772	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:21.504472017 CET	65525	46774	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:21.504559040 CET	46774	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:21.504575014 CET	46774	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:21.509381056 CET	65525	46774	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:23.286989927 CET	65525	46774	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:23.287079096 CET	46774	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:23.287960052 CET	46776	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:23.291845083 CET	65525	46774	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:23.292746067 CET	65525	46776	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:23.292798996 CET	46776	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:23.292824030 CET	46776	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:23.297565937 CET	65525	46776	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:23.532367945 CET	45346	53	192.168.2.14	8.8.8.8
Jan 3, 2025 08:21:23.537276983 CET	53	45346	8.8.8.8	192.168.2.14
Jan 3, 2025 08:21:23.537347078 CET	45346	53	192.168.2.14	8.8.8.8
Jan 3, 2025 08:21:23.537363052 CET	45346	53	192.168.2.14	8.8.8.8
Jan 3, 2025 08:21:23.537363052 CET	45346	53	192.168.2.14	8.8.8.8
Jan 3, 2025 08:21:23.542201042 CET	53	45346	8.8.8.8	192.168.2.14
Jan 3, 2025 08:21:23.542211056 CET	53	45346	8.8.8.8	192.168.2.14
Jan 3, 2025 08:21:24.002825022 CET	53	45346	8.8.8.8	192.168.2.14
Jan 3, 2025 08:21:24.002969980 CET	45346	53	192.168.2.14	8.8.8.8
Jan 3, 2025 08:21:24.137820005 CET	53	45346	8.8.8.8	192.168.2.14
Jan 3, 2025 08:21:24.137897015 CET	45346	53	192.168.2.14	8.8.8.8
Jan 3, 2025 08:21:25.059305906 CET	65525	46776	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:25.059472084 CET	46776	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:25.059982061 CET	46780	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:25.064270020 CET	65525	46776	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:25.064811945 CET	65525	46780	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:25.064872980 CET	46780	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:25.064872980 CET	46780	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:25.069675922 CET	65525	46780	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:26.003036022 CET	53	45346	8.8.8.8	192.168.2.14
Jan 3, 2025 08:21:26.003199100 CET	45346	53	192.168.2.14	8.8.8.8
Jan 3, 2025 08:21:26.008338928 CET	53	45346	8.8.8.8	192.168.2.14
Jan 3, 2025 08:21:26.845633984 CET	65525	46780	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:26.845774889 CET	46780	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:26.846286058 CET	46782	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:26.850614071 CET	65525	46780	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:26.851092100 CET	65525	46782	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:26.851140976 CET	46782	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:26.851166964 CET	46782	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:26.856067896 CET	65525	46782	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:28.605504990 CET	65525	46782	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:28.605756044 CET	46782	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:28.606229067 CET	46784	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:28.610533953 CET	65525	46782	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:28.611145973 CET	65525	46784	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:28.611198902 CET	46784	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:28.611226082 CET	46784	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:28.616131067 CET	65525	46784	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:30.372073889 CET	65525	46784	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:30.372365952 CET	46784	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:30.372920036 CET	46786	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:30.377130032 CET	65525	46784	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:30.377701044 CET	65525	46786	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:30.377758026 CET	46786	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:30.377789974 CET	46786	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:30.382544041 CET	65525	46786	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:32.165920019 CET	65525	46786	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:32.166089058 CET	46786	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:32.166609049 CET	46788	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:32.170929909 CET	65525	46786	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:32.171437025 CET	65525	46788	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:32.171488047 CET	46788	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:32.171509027 CET	46788	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:32.176259995 CET	65525	46788	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:33.953020096 CET	65525	46788	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:33.953341007 CET	46788	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:33.953860044 CET	46790	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:33.958189964 CET	65525	46788	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:33.958637953 CET	65525	46790	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:33.958695889 CET	46790	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:33.958714962 CET	46790	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:33.963473082 CET	65525	46790	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:35.734493017 CET	65525	46790	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:35.734633923 CET	46790	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:35.735181093 CET	46792	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:35.739473104 CET	65525	46790	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:35.740042925 CET	65525	46792	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:35.740101099 CET	46792	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:35.740123987 CET	46792	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:35.744839907 CET	65525	46792	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:37.513468981 CET	65525	46792	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:37.514117956 CET	46792	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:37.514849901 CET	46794	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:37.519193888 CET	65525	46792	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:37.519679070 CET	65525	46794	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:37.519733906 CET	46794	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:37.519754887 CET	46794	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:37.524487019 CET	65525	46794	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:39.277030945 CET	65525	46794	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:39.277555943 CET	46794	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:39.278218031 CET	46796	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:39.282371044 CET	65525	46794	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:39.283015013 CET	65525	46796	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:39.283071995 CET	46796	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:39.283126116 CET	46796	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:39.287863016 CET	65525	46796	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:41.061805964 CET	65525	46796	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:41.062475920 CET	46796	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:41.063258886 CET	46798	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:41.068836927 CET	65525	46796	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:41.069015980 CET	65525	46798	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:41.069098949 CET	46798	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:41.069154024 CET	46798	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:41.074717999 CET	65525	46798	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:42.840797901 CET	65525	46798	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:42.841197968 CET	46798	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:42.841888905 CET	46800	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:42.846086025 CET	65525	46798	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:42.846710920 CET	65525	46800	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:42.846779108 CET	46800	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:42.846847057 CET	46800	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:42.851664066 CET	65525	46800	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:44.646519899 CET	65525	46800	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:44.646909952 CET	46800	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:44.647814035 CET	46802	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:44.651662111 CET	65525	46800	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:44.652656078 CET	65525	46802	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:44.652714968 CET	46802	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:44.652781963 CET	46802	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:44.657552958 CET	65525	46802	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:46.486126900 CET	65525	46802	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:46.486591101 CET	46802	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:46.487509012 CET	46804	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:46.491394043 CET	65525	46802	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:46.492270947 CET	65525	46804	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:46.492355108 CET	46804	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:46.492413044 CET	46804	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:46.497215033 CET	65525	46804	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:48.279597998 CET	65525	46804	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:48.279788017 CET	46804	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:48.280395031 CET	46806	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:48.284630060 CET	65525	46804	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:48.285141945 CET	65525	46806	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:48.285222054 CET	46806	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:48.285252094 CET	46806	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:48.290021896 CET	65525	46806	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:50.065841913 CET	65525	46806	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:50.066138029 CET	46806	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:50.066864967 CET	46808	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:50.071048975 CET	65525	46806	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:50.071731091 CET	65525	46808	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:50.071789980 CET	46808	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:50.071816921 CET	46808	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:50.076632977 CET	65525	46808	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:51.846734047 CET	65525	46808	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:51.846962929 CET	46808	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:51.847574949 CET	46810	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:51.851820946 CET	65525	46808	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:51.852345943 CET	65525	46810	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:51.852426052 CET	46810	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:51.852441072 CET	46810	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:51.857250929 CET	65525	46810	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:53.627703905 CET	65525	46810	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:53.627911091 CET	46810	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:53.628454924 CET	46812	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:53.632673979 CET	65525	46810	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:53.633217096 CET	65525	46812	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:53.633275986 CET	46812	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:53.633301020 CET	46812	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:53.638016939 CET	65525	46812	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:55.388175011 CET	65525	46812	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:55.388355970 CET	46812	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:55.388951063 CET	46814	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:55.393246889 CET	65525	46812	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:55.393712044 CET	65525	46814	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:55.393795967 CET	46814	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:55.393821955 CET	46814	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:55.398603916 CET	65525	46814	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:57.173286915 CET	65525	46814	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:57.173645973 CET	46814	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:57.174242020 CET	46816	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:57.178411961 CET	65525	46814	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:57.179063082 CET	65525	46816	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:57.179141998 CET	46816	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:57.179161072 CET	46816	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:57.183891058 CET	65525	46816	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:58.955806017 CET	65525	46816	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:58.956357956 CET	46816	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:58.957159996 CET	46818	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:58.961144924 CET	65525	46816	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:58.962007999 CET	65525	46818	212.64.199.97	192.168.2.14
Jan 3, 2025 08:21:58.962089062 CET	46818	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:58.962146044 CET	46818	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:21:58.966875076 CET	65525	46818	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:00.736875057 CET	65525	46818	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:00.737030029 CET	46818	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:00.737581015 CET	46820	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:00.741910934 CET	65525	46818	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:00.742419958 CET	65525	46820	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:00.742499113 CET	46820	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:00.742499113 CET	46820	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:00.747251987 CET	65525	46820	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:02.514651060 CET	65525	46820	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:02.514904022 CET	46820	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:02.515453100 CET	46822	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:02.519773006 CET	65525	46820	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:02.520215988 CET	65525	46822	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:02.520275116 CET	46822	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:02.520301104 CET	46822	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:02.525058031 CET	65525	46822	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:04.294603109 CET	65525	46822	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:04.294909954 CET	46822	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:04.295617104 CET	46824	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:04.299772978 CET	65525	46822	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:04.300425053 CET	65525	46824	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:04.300512075 CET	46824	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:04.300523043 CET	46824	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:04.305305958 CET	65525	46824	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:06.099245071 CET	65525	46824	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:06.099662066 CET	46824	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:06.100461960 CET	46826	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:06.104506969 CET	65525	46824	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:06.105318069 CET	65525	46826	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:06.105401993 CET	46826	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:06.105496883 CET	46826	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:06.110318899 CET	65525	46826	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:07.892035961 CET	65525	46826	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:07.892221928 CET	46826	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:07.892916918 CET	46828	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:07.897069931 CET	65525	46826	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:07.897737026 CET	65525	46828	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:07.897830009 CET	46828	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:07.897845984 CET	46828	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:07.902672052 CET	65525	46828	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:09.671191931 CET	65525	46828	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:09.671410084 CET	46828	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:09.671988964 CET	46830	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:09.676251888 CET	65525	46828	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:09.676832914 CET	65525	46830	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:09.676886082 CET	46830	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:09.676914930 CET	46830	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:09.681699991 CET	65525	46830	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:11.443798065 CET	65525	46830	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:11.443958044 CET	46830	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:11.444551945 CET	46832	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:11.448790073 CET	65525	46830	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:11.449376106 CET	65525	46832	212.64.199.97	192.168.2.14
Jan 3, 2025 08:22:11.449420929 CET	46832	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:11.449449062 CET	46832	65525	192.168.2.14	212.64.199.97
Jan 3, 2025 08:22:11.454150915 CET	65525	46832	212.64.199.97	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 3, 2025 08:21:23.537363052 CET	192.168.2.14	8.8.8.8	0x6ff4	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 08:21:23.537363052 CET	192.168.2.14	8.8.8.8	0xa673	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 3, 2025 08:21:24.002825022 CET	8.8.8.8	192.168.2.14	0x6ff4	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 3, 2025 08:21:24.002825022 CET	8.8.8.8	192.168.2.14	0x6ff4	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: armv7l.elf PID: 5576, Parent PID: 5494

General

Start time (UTC):	07:18:36
Start date (UTC):	03/01/2025
Path:	/tmp/armv7l.elf
Arguments:	/tmp/armv7l.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv7l.elf PID: 5578, Parent PID: 5576

General

Start time (UTC):	07:18:36
Start date (UTC):	03/01/2025
Path:	/tmp/armv7l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv7l.elf PID: 5580, Parent PID: 5578

General

Start time (UTC):	07:18:36
Start date (UTC):	03/01/2025
Path:	/tmp/armv7l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report armv7l.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/Infected.log

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: armv7l.elf PID: 5576, Parent PID: 5494

General

Chronological Activities

Analysis Process: armv7l.elf PID: 5578, Parent PID: 5576

General

Chronological Activities

Analysis Process: armv7l.elf PID: 5580, Parent PID: 5578

General

Chronological Activities

Linux Analysis Report
armv7l.elf