Edit tour

Linux Analysis Report
bash.elf

Overview

General Information

Sample name:	bash.elf
Analysis ID:	1583675
MD5:	3b6c49e9b1419a842a50e1246eabd218
SHA1:	0ec594a4c4c5fad595463b729f0ce4e82ced520c
SHA256:	6239ab80943ee25c9d4f52ea1bf7c42aeb337cc68bec748c318afb8a25c23a92
Tags:	CobaltStrikeelfmalwareuser-Joker
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Drops invisible ELF files

Sample is packed with UPX

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Sample and/or dropped files contains symbols with suspicious names

Sample contains only a LOAD segment without any section mappings

Sample tries to set the executable flag

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Writes ELF files to disk

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583675
Start date and time:	2025-01-03 10:09:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	bash.elf
Detection:	MAL
Classification:	mal56.evad.linELF@0/1@0/0

Runtime Messages

Command:	/tmp/bash.elf
PID:	6264
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

bash.elf (PID: 6264, Parent: 6189, MD5: 3b6c49e9b1419a842a50e1246eabd218) Arguments: /tmp/bash.elf

bash.elf New Fork (PID: 6265, Parent: 6264)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: bash.elf	Virustotal: Detection: 21%			Perma Link
Source: bash.elf	ReversingLabs: Detection: 21%

Source: global traffic

TCP traffic: 192.168.2.23:57558 -> 107.173.129.144:8088

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144
Source: unknown	TCP traffic detected without corresponding DNS query: 107.173.129.144

Source: bash.elf	String found in binary or memory: http://upx.sf.net
Source: bash.elf, 6264.1.0000000000400000.000000000078d000.r-x.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: bash.elf, 6264.1.0000000000400000.000000000078d000.r-x.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.htmlRAND

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: .sys.rrcache.data.13.dr	ELF static info symbol of dropped file: find_payload
Source: .sys.rrcache.data.13.dr	ELF static info symbol of dropped file: find_payload

Source: LOAD without section mappings

Program segment: 0x400000

Source: classification engine

Classification label: mal56.evad.linELF@0/1@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/bash.elf (PID: 6265)	File: /tmp/.sys.rrcache.data			Jump to behavior
Source: /tmp/bash.elf (PID: 6265)	Directory: /tmp/.sys.rrcache.data			Jump to behavior

Source: /tmp/bash.elf (PID: 6265)

File: /tmp/.sys.rrcache.data (bits: - usr: rwx grp: rwx all: rwx)

Jump to behavior

Source: /tmp/bash.elf (PID: 6265)

File written: /tmp/.sys.rrcache.data

Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Drops invisible ELF files

Source: /tmp/bash.elf (PID: 6265)

ELF file: /tmp/.sys.rrcache.data

Jump to dropped file

Source: bash.elf

Submission file: segment LOAD with 7.9135 entropy (max. 8.0)

Source: /tmp/bash.elf (PID: 6264)	Queries kernel information via 'uname':			Jump to behavior
Source: /tmp/bash.elf (PID: 6265)	Queries kernel information via 'uname':			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File and Directory Permissions Modification	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Hidden Files and Directories	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Obfuscated Files or Information	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
bash.elf	22%	Virustotal		Browse
bash.elf	21%	ReversingLabs	Linux.Trojan.CobaltStrike

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://upx.sf.net	bash.elf	false	high
http://www.openssl.org/support/faq.htmlRAND	bash.elf, 6264.1.0000000000400000.000000000078d000.r-x.sdmp	false	high
http://www.openssl.org/support/faq.html	bash.elf, 6264.1.0000000000400000.000000000078d000.r-x.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
107.173.129.144	unknown	United States	36352	AS-COLOCROSSINGUS	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
107.173.129.144	cats.elf	Get hash	malicious	ConnectBack	Browse
91.189.91.43	ARMV5L.elf	Get hash	malicious	Unknown	Browse
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse
	cedhat	Get hash	malicious	Kaiji	Browse
	arc.elf	Get hash	malicious	Unknown	Browse
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	x86_64.elf	Get hash	malicious	Mirai	Browse
91.189.91.42	ARMV5L.elf	Get hash	malicious	Unknown	Browse
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse
	cedhat	Get hash	malicious	Kaiji	Browse
	arc.elf	Get hash	malicious	Unknown	Browse
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	powerpc.elf	Get hash	malicious	Mirai	Browse
	x86.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	ARMV5L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	cedhat	Get hash	malicious	Kaiji	Browse	91.189.91.42
	arc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	i586.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	spc.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	x86.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	armv6l.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
AS-COLOCROSSINGUS	cats.elf	Get hash	malicious	ConnectBack	Browse	107.173.129.144
	DEMONS.sh4.elf	Get hash	malicious	Unknown	Browse	172.245.26.218
	sh4.elf	Get hash	malicious	Unknown	Browse	23.94.37.42
	powerpc.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	i586.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	m68k.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	sparc.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	i686.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	x86_64.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	arm.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
CANONICAL-ASGB	ARMV5L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	cedhat	Get hash	malicious	Kaiji	Browse	91.189.91.42
	arc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	i586.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	spc.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	x86.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	armv6l.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
INIT7CH	ARMV5L.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	cedhat	Get hash	malicious	Kaiji	Browse	109.202.202.202
	arc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	powerpc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	x86.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/.sys.rrcache.data

Download File

Process:	/tmp/bash.elf
File Type:	ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce90e2f4aeef8818145242f45c36ee6abae5e860, not stripped
Category:	dropped
Size (bytes):	15848
Entropy (8bit):	2.35679004290514
Encrypted:	false
SSDEEP:	96:RwEfJBWBRby7q6oFTuv/qlCit/Sj/xITK8P4g8PIqfVdEMFw7/GBQoBVW+iVmGxo:RzJ8u7loFTuvaCiP28Qg881CvXFi0
MD5:	19FAA1162A159D3BD61C0E5E8FA4F74E
SHA1:	F25B2EF046FA78330A8B7A0DEBF0BF57C5E24FFC
SHA-256:	97262884DF7FC117999A419129DBDFA2D4E8DFEB89E76E492F28A464B5D06D92
SHA-512:	58B85143C833377DEF09276C9B1C71FCF39A80D9C94132E35D92B14AC43773A7A621EF43C01F6DBAE88E5A88DE4A003BCCDAF48F85327739574DADC87EB5491D
Malicious:	true
Reputation:	low
Preview:	.ELF..............>.............@........6..........@.8...@.............................................................................................................................. ....... ....... .......................................-.......=.......=......H.......P................................>.......>......................................8.......8.......8.......$.......$...............P.td....@"......@"......@"......D.......D...............Q.td....................................................R.td.....-.......=.......=..........................................GNU........RB.\6.j...`....................... ..$.............O}....A...B.\ &...%..................................................... ...................n.......................u........................... ...........................................\|.......................,... ...................F..."...................................................D...............................j.......U.......i...............

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, no section header
Entropy (8bit):	7.907995318468537
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	bash.elf
File size:	1'441'232 bytes
MD5:	3b6c49e9b1419a842a50e1246eabd218
SHA1:	0ec594a4c4c5fad595463b729f0ce4e82ced520c
SHA256:	6239ab80943ee25c9d4f52ea1bf7c42aeb337cc68bec748c318afb8a25c23a92
SHA512:	601d46275093227fd10e9b2f9193b6aac57a77f77dae08101ad0e55c487a199a23688da9e4b4fcc76a4a6a7930213251e21d85ea1034c7d9cadb02bcaddeb73a
SSDEEP:	24576:nAHgTVEYTG8g9dnGU3XNqW+E8C73G+xY3/My4c763Gheij87uptkuLpIXEfsxl:n2E5g9hbXUjHQ3G33Uy4+zj87rcpIXEa
TLSH:	2E6523D6C05C1DF291352827A46A7BA13E212D6B2B3D38982D9FEDC3CBB80E54D556CC
File Content Preview:	.ELF..............>.......U.....@...................@.8...@.......................@.......@....................... ......................7.......7..............................Q.td....................................................1..gUPX!8.......H.:.H.:

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x55b3c8
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	64
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x400000	0x400000	0x15bbf3	0x15bbf3	7.9135	0x5	R E	0x200000
LOAD	0x7b0	0x9a37b0	0x9a37b0	0x0	0x0	0.0000	0x6	RW	0x1000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x10

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 3, 2025 10:09:49.367971897 CET	57558	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.373008966 CET	8088	57558	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:49.373064995 CET	57558	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.373513937 CET	57558	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.374490023 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.378298998 CET	8088	57558	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:49.378339052 CET	57558	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.379228115 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:49.379281044 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.380073071 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.384799004 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:49.847373009 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:49.847569942 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.975276947 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:49.975456953 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.979398012 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:49.984181881 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:50.088303089 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:50.088479042 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:50.219218969 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:50.219285965 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:50.220752001 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:50.225492001 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:50.327486038 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:50.327646971 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:50.327773094 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:50.327832937 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:50.327845097 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:50.331106901 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:50.331545115 CET	57560	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:50.335891008 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:50.336283922 CET	8088	57560	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:51.510816097 CET	43928	443	192.168.2.23	91.189.91.42
Jan 3, 2025 10:09:54.332576990 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:54.337438107 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:54.337522984 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:54.338351011 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:54.343137980 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:54.806123018 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:54.806318998 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:54.938585043 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:54.938734055 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:54.942780972 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:54.947580099 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:55.051420927 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:55.051465988 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:55.178615093 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:55.178782940 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:55.180197954 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:55.184931993 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:55.286521912 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:55.286715984 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:55.286780119 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:55.286828995 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:55.286855936 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:55.290527105 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:55.290999889 CET	57562	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:55.295238972 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:55.295725107 CET	8088	57562	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:57.142066002 CET	42836	443	192.168.2.23	91.189.91.43
Jan 3, 2025 10:09:58.677948952 CET	42516	80	192.168.2.23	109.202.202.202
Jan 3, 2025 10:09:59.292673111 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:59.297521114 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:59.297640085 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:59.298990011 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:59.303777933 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:59.775381088 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:59.775743961 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:59.904305935 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:09:59.904628992 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:59.912388086 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:09:59.917143106 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:00.022604942 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:00.022945881 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:00.152096033 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:00.152407885 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:00.154624939 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:00.159398079 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:00.262504101 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:00.262628078 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:00.262888908 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:00.262901068 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:00.262952089 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:00.269418955 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:00.270245075 CET	57564	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:00.274241924 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:00.275022030 CET	8088	57564	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:04.272329092 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:04.277219057 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:04.277463913 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:04.278889894 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:04.283626080 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:04.762685061 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:04.762954950 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:04.894320965 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:04.894402981 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:04.902070999 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:04.906807899 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:05.015074968 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:05.015270948 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:05.146224022 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:05.146362066 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:05.148828983 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:05.154927015 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:05.261423111 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:05.261557102 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:05.261725903 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:05.261810064 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:05.261821032 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:05.267647028 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:05.268357992 CET	57566	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:05.272356033 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:05.273047924 CET	8088	57566	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:09.270412922 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:09.275322914 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:09.275398016 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:09.276802063 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:09.281548023 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:09.744209051 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:09.744302988 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:09.874609947 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:09.874670982 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:09.879059076 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:09.883816957 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:09.987503052 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:09.987663031 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:10.114511967 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:10.114758015 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:10.117223024 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:10.122014046 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:10.224877119 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:10.224936962 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:10.225291967 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:10.225306034 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:10.225330114 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:10.229824066 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:10.230329990 CET	57568	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:10.234669924 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:10.235064983 CET	8088	57568	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:12.243851900 CET	43928	443	192.168.2.23	91.189.91.42
Jan 3, 2025 10:10:14.231230021 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:14.236114025 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:14.236161947 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:14.236886978 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:14.241677999 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:14.735080957 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:14.735244989 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:14.867402077 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:14.867510080 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:14.871620893 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:14.876401901 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:14.993491888 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:14.993647099 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:15.127342939 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:15.127450943 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:15.129931927 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:15.134758949 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:15.245439053 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:15.245585918 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:15.245676994 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:15.245790005 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:15.245834112 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:15.251637936 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:15.252444029 CET	57570	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:15.256383896 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:15.257189035 CET	8088	57570	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:19.254463911 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:19.259413958 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:19.259464025 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:19.260304928 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:19.265065908 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:19.748086929 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:19.748357058 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:19.884293079 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:19.884612083 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:19.888772964 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:19.893558979 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:20.002397060 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:20.002537012 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:20.136332035 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:20.136513948 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:20.138955116 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:20.143695116 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:20.250217915 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:20.250358105 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:20.250600100 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:20.250655890 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:20.250690937 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:20.255898952 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:20.256361008 CET	57572	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:20.260663986 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:20.261152983 CET	8088	57572	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:24.257879019 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:24.262773037 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:24.262841940 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:24.264292955 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:24.269062996 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:24.530256033 CET	42836	443	192.168.2.23	91.189.91.43
Jan 3, 2025 10:10:24.733951092 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:24.734267950 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:24.959849119 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:24.959955931 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:24.963707924 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:24.968427896 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:25.072004080 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:25.072282076 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:25.158658028 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:25.158724070 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:25.161026001 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:25.165802956 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:25.267302036 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:25.267581940 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:25.267683029 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:25.267719984 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:25.267759085 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:25.273118019 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:25.273840904 CET	57574	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:25.277842999 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:25.278604984 CET	8088	57574	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:28.625684023 CET	42516	80	192.168.2.23	109.202.202.202
Jan 3, 2025 10:10:29.275959015 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:29.280827045 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:29.280896902 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:29.282291889 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:29.287049055 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:29.772787094 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:29.773129940 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:29.906234980 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:29.906346083 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:29.913608074 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:29.918346882 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:30.030066013 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:30.030210018 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:30.166248083 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:30.166337967 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:30.168797016 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:30.173520088 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:30.281553984 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:30.281696081 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:30.281785965 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:30.281821012 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:30.281903982 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:30.286674023 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:30.287117958 CET	57576	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:30.291459084 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:30.291919947 CET	8088	57576	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:34.288778067 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:34.293724060 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:34.293800116 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:34.295006990 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:34.299869061 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:34.769933939 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:34.770123005 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:34.898617983 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:34.898792028 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:34.903126001 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:34.907886982 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:35.019433022 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:35.019536018 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:35.146457911 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:35.146496058 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:35.147689104 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:35.341734886 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:35.447065115 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:35.447161913 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:35.447463036 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:35.447490931 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:35.447493076 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:35.452680111 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:35.453418970 CET	57578	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:35.457487106 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:35.458208084 CET	8088	57578	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:39.454999924 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:39.459897995 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:39.459954977 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:39.460768938 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:39.465517998 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:39.955418110 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:39.955497026 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.181895971 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:40.181955099 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.186062098 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.190785885 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:40.301322937 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:40.301386118 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.393584013 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:40.393728971 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.396450996 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.401292086 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:40.509027958 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:40.509119987 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.509253979 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:40.509310961 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.509326935 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:40.516360998 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.517286062 CET	57580	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:40.521105051 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:40.522030115 CET	8088	57580	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:44.518671989 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:44.523514032 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:44.523574114 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:44.524321079 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:44.529048920 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.024105072 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.024230957 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.160072088 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.160156965 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.164613008 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.169370890 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.282629967 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.282691956 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.415987015 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.416063070 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.417942047 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.422671080 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.552490950 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.552556992 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.552593946 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.552627087 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.552634954 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.556405067 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.556874990 CET	57582	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:45.561240911 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:45.561631918 CET	8088	57582	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:49.557816982 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:49.562728882 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:49.562864065 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:49.563843966 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:49.568639040 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.114197969 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.114330053 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.158629894 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.158866882 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.162774086 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.167537928 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.268933058 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.269095898 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.398422956 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.398536921 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.400010109 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.404759884 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.505387068 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.505534887 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.505800009 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.505810976 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.505872011 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.509443045 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.509929895 CET	57584	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:50.514169931 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:50.514641047 CET	8088	57584	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:53.198153019 CET	43928	443	192.168.2.23	91.189.91.42
Jan 3, 2025 10:10:54.510977030 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:54.515813112 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:54.515940905 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:54.516817093 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:54.521576881 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:54.998281956 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:54.998543978 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.125868082 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:55.126096010 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.130172014 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.134890079 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:55.248482943 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:55.248591900 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.377728939 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:55.377966881 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.380076885 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.384813070 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:55.495482922 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:55.495600939 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.495809078 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:55.495865107 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.495939016 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:55.501270056 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.501743078 CET	57586	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:55.506047964 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:55.506535053 CET	8088	57586	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:59.502661943 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:59.507587910 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:10:59.507656097 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:59.508644104 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:10:59.513418913 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.002770901 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.002844095 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.140053034 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.140204906 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.144118071 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.148886919 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.258426905 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.258492947 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.395957947 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.396032095 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.397402048 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.402152061 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.508779049 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.508830070 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.509125948 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.509157896 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.509192944 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.512556076 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.513016939 CET	57588	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:00.517314911 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:00.517755032 CET	8088	57588	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:04.513871908 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:04.519237041 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:04.519356966 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:04.520149946 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:04.525242090 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.017549038 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.017791033 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.151196957 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.151520967 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.155539989 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.160286903 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.271435022 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.271868944 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.403141975 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.403506041 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.404938936 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.409683943 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.516094923 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.516334057 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.516510010 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.516562939 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.516637087 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.520180941 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.520643950 CET	57590	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:05.524925947 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:05.525415897 CET	8088	57590	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:09.521681070 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:09.526599884 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:09.526729107 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:09.527709961 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:09.532471895 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.018801928 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.019022942 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.150130033 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.150388956 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.154392004 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.159161091 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.270240068 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.270390034 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.402189016 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.402551889 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.403908968 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.408677101 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.518276930 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.518526077 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.518640041 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.518671036 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.518716097 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.522789001 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.523267031 CET	57592	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:10.527544022 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:10.527997017 CET	8088	57592	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:14.524544954 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:14.530277967 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:14.530388117 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:14.531172991 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:14.535923958 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.007023096 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.007191896 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.136138916 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.136281013 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.143573999 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.148271084 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.252290964 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.252332926 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.388027906 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.388082027 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.390546083 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.395317078 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.497827053 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.497972012 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.498238087 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.498279095 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.498307943 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.503427029 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.504143000 CET	57594	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:15.508168936 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:15.508872986 CET	8088	57594	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:19.505111933 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:19.510021925 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:19.510092020 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:19.511564970 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:19.516314983 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:19.992815971 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:19.992995024 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:20.126071930 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:20.126225948 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:20.132596970 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:20.137343884 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:20.241890907 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:20.242044926 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:20.374006987 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:20.374145031 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:20.376462936 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:20.381206989 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:20.488822937 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:20.488964081 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:20.489599943 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:20.494811058 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:20.495480061 CET	57596	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:20.499573946 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:20.500201941 CET	8088	57596	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:24.497425079 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:24.502290964 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:24.502417088 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:24.503853083 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:24.508620024 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.017719984 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.018049955 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.151871920 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.152071953 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.159634113 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.164388895 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.284941912 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.285007954 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.419832945 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.420044899 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.422470093 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.427249908 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.543427944 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.543529034 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.543750048 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.543804884 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.543829918 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.550302982 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.551187992 CET	57598	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:25.555104017 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:25.555928946 CET	8088	57598	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:29.553494930 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:29.559360981 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:29.559434891 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:29.560837984 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:29.566395998 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.044872046 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.045260906 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.183346987 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.183677912 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.188158989 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.192909956 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.299350023 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.299699068 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.430020094 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.430351973 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.432781935 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.437570095 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.542957067 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.543121099 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.543323994 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.543363094 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.543426991 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.546811104 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.547276974 CET	57600	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:30.551561117 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:30.552020073 CET	8088	57600	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:34.548324108 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:34.553174973 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:34.553224087 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:34.554220915 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:34.558944941 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.026823997 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.026982069 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.154347897 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.154516935 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.159218073 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.163973093 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.271919966 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.272068024 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.402314901 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.402371883 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.403753042 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.408516884 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.513636112 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.513792992 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.513921976 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.513961077 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.513991117 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.517782927 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.518464088 CET	57602	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:35.522531986 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:35.523192883 CET	8088	57602	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:39.519334078 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:39.524250031 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:39.524316072 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:39.525115013 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:39.529845953 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:39.989998102 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:39.990076065 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.118387938 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:40.118437052 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.122967958 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.127715111 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:40.233359098 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:40.233416080 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.362252951 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:40.362315893 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.363692999 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.368432999 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:40.470804930 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:40.470870018 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.471148968 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:40.471187115 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.471266031 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:40.474653959 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.475136042 CET	57604	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:40.479435921 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:40.479876995 CET	8088	57604	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:44.476938963 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:44.481785059 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:44.481853962 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:44.483290911 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:44.488033056 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:44.964327097 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:44.964693069 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.094697952 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:45.095015049 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.102216959 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.110680103 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:45.216599941 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:45.216789961 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.347068071 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:45.347393036 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.349749088 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.354510069 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:45.461340904 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:45.461530924 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.461605072 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:45.461616039 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:45.461677074 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.468147039 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.469016075 CET	57606	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:45.472970009 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:45.473805904 CET	8088	57606	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:49.471290112 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:49.476211071 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:49.476281881 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:49.477694035 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:49.482428074 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:49.957437038 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:49.957961082 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.088018894 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:50.088330984 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.095590115 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.100394011 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:50.206939936 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:50.207135916 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.335966110 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:50.336263895 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.338699102 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.343488932 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:50.449668884 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:50.449764967 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.449932098 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:50.449995041 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.450004101 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:50.455753088 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.456264973 CET	57608	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:50.460521936 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:50.461066008 CET	8088	57608	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:54.457261086 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:54.462199926 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:54.462259054 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:54.463152885 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:54.467962980 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:54.931159019 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:54.931277037 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.058414936 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:55.058526993 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.062889099 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.067733049 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:55.172574997 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:55.172641039 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.302256107 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:55.302304983 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.303580999 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.308307886 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:55.411181927 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:55.411242008 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.411721945 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:55.411756992 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.411772966 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:55.414694071 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.415138960 CET	57610	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:55.419425011 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:55.419852018 CET	8088	57610	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:59.416110039 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:59.421094894 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:59.421144962 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:59.421948910 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:11:59.427040100 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:59.885623932 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:11:59.885781050 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.014277935 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:00.014329910 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.018455982 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.023257017 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:00.125885010 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:00.126040936 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.254183054 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:00.254236937 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.255678892 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.260507107 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:00.360564947 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:00.360611916 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.360837936 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:00.360873938 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.360904932 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:00.364248991 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.364706039 CET	57612	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:00.369069099 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:00.369522095 CET	8088	57612	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:04.365648031 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:04.370575905 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:04.370654106 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:04.371872902 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:04.376630068 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:04.865953922 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:04.866154909 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:04.998125076 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:04.998178959 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.002257109 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.007061958 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:05.283107996 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:05.283296108 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:05.283305883 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:05.283528090 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.283528090 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.283528090 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.286744118 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.292016029 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:05.402607918 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:05.402690887 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.403141022 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:05.403151035 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:05.403194904 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.409315109 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.410142899 CET	57614	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:05.414118052 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:05.414901018 CET	8088	57614	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:09.412198067 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:09.417139053 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:09.417232037 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:09.418546915 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:09.423284054 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:09.911776066 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:09.911968946 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.051778078 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:10.051842928 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.056503057 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.061307907 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:10.171359062 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:10.171498060 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.307950020 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:10.308026075 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.309366941 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.314083099 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:10.421354055 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:10.421544075 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.421638012 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:10.421708107 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.421719074 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:10.426588058 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.427082062 CET	57616	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:10.431430101 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:10.431797028 CET	8088	57616	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:14.428184032 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:14.433048010 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:14.433114052 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:14.434293032 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:14.439011097 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:14.921188116 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:14.921282053 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:15.053996086 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:15.054045916 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:15.058852911 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:15.063638926 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:15.171849966 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:15.171940088 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:15.305891037 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:15.306027889 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:15.308212996 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:15.312978029 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:15.424110889 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:15.424201012 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:15.424307108 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:15.430696011 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:15.431545019 CET	57618	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:15.435448885 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:15.436256886 CET	8088	57618	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:19.433183908 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:19.438086033 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:19.438163042 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:19.439105988 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:19.443856001 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:19.906619072 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:19.906797886 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.034266949 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:20.034420967 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.038388968 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.043129921 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:20.147484064 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:20.147629976 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.274123907 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:20.274313927 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.275767088 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.280483961 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:20.383213997 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:20.383435965 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.384079933 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:20.384136915 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:20.384143114 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.387835026 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.388297081 CET	57620	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:20.392569065 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:20.393047094 CET	8088	57620	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:24.390120983 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:24.394948006 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:24.395078897 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:24.396557093 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:24.401303053 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:24.870784998 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:24.870938063 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:24.998892069 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:24.999094009 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:25.005947113 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:25.010682106 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:25.120568991 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:25.120757103 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:25.254909039 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:25.254971027 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:25.256288052 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:25.261074066 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:25.367114067 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:25.367330074 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:25.367501974 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:25.367511988 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:25.367566109 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:25.374038935 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:25.374890089 CET	57622	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:25.378746986 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:25.379626036 CET	8088	57622	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:29.376171112 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:29.381123066 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:29.381237984 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:29.382242918 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:29.387052059 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:29.846609116 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:29.846807957 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:29.974208117 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:29.974301100 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:29.982311964 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:29.987052917 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:30.087985039 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:30.088138103 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:30.218054056 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:30.218234062 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:30.220967054 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:30.225698948 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:30.328167915 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:30.328365088 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:30.328538895 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:30.328584909 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:30.328619003 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:30.335170984 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:30.335675001 CET	57624	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:30.339906931 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:30.340398073 CET	8088	57624	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:34.336568117 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:34.341475010 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:34.341543913 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:34.342298985 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:34.347060919 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:34.816126108 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:34.816236973 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:34.951848030 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:34.951911926 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:34.955956936 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:34.960696936 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:35.065886974 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:35.066035032 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:35.199881077 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:35.199943066 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:35.206408978 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:35.211167097 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:35.313177109 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:35.313227892 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:35.313539028 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:35.313585043 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:35.313608885 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:35.321902990 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:35.322777987 CET	57626	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:35.326659918 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:35.327470064 CET	8088	57626	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:39.324199915 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:39.329098940 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:39.329171896 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:39.330136061 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:39.334877968 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:39.814662933 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:39.814776897 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:39.946119070 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:39.946162939 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:39.951329947 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:39.956043005 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:40.063055992 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:40.063111067 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:40.194102049 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:40.194179058 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:40.195717096 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:40.200504065 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:40.327095985 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:40.327162981 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:40.327445984 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:40.327486038 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:40.327491999 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:40.332053900 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:40.332644939 CET	57628	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:40.336796045 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:40.337420940 CET	8088	57628	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:44.334011078 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:44.338937998 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:44.339015961 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:44.340046883 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:44.344815969 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:44.828506947 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:44.828742027 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:44.962053061 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:44.962210894 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:44.967531919 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:44.972321987 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:45.080769062 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:45.081043005 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:45.213965893 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:45.214184999 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:45.216587067 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:45.221329927 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:45.329157114 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:45.329463959 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:45.329469919 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:45.329530954 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:45.329616070 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:45.335323095 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:45.336133957 CET	57630	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:45.340050936 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:45.340894938 CET	8088	57630	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:49.338361979 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:49.343270063 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:49.343343973 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:49.344775915 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:49.349523067 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:49.809896946 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:49.810261011 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:49.938077927 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:49.938354015 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:49.945712090 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:49.950458050 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:50.052716017 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:50.052908897 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:50.182033062 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:50.182109118 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:50.184964895 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:50.189743996 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:50.291793108 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:50.291989088 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:50.292237997 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:50.292283058 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:50.292296886 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:50.298959970 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:50.299901962 CET	57632	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:50.303672075 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:50.304652929 CET	8088	57632	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:54.302249908 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:54.307151079 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:54.307223082 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:54.308720112 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:54.313766956 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:54.850059986 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:54.850289106 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:54.986337900 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:54.986489058 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:54.991533041 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:54.996280909 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:55.112410069 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:55.112572908 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:55.246267080 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:55.246474981 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:55.248403072 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:55.253128052 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:55.368818045 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:55.368971109 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:55.369230986 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:55.369286060 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:55.369326115 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:55.374206066 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:55.374747992 CET	57634	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:55.378962994 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:55.379513025 CET	8088	57634	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:59.376044989 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:59.380929947 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:59.381000996 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:59.381947994 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:12:59.386698961 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:59.859061956 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:12:59.859333038 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.152493000 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:00.152832031 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.157661915 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.162381887 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:00.267817020 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:00.268030882 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.356517076 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:00.356580019 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.358351946 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.363123894 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:00.466506958 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:00.466682911 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.466768026 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:00.466813087 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.466851950 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:00.470863104 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.471371889 CET	57636	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:00.475590944 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:00.476109982 CET	8088	57636	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:04.473263025 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:04.478193998 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:04.478255987 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:04.479675055 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:04.484452963 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:04.966955900 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:04.967307091 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.097235918 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:05.097450972 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.105298042 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.110058069 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:05.221688032 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:05.221916914 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.357311964 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:05.357391119 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.359894037 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.364660978 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:05.472001076 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:05.472069979 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.472311974 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:05.472354889 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.472361088 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:05.478610039 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.479424953 CET	57638	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:05.483372927 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:05.484234095 CET	8088	57638	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:09.481141090 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:09.486073971 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:09.486139059 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:09.487071991 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:09.491837978 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:09.952275038 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:09.952403069 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.082251072 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.082360029 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.089622974 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.094376087 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.378735065 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.378751040 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.378757954 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.378909111 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.378909111 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.378909111 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.383513927 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.388437033 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.491132975 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.491244078 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.491411924 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.491424084 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.491456985 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.497351885 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.498143911 CET	57640	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:10.502213001 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:10.502959967 CET	8088	57640	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:14.499707937 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:14.504600048 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:14.504689932 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:14.505559921 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:14.510266066 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:14.979950905 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:14.980144024 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.112138033 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:15.112270117 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.116781950 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.121530056 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:15.232103109 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:15.232144117 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.368155956 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:15.368215084 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.369679928 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.374443054 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:15.478321075 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:15.478367090 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.478696108 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:15.478733063 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.478773117 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:15.482449055 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.482980013 CET	57642	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:15.487261057 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:15.487693071 CET	8088	57642	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:19.484442949 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:19.534194946 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:19.534344912 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:19.535825014 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:19.540611982 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.004601002 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.004800081 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.138617039 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.138668060 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.145906925 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.150641918 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.255386114 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.255465984 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.390877962 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.390924931 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.393373013 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.398129940 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.500108004 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.500180006 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.502315998 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.502326012 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.502355099 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.506275892 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.507020950 CET	57644	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:20.511049986 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:20.511837006 CET	8088	57644	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:24.508865118 CET	57646	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:24.513784885 CET	8088	57646	107.173.129.144	192.168.2.23
Jan 3, 2025 10:13:24.513858080 CET	57646	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:24.515223980 CET	57646	8088	192.168.2.23	107.173.129.144
Jan 3, 2025 10:13:24.519946098 CET	8088	57646	107.173.129.144	192.168.2.23

System Behavior

Analysis Process: bash.elf PID: 6264, Parent PID: 6189

General

Start time (UTC):	09:09:47
Start date (UTC):	03/01/2025
Path:	/tmp/bash.elf
Arguments:	/tmp/bash.elf
File size:	1441232 bytes
MD5 hash:	3b6c49e9b1419a842a50e1246eabd218

Chronological Activities

Analysis Process: bash.elf PID: 6265, Parent PID: 6264

General

Start time (UTC):	09:09:48
Start date (UTC):	03/01/2025
Path:	/tmp/bash.elf
Arguments:	-
File size:	1441232 bytes
MD5 hash:	3b6c49e9b1419a842a50e1246eabd218

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report bash.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/.sys.rrcache.data

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: bash.elf PID: 6264, Parent PID: 6189

General

Chronological Activities

Analysis Process: bash.elf PID: 6265, Parent PID: 6264

General

Chronological Activities

Linux Analysis Report
bash.elf