Edit tour

Linux Analysis Report
m2.elf

Overview

General Information

Sample name:	m2.elf
Analysis ID:	1586093
MD5:	5e2eaff403d02c7986ca438b20fd272b
SHA1:	708c3f1bd05b3672cb20135b22c15c12bbc52c99
SHA256:	78b7c21335ea0e478aa5add259ad0034a132040a51df71645a7de39f28b8f1aa
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Detected TCP or UDP traffic on non-standard ports

Sample has stripped symbol table

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586093
Start date and time:	2025-01-08 17:47:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	m2.elf
Detection:	MAL
Classification:	mal56.linELF@0/0@2/0

Warnings

VT rate limit hit for: m2.elf

Runtime Messages

Command:	/tmp/m2.elf
PID:	5444
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

m2.elf (PID: 5444, Parent: 5366, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/m2.elf

m2.elf New Fork (PID: 5446, Parent: 5444)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

ETPRO MALWARE ELF/Miori Variant CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-08T17:47:54.710934+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52870	77.90.22.16	4564	TCP
2025-01-08T17:47:56.353715+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52872	77.90.22.16	4564	TCP
2025-01-08T17:47:57.989984+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52874	77.90.22.16	4564	TCP
2025-01-08T17:47:59.613399+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52876	77.90.22.16	4564	TCP
2025-01-08T17:48:01.254392+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52878	77.90.22.16	4564	TCP
2025-01-08T17:48:02.882794+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52880	77.90.22.16	4564	TCP
2025-01-08T17:48:04.507969+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52882	77.90.22.16	4564	TCP
2025-01-08T17:48:06.160197+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52884	77.90.22.16	4564	TCP
2025-01-08T17:48:07.870044+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52886	77.90.22.16	4564	TCP
2025-01-08T17:48:09.513277+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52888	77.90.22.16	4564	TCP
2025-01-08T17:48:11.151100+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52890	77.90.22.16	4564	TCP
2025-01-08T17:48:12.796114+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52892	77.90.22.16	4564	TCP
2025-01-08T17:48:14.432139+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52894	77.90.22.16	4564	TCP
2025-01-08T17:48:16.074194+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52896	77.90.22.16	4564	TCP
2025-01-08T17:48:17.708331+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52898	77.90.22.16	4564	TCP
2025-01-08T17:48:19.338858+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52900	77.90.22.16	4564	TCP
2025-01-08T17:48:20.961063+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52902	77.90.22.16	4564	TCP
2025-01-08T17:48:22.585558+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52904	77.90.22.16	4564	TCP
2025-01-08T17:48:24.227101+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52906	77.90.22.16	4564	TCP
2025-01-08T17:48:26.054911+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52908	77.90.22.16	4564	TCP
2025-01-08T17:48:27.695634+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52910	77.90.22.16	4564	TCP
2025-01-08T17:48:29.322927+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52912	77.90.22.16	4564	TCP
2025-01-08T17:48:30.961620+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52914	77.90.22.16	4564	TCP
2025-01-08T17:48:32.621582+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52916	77.90.22.16	4564	TCP
2025-01-08T17:48:34.280119+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52918	77.90.22.16	4564	TCP
2025-01-08T17:48:35.917065+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52920	77.90.22.16	4564	TCP
2025-01-08T17:48:37.557531+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52922	77.90.22.16	4564	TCP
2025-01-08T17:48:39.225381+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52924	77.90.22.16	4564	TCP
2025-01-08T17:48:40.888208+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52926	77.90.22.16	4564	TCP
2025-01-08T17:48:42.522018+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52928	77.90.22.16	4564	TCP
2025-01-08T17:48:44.185364+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52930	77.90.22.16	4564	TCP
2025-01-08T17:48:57.755233+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52932	77.90.22.16	4564	TCP
2025-01-08T17:48:59.397172+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52934	77.90.22.16	4564	TCP
2025-01-08T17:49:01.045010+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52936	77.90.22.16	4564	TCP
2025-01-08T17:49:02.677449+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52938	77.90.22.16	4564	TCP
2025-01-08T17:49:04.325876+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52940	77.90.22.16	4564	TCP
2025-01-08T17:49:05.961897+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52942	77.90.22.16	4564	TCP
2025-01-08T17:49:07.665607+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52944	77.90.22.16	4564	TCP
2025-01-08T17:49:09.325885+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52946	77.90.22.16	4564	TCP
2025-01-08T17:49:10.966647+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52948	77.90.22.16	4564	TCP
2025-01-08T17:49:12.607325+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52950	77.90.22.16	4564	TCP
2025-01-08T17:49:14.247198+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52952	77.90.22.16	4564	TCP
2025-01-08T17:49:15.882305+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52954	77.90.22.16	4564	TCP
2025-01-08T17:49:17.505132+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52956	77.90.22.16	4564	TCP
2025-01-08T17:49:19.159231+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52958	77.90.22.16	4564	TCP
2025-01-08T17:49:20.841867+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52960	77.90.22.16	4564	TCP
2025-01-08T17:49:22.492539+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52962	77.90.22.16	4564	TCP
2025-01-08T17:49:24.123093+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52964	77.90.22.16	4564	TCP
2025-01-08T17:49:25.793697+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52966	77.90.22.16	4564	TCP
2025-01-08T17:49:27.431583+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52968	77.90.22.16	4564	TCP
2025-01-08T17:49:29.075420+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52970	77.90.22.16	4564	TCP
2025-01-08T17:49:30.765328+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52972	77.90.22.16	4564	TCP
2025-01-08T17:49:32.396802+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52974	77.90.22.16	4564	TCP
2025-01-08T17:49:34.039450+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52976	77.90.22.16	4564	TCP
2025-01-08T17:49:35.685010+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52978	77.90.22.16	4564	TCP
2025-01-08T17:49:37.322813+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52980	77.90.22.16	4564	TCP
2025-01-08T17:49:38.964926+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52982	77.90.22.16	4564	TCP
2025-01-08T17:49:40.603769+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52984	77.90.22.16	4564	TCP
2025-01-08T17:49:42.249916+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52986	77.90.22.16	4564	TCP
2025-01-08T17:49:43.885380+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52988	77.90.22.16	4564	TCP
2025-01-08T17:49:45.544539+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52990	77.90.22.16	4564	TCP
2025-01-08T17:49:47.163311+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52992	77.90.22.16	4564	TCP
2025-01-08T17:49:48.807951+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52994	77.90.22.16	4564	TCP
2025-01-08T17:49:50.432157+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52996	77.90.22.16	4564	TCP
2025-01-08T17:49:52.091576+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	52998	77.90.22.16	4564	TCP
2025-01-08T17:49:53.728879+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53000	77.90.22.16	4564	TCP
2025-01-08T17:49:55.374317+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53002	77.90.22.16	4564	TCP
2025-01-08T17:49:57.009935+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53004	77.90.22.16	4564	TCP
2025-01-08T17:49:58.634995+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53006	77.90.22.16	4564	TCP
2025-01-08T17:50:00.291669+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53008	77.90.22.16	4564	TCP
2025-01-08T17:50:01.918077+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53010	77.90.22.16	4564	TCP
2025-01-08T17:50:03.541480+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53012	77.90.22.16	4564	TCP
2025-01-08T17:50:05.182643+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53014	77.90.22.16	4564	TCP
2025-01-08T17:50:06.841473+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53016	77.90.22.16	4564	TCP
2025-01-08T17:50:08.498091+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53018	77.90.22.16	4564	TCP
2025-01-08T17:50:10.115754+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53020	77.90.22.16	4564	TCP
2025-01-08T17:50:11.751968+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53022	77.90.22.16	4564	TCP
2025-01-08T17:50:13.383776+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53024	77.90.22.16	4564	TCP
2025-01-08T17:50:15.012979+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53026	77.90.22.16	4564	TCP
2025-01-08T17:50:16.651490+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53028	77.90.22.16	4564	TCP
2025-01-08T17:50:18.296842+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53030	77.90.22.16	4564	TCP
2025-01-08T17:50:19.944701+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53032	77.90.22.16	4564	TCP
2025-01-08T17:50:21.573434+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53034	77.90.22.16	4564	TCP
2025-01-08T17:50:23.231801+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53036	77.90.22.16	4564	TCP
2025-01-08T17:50:24.900702+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53038	77.90.22.16	4564	TCP
2025-01-08T17:50:26.525698+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53040	77.90.22.16	4564	TCP
2025-01-08T17:50:28.221689+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53042	77.90.22.16	4564	TCP
2025-01-08T17:50:30.193816+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53044	77.90.22.16	4564	TCP
2025-01-08T17:50:31.824485+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53046	77.90.22.16	4564	TCP
2025-01-08T17:50:33.469081+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53048	77.90.22.16	4564	TCP
2025-01-08T17:50:35.104687+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53050	77.90.22.16	4564	TCP
2025-01-08T17:50:36.730047+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53052	77.90.22.16	4564	TCP
2025-01-08T17:50:38.374339+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53054	77.90.22.16	4564	TCP
2025-01-08T17:50:40.071466+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53056	77.90.22.16	4564	TCP
2025-01-08T17:50:41.734084+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53058	77.90.22.16	4564	TCP
2025-01-08T17:50:43.378130+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53060	77.90.22.16	4564	TCP
2025-01-08T17:50:44.990593+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53062	77.90.22.16	4564	TCP
2025-01-08T17:50:46.642613+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53064	77.90.22.16	4564	TCP
2025-01-08T17:50:48.276239+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53066	77.90.22.16	4564	TCP
2025-01-08T17:50:49.932993+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53068	77.90.22.16	4564	TCP
2025-01-08T17:50:51.574795+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53070	77.90.22.16	4564	TCP
2025-01-08T17:50:53.203654+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53072	77.90.22.16	4564	TCP
2025-01-08T17:50:55.009717+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53074	77.90.22.16	4564	TCP
2025-01-08T17:51:08.552503+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53076	77.90.22.16	4564	TCP
2025-01-08T17:51:10.196146+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53078	77.90.22.16	4564	TCP
2025-01-08T17:51:11.855255+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53080	77.90.22.16	4564	TCP
2025-01-08T17:51:13.528321+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53082	77.90.22.16	4564	TCP
2025-01-08T17:51:15.202344+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53084	77.90.22.16	4564	TCP
2025-01-08T17:51:16.839527+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53086	77.90.22.16	4564	TCP
2025-01-08T17:51:18.488693+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53088	77.90.22.16	4564	TCP
2025-01-08T17:51:20.121676+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53090	77.90.22.16	4564	TCP
2025-01-08T17:51:21.746386+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53092	77.90.22.16	4564	TCP
2025-01-08T17:51:23.370039+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53094	77.90.22.16	4564	TCP
2025-01-08T17:51:25.015464+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53096	77.90.22.16	4564	TCP
2025-01-08T17:51:26.639633+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53098	77.90.22.16	4564	TCP
2025-01-08T17:51:28.293857+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53100	77.90.22.16	4564	TCP
2025-01-08T17:51:29.936388+0100	2836615	1	Malware Command and Control Activity Detected	192.168.2.13	53102	77.90.22.16	4564	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: m2.elf

ReversingLabs: Detection: 42%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52892 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52912 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52882 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52880 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52874 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52888 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52896 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52910 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52898 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52916 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53046 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52926 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52924 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52946 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52948 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53002 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52970 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53078 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53012 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52878 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53006 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52928 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53054 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52884 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53092 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52904 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52984 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53028 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53040 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52934 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53064 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52876 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53088 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52936 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52908 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52988 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52886 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53100 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52902 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52962 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52906 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52952 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52990 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52966 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52992 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52944 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52950 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52976 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52872 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52894 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52964 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53020 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53008 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52890 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53038 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52980 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52918 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53032 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52986 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52922 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53074 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53066 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52978 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52932 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52956 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53026 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53052 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52982 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53030 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53056 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53082 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52968 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53044 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53042 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53010 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52920 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52870 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53034 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52940 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52930 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52960 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52958 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53096 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53024 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52996 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53102 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53004 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53058 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53086 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52994 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53062 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53000 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53080 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52972 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53072 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53036 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53068 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53018 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53076 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53060 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53098 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52942 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53014 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53084 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53090 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53048 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53022 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53050 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52938 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52900 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53094 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53070 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52914 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52954 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52974 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:52998 -> 77.90.22.16:4564
Source: Network traffic	Suricata IDS: 2836615 - Severity 1 - ETPRO MALWARE ELF/Miori Variant CnC Activity : 192.168.2.13:53016 -> 77.90.22.16:4564

Source: global traffic

TCP traffic: 192.168.2.13:52870 -> 77.90.22.16:4564

Source: /tmp/m2.elf (PID: 5444)

Socket: 127.0.0.1:12121

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16
Source: unknown	TCP traffic detected without corresponding DNS query: 77.90.22.16

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: mal56.linELF@0/0@2/0

Source: /tmp/m2.elf (PID: 5444)

Queries kernel information via 'uname':

Jump to behavior

Source: m2.elf, 5444.1.0000560b2ca84000.0000560b2cb0b000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: m2.elf, 5444.1.0000560b2ca84000.0000560b2cb0b000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/mipsel
Source: m2.elf, 5444.1.00007ffda6518000.00007ffda6539000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/m2.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/m2.elf
Source: m2.elf, 5444.1.00007ffda6518000.00007ffda6539000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
m2.elf	42%	ReversingLabs	Linux.Trojan.Mirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
77.90.22.16	unknown	Germany		12586	ASGHOSTNETDE	true

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	uYtea.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	uYtea.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	main_arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	2.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	.i.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	la.bot.arm5.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ASGHOSTNETDE	Vhl3X1aYeU.exe	Get hash	malicious	Njrat	Browse	77.90.22.45
	build.exe	Get hash	malicious	RedLine	Browse	77.90.22.45
	server.exe	Get hash	malicious	Njrat	Browse	77.90.22.45
	Fantazy.i486.elf	Get hash	malicious	Unknown	Browse	77.90.25.227
	armv5l.elf	Get hash	malicious	Unknown	Browse	5.231.4.240
	mipsel.elf	Get hash	malicious	Unknown	Browse	5.231.4.240
	powerpc.elf	Get hash	malicious	Unknown	Browse	5.231.4.240
	mips.elf	Get hash	malicious	Unknown	Browse	5.231.4.240
	sparc.elf	Get hash	malicious	Unknown	Browse	5.230.251.14
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	5.230.157.188

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.312237261221069
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	m2.elf
File size:	47'272 bytes
MD5:	5e2eaff403d02c7986ca438b20fd272b
SHA1:	708c3f1bd05b3672cb20135b22c15c12bbc52c99
SHA256:	78b7c21335ea0e478aa5add259ad0034a132040a51df71645a7de39f28b8f1aa
SHA512:	f1fa0ae86fe7bf5ed45d96812b6dc2f1a2ab69224926fcf11083b4983be08ce8401ff1a05c90ef48ebf72f522bd65e6f2a064deb20b11721a25c8240696163b0
SSDEEP:	768:Bzmg0Jsqiq/eLKP6e1Aleb6m+JRMwxg2XiJ9kHA/w0V2mA:MDl/SDUTb6m+JRMwxgl9OUzi
TLSH:	DA23A509EF614E77DC6BDD3755D80B813ACCA50A26793B397934C828F64A90B4BE3C64
File Content Preview:	.ELF....................p.@.4...x.......4. ...(...............@...@.`...`.....................D...D.....`...........Q.td...............................<.1.'!......'.......................<.1.'!.............9'.. ........................<.1.'!... .........9

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400270
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	46712
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0xa320	0x0	0x6	AX	16
.fini	PROGBITS	0x40a440	0xa440	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x40a4a0	0xa4a0	0x9c0	0x0	0x2	A	16
.eh_frame	PROGBITS	0x44b000	0xb000	0x4	0x0	0x3	WA	4
.ctors	PROGBITS	0x44b004	0xb004	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x44b00c	0xb00c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x44b020	0xb020	0x268	0x0	0x3	WA	16
.got	PROGBITS	0x44b290	0xb290	0x384	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x44b614	0xb614	0xc	0x0	0x10000003	WAp	4
.bss	NOBITS	0x44b620	0xb614	0xf840	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0x882	0xb614	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0xb614	0x61	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0xae60	0xae60	5.3653	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0xb000	0x44b000	0x44b000	0x614	0xfe60	4.1621	0x6	RW	0x10000	.eh_frame .ctors .dtors .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-08T17:47:54.710934+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52870	77.90.22.16	4564	TCP
2025-01-08T17:47:56.353715+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52872	77.90.22.16	4564	TCP
2025-01-08T17:47:57.989984+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52874	77.90.22.16	4564	TCP
2025-01-08T17:47:59.613399+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52876	77.90.22.16	4564	TCP
2025-01-08T17:48:01.254392+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52878	77.90.22.16	4564	TCP
2025-01-08T17:48:02.882794+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52880	77.90.22.16	4564	TCP
2025-01-08T17:48:04.507969+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52882	77.90.22.16	4564	TCP
2025-01-08T17:48:06.160197+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52884	77.90.22.16	4564	TCP
2025-01-08T17:48:07.870044+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52886	77.90.22.16	4564	TCP
2025-01-08T17:48:09.513277+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52888	77.90.22.16	4564	TCP
2025-01-08T17:48:11.151100+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52890	77.90.22.16	4564	TCP
2025-01-08T17:48:12.796114+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52892	77.90.22.16	4564	TCP
2025-01-08T17:48:14.432139+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52894	77.90.22.16	4564	TCP
2025-01-08T17:48:16.074194+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52896	77.90.22.16	4564	TCP
2025-01-08T17:48:17.708331+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52898	77.90.22.16	4564	TCP
2025-01-08T17:48:19.338858+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52900	77.90.22.16	4564	TCP
2025-01-08T17:48:20.961063+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52902	77.90.22.16	4564	TCP
2025-01-08T17:48:22.585558+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52904	77.90.22.16	4564	TCP
2025-01-08T17:48:24.227101+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52906	77.90.22.16	4564	TCP
2025-01-08T17:48:26.054911+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52908	77.90.22.16	4564	TCP
2025-01-08T17:48:27.695634+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52910	77.90.22.16	4564	TCP
2025-01-08T17:48:29.322927+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52912	77.90.22.16	4564	TCP
2025-01-08T17:48:30.961620+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52914	77.90.22.16	4564	TCP
2025-01-08T17:48:32.621582+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52916	77.90.22.16	4564	TCP
2025-01-08T17:48:34.280119+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52918	77.90.22.16	4564	TCP
2025-01-08T17:48:35.917065+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52920	77.90.22.16	4564	TCP
2025-01-08T17:48:37.557531+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52922	77.90.22.16	4564	TCP
2025-01-08T17:48:39.225381+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52924	77.90.22.16	4564	TCP
2025-01-08T17:48:40.888208+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52926	77.90.22.16	4564	TCP
2025-01-08T17:48:42.522018+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52928	77.90.22.16	4564	TCP
2025-01-08T17:48:44.185364+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52930	77.90.22.16	4564	TCP
2025-01-08T17:48:57.755233+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52932	77.90.22.16	4564	TCP
2025-01-08T17:48:59.397172+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52934	77.90.22.16	4564	TCP
2025-01-08T17:49:01.045010+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52936	77.90.22.16	4564	TCP
2025-01-08T17:49:02.677449+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52938	77.90.22.16	4564	TCP
2025-01-08T17:49:04.325876+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52940	77.90.22.16	4564	TCP
2025-01-08T17:49:05.961897+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52942	77.90.22.16	4564	TCP
2025-01-08T17:49:07.665607+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52944	77.90.22.16	4564	TCP
2025-01-08T17:49:09.325885+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52946	77.90.22.16	4564	TCP
2025-01-08T17:49:10.966647+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52948	77.90.22.16	4564	TCP
2025-01-08T17:49:12.607325+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52950	77.90.22.16	4564	TCP
2025-01-08T17:49:14.247198+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52952	77.90.22.16	4564	TCP
2025-01-08T17:49:15.882305+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52954	77.90.22.16	4564	TCP
2025-01-08T17:49:17.505132+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52956	77.90.22.16	4564	TCP
2025-01-08T17:49:19.159231+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52958	77.90.22.16	4564	TCP
2025-01-08T17:49:20.841867+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52960	77.90.22.16	4564	TCP
2025-01-08T17:49:22.492539+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52962	77.90.22.16	4564	TCP
2025-01-08T17:49:24.123093+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52964	77.90.22.16	4564	TCP
2025-01-08T17:49:25.793697+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52966	77.90.22.16	4564	TCP
2025-01-08T17:49:27.431583+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52968	77.90.22.16	4564	TCP
2025-01-08T17:49:29.075420+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52970	77.90.22.16	4564	TCP
2025-01-08T17:49:30.765328+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52972	77.90.22.16	4564	TCP
2025-01-08T17:49:32.396802+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52974	77.90.22.16	4564	TCP
2025-01-08T17:49:34.039450+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52976	77.90.22.16	4564	TCP
2025-01-08T17:49:35.685010+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52978	77.90.22.16	4564	TCP
2025-01-08T17:49:37.322813+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52980	77.90.22.16	4564	TCP
2025-01-08T17:49:38.964926+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52982	77.90.22.16	4564	TCP
2025-01-08T17:49:40.603769+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52984	77.90.22.16	4564	TCP
2025-01-08T17:49:42.249916+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52986	77.90.22.16	4564	TCP
2025-01-08T17:49:43.885380+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52988	77.90.22.16	4564	TCP
2025-01-08T17:49:45.544539+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52990	77.90.22.16	4564	TCP
2025-01-08T17:49:47.163311+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52992	77.90.22.16	4564	TCP
2025-01-08T17:49:48.807951+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52994	77.90.22.16	4564	TCP
2025-01-08T17:49:50.432157+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52996	77.90.22.16	4564	TCP
2025-01-08T17:49:52.091576+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	52998	77.90.22.16	4564	TCP
2025-01-08T17:49:53.728879+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53000	77.90.22.16	4564	TCP
2025-01-08T17:49:55.374317+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53002	77.90.22.16	4564	TCP
2025-01-08T17:49:57.009935+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53004	77.90.22.16	4564	TCP
2025-01-08T17:49:58.634995+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53006	77.90.22.16	4564	TCP
2025-01-08T17:50:00.291669+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53008	77.90.22.16	4564	TCP
2025-01-08T17:50:01.918077+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53010	77.90.22.16	4564	TCP
2025-01-08T17:50:03.541480+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53012	77.90.22.16	4564	TCP
2025-01-08T17:50:05.182643+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53014	77.90.22.16	4564	TCP
2025-01-08T17:50:06.841473+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53016	77.90.22.16	4564	TCP
2025-01-08T17:50:08.498091+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53018	77.90.22.16	4564	TCP
2025-01-08T17:50:10.115754+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53020	77.90.22.16	4564	TCP
2025-01-08T17:50:11.751968+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53022	77.90.22.16	4564	TCP
2025-01-08T17:50:13.383776+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53024	77.90.22.16	4564	TCP
2025-01-08T17:50:15.012979+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53026	77.90.22.16	4564	TCP
2025-01-08T17:50:16.651490+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53028	77.90.22.16	4564	TCP
2025-01-08T17:50:18.296842+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53030	77.90.22.16	4564	TCP
2025-01-08T17:50:19.944701+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53032	77.90.22.16	4564	TCP
2025-01-08T17:50:21.573434+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53034	77.90.22.16	4564	TCP
2025-01-08T17:50:23.231801+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53036	77.90.22.16	4564	TCP
2025-01-08T17:50:24.900702+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53038	77.90.22.16	4564	TCP
2025-01-08T17:50:26.525698+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53040	77.90.22.16	4564	TCP
2025-01-08T17:50:28.221689+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53042	77.90.22.16	4564	TCP
2025-01-08T17:50:30.193816+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53044	77.90.22.16	4564	TCP
2025-01-08T17:50:31.824485+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53046	77.90.22.16	4564	TCP
2025-01-08T17:50:33.469081+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53048	77.90.22.16	4564	TCP
2025-01-08T17:50:35.104687+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53050	77.90.22.16	4564	TCP
2025-01-08T17:50:36.730047+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53052	77.90.22.16	4564	TCP
2025-01-08T17:50:38.374339+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53054	77.90.22.16	4564	TCP
2025-01-08T17:50:40.071466+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53056	77.90.22.16	4564	TCP
2025-01-08T17:50:41.734084+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53058	77.90.22.16	4564	TCP
2025-01-08T17:50:43.378130+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53060	77.90.22.16	4564	TCP
2025-01-08T17:50:44.990593+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53062	77.90.22.16	4564	TCP
2025-01-08T17:50:46.642613+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53064	77.90.22.16	4564	TCP
2025-01-08T17:50:48.276239+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53066	77.90.22.16	4564	TCP
2025-01-08T17:50:49.932993+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53068	77.90.22.16	4564	TCP
2025-01-08T17:50:51.574795+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53070	77.90.22.16	4564	TCP
2025-01-08T17:50:53.203654+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53072	77.90.22.16	4564	TCP
2025-01-08T17:50:55.009717+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53074	77.90.22.16	4564	TCP
2025-01-08T17:51:08.552503+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53076	77.90.22.16	4564	TCP
2025-01-08T17:51:10.196146+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53078	77.90.22.16	4564	TCP
2025-01-08T17:51:11.855255+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53080	77.90.22.16	4564	TCP
2025-01-08T17:51:13.528321+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53082	77.90.22.16	4564	TCP
2025-01-08T17:51:15.202344+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53084	77.90.22.16	4564	TCP
2025-01-08T17:51:16.839527+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53086	77.90.22.16	4564	TCP
2025-01-08T17:51:18.488693+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53088	77.90.22.16	4564	TCP
2025-01-08T17:51:20.121676+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53090	77.90.22.16	4564	TCP
2025-01-08T17:51:21.746386+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53092	77.90.22.16	4564	TCP
2025-01-08T17:51:23.370039+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53094	77.90.22.16	4564	TCP
2025-01-08T17:51:25.015464+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53096	77.90.22.16	4564	TCP
2025-01-08T17:51:26.639633+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53098	77.90.22.16	4564	TCP
2025-01-08T17:51:28.293857+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53100	77.90.22.16	4564	TCP
2025-01-08T17:51:29.936388+0100	2836615	ETPRO MALWARE ELF/Miori Variant CnC Activity	1	192.168.2.13	53102	77.90.22.16	4564	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 8, 2025 17:47:54.704144955 CET	52870	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:54.709254980 CET	4564	52870	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:54.709331989 CET	52870	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:54.710933924 CET	52870	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:54.715739012 CET	4564	52870	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:54.715816975 CET	52870	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:54.720890999 CET	4564	52870	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:56.344521999 CET	4564	52870	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:56.345432997 CET	52870	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:56.345916033 CET	52872	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:56.352996111 CET	4564	52870	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:56.353008986 CET	4564	52872	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:56.353056908 CET	52872	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:56.353714943 CET	52872	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:56.359553099 CET	4564	52872	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:56.359606028 CET	52872	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:56.365375996 CET	4564	52872	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:57.983515978 CET	4564	52872	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:57.983925104 CET	52872	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:57.984266996 CET	52872	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:57.984669924 CET	52874	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:57.989023924 CET	4564	52872	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:57.989461899 CET	4564	52874	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:57.989562035 CET	52874	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:57.989984035 CET	52874	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:57.994726896 CET	4564	52874	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:57.994791985 CET	52874	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:57.999576092 CET	4564	52874	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:59.606472969 CET	4564	52874	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:59.607546091 CET	52874	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:59.607920885 CET	52876	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:59.612396955 CET	4564	52874	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:59.612678051 CET	4564	52876	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:59.612759113 CET	52876	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:59.613399029 CET	52876	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:59.618184090 CET	4564	52876	77.90.22.16	192.168.2.13
Jan 8, 2025 17:47:59.618248940 CET	52876	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:47:59.623555899 CET	4564	52876	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:01.247433901 CET	4564	52876	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:01.247926950 CET	52876	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:01.248379946 CET	52876	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:01.248858929 CET	52878	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:01.253132105 CET	4564	52876	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:01.253695965 CET	4564	52878	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:01.253781080 CET	52878	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:01.254391909 CET	52878	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:01.259157896 CET	4564	52878	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:01.259215117 CET	52878	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:01.263983965 CET	4564	52878	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:02.874073982 CET	4564	52878	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:02.874893904 CET	52878	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:02.875205040 CET	52880	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:02.881784916 CET	4564	52878	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:02.882203102 CET	4564	52880	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:02.882260084 CET	52880	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:02.882793903 CET	52880	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:02.887582064 CET	4564	52880	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:02.887639046 CET	52880	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:02.892540932 CET	4564	52880	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:04.500859976 CET	4564	52880	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:04.501861095 CET	52880	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:04.502269030 CET	52882	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:04.506714106 CET	4564	52880	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:04.507069111 CET	4564	52882	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:04.507132053 CET	52882	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:04.507968903 CET	52882	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:04.512784958 CET	4564	52882	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:04.512849092 CET	52882	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:04.517632008 CET	4564	52882	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:06.153529882 CET	4564	52882	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:06.154479980 CET	52882	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:06.154798031 CET	52884	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:06.159410954 CET	4564	52882	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:06.159598112 CET	4564	52884	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:06.159656048 CET	52884	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:06.160197020 CET	52884	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:06.165014982 CET	4564	52884	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:06.165066957 CET	52884	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:06.169832945 CET	4564	52884	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:07.862607956 CET	4564	52884	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:07.863774061 CET	52884	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:07.864291906 CET	52886	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:07.868551970 CET	4564	52884	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:07.869189024 CET	4564	52886	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:07.869275093 CET	52886	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:07.870043993 CET	52886	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:07.875173092 CET	4564	52886	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:07.875238895 CET	52886	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:07.880043030 CET	4564	52886	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:09.505912066 CET	4564	52886	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:09.506973028 CET	52886	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:09.507464886 CET	52888	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:09.512010098 CET	4564	52886	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:09.512430906 CET	4564	52888	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:09.512520075 CET	52888	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:09.513277054 CET	52888	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:09.518091917 CET	4564	52888	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:09.518173933 CET	52888	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:09.523009062 CET	4564	52888	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:11.143759012 CET	4564	52888	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:11.143912077 CET	52888	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:11.144557953 CET	52888	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:11.144887924 CET	52890	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:11.150306940 CET	4564	52888	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:11.150413036 CET	4564	52890	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:11.150502920 CET	52890	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:11.151099920 CET	52890	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:11.156564951 CET	4564	52890	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:11.156616926 CET	52890	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:11.162482977 CET	4564	52890	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:12.787168026 CET	4564	52890	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:12.787923098 CET	52890	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:12.788098097 CET	52890	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:12.788990021 CET	52892	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:12.794298887 CET	4564	52890	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:12.795320034 CET	4564	52892	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:12.795394897 CET	52892	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:12.796113968 CET	52892	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:12.802402020 CET	4564	52892	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:12.802479982 CET	52892	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:12.810203075 CET	4564	52892	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:14.424787998 CET	4564	52892	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:14.425803900 CET	52892	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:14.426274061 CET	52894	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:14.430623055 CET	4564	52892	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:14.431160927 CET	4564	52894	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:14.431267977 CET	52894	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:14.432138920 CET	52894	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:14.436872959 CET	4564	52894	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:14.436940908 CET	52894	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:14.441745043 CET	4564	52894	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:16.067502975 CET	4564	52894	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:16.067887068 CET	52894	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:16.068165064 CET	52894	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:16.068538904 CET	52896	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:16.072923899 CET	4564	52894	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:16.073324919 CET	4564	52896	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:16.073400021 CET	52896	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:16.074193954 CET	52896	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:16.079020977 CET	4564	52896	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:16.079093933 CET	52896	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:16.087392092 CET	4564	52896	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:17.701461077 CET	4564	52896	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:17.702354908 CET	52896	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:17.702855110 CET	52898	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:17.707228899 CET	4564	52896	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:17.707623005 CET	4564	52898	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:17.707741022 CET	52898	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:17.708331108 CET	52898	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:17.713090897 CET	4564	52898	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:17.713179111 CET	52898	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:17.718000889 CET	4564	52898	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:19.329663992 CET	4564	52898	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:19.330636978 CET	52898	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:19.331227064 CET	52900	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:19.337376118 CET	4564	52898	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:19.337934971 CET	4564	52900	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:19.338021994 CET	52900	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:19.338857889 CET	52900	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:19.345479012 CET	4564	52900	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:19.345542908 CET	52900	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:19.350274086 CET	4564	52900	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:20.954535007 CET	4564	52900	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:20.955327988 CET	52900	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:20.955715895 CET	52902	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:20.960153103 CET	4564	52900	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:20.960469961 CET	4564	52902	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:20.960536003 CET	52902	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:20.961062908 CET	52902	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:20.965790033 CET	4564	52902	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:20.965852976 CET	52902	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:20.970635891 CET	4564	52902	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:22.577178955 CET	4564	52902	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:22.577872038 CET	52902	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:22.578252077 CET	52904	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:22.584561110 CET	4564	52902	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:22.584896088 CET	4564	52904	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:22.584944010 CET	52904	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:22.585557938 CET	52904	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:22.592231035 CET	4564	52904	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:22.592273951 CET	52904	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:22.599091053 CET	4564	52904	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:24.219393969 CET	4564	52904	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:24.219909906 CET	52904	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:24.220211983 CET	52904	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:24.220722914 CET	52906	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:24.226267099 CET	4564	52904	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:24.226279974 CET	4564	52906	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:24.226385117 CET	52906	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:24.227101088 CET	52906	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:24.231918097 CET	4564	52906	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:24.231967926 CET	52906	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:24.236745119 CET	4564	52906	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:26.048453093 CET	4564	52906	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:26.049302101 CET	52906	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:26.049632072 CET	52908	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:26.054080963 CET	4564	52906	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:26.054383993 CET	4564	52908	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:26.054431915 CET	52908	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:26.054910898 CET	52908	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:26.059906006 CET	4564	52908	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:26.059962034 CET	52908	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:26.064750910 CET	4564	52908	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:27.688935995 CET	4564	52908	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:27.689874887 CET	52908	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:27.690229893 CET	52910	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:27.694660902 CET	4564	52908	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:27.694997072 CET	4564	52910	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:27.695059061 CET	52910	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:27.695633888 CET	52910	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:27.700454950 CET	4564	52910	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:27.700525999 CET	52910	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:27.705286026 CET	4564	52910	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:29.314610004 CET	4564	52910	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:29.315459013 CET	52910	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:29.316051960 CET	52912	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:29.321598053 CET	4564	52910	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:29.322154999 CET	4564	52912	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:29.322220087 CET	52912	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:29.322926998 CET	52912	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:29.327689886 CET	4564	52912	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:29.327739954 CET	52912	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:29.332490921 CET	4564	52912	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:30.954716921 CET	4564	52912	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:30.955684900 CET	52912	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:30.956260920 CET	52914	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:30.960954905 CET	4564	52912	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:30.960998058 CET	4564	52914	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:30.961127043 CET	52914	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:30.961620092 CET	52914	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:30.966370106 CET	4564	52914	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:30.966475010 CET	52914	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:30.971251965 CET	4564	52914	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:32.614849091 CET	4564	52914	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:32.615711927 CET	52914	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:32.616120100 CET	52916	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:32.620565891 CET	4564	52914	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:32.620862961 CET	4564	52916	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:32.620949030 CET	52916	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:32.621582031 CET	52916	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:32.626292944 CET	4564	52916	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:32.626357079 CET	52916	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:32.631119967 CET	4564	52916	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:34.272958040 CET	4564	52916	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:34.273824930 CET	52916	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:34.274359941 CET	52918	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:34.278669119 CET	4564	52916	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:34.279355049 CET	4564	52918	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:34.279441118 CET	52918	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:34.280118942 CET	52918	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:34.284919977 CET	4564	52918	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:34.284982920 CET	52918	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:34.289844990 CET	4564	52918	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:35.909835100 CET	4564	52918	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:35.910681963 CET	52918	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:35.911185026 CET	52920	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:35.915544987 CET	4564	52918	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:35.916119099 CET	4564	52920	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:35.916189909 CET	52920	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:35.917064905 CET	52920	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:35.921844959 CET	4564	52920	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:35.921907902 CET	52920	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:35.926726103 CET	4564	52920	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:37.550456047 CET	4564	52920	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:37.551428080 CET	52920	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:37.551987886 CET	52922	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:37.556278944 CET	4564	52920	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:37.556817055 CET	4564	52922	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:37.556879044 CET	52922	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:37.557531118 CET	52922	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:37.562279940 CET	4564	52922	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:37.562341928 CET	52922	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:37.567179918 CET	4564	52922	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:39.217144012 CET	4564	52922	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:39.217792988 CET	52922	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:39.218175888 CET	52924	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:39.223555088 CET	4564	52922	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:39.224782944 CET	4564	52924	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:39.224868059 CET	52924	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:39.225380898 CET	52924	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:39.230715036 CET	4564	52924	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:39.230762959 CET	52924	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:39.236126900 CET	4564	52924	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:40.881623983 CET	4564	52924	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:40.882359982 CET	52924	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:40.882744074 CET	52926	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:40.887170076 CET	4564	52924	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:40.887589931 CET	4564	52926	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:40.887659073 CET	52926	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:40.888207912 CET	52926	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:40.893888950 CET	4564	52926	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:40.893955946 CET	52926	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:40.899669886 CET	4564	52926	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:42.515350103 CET	4564	52926	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:42.515896082 CET	52926	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:42.516184092 CET	52926	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:42.516602039 CET	52928	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:42.520976067 CET	4564	52926	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:42.521466017 CET	4564	52928	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:42.521538973 CET	52928	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:42.522017956 CET	52928	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:42.526757956 CET	4564	52928	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:42.526806116 CET	52928	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:42.531614065 CET	4564	52928	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:44.178668976 CET	4564	52928	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:44.179419041 CET	52928	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:44.179940939 CET	52930	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:44.184205055 CET	4564	52928	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:44.184710979 CET	4564	52930	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:44.184794903 CET	52930	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:44.185364008 CET	52930	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:44.190107107 CET	4564	52930	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:44.190174103 CET	52930	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:44.194967031 CET	4564	52930	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:57.748034954 CET	4564	52930	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:57.748990059 CET	52930	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:57.749469042 CET	52932	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:57.753824949 CET	4564	52930	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:57.754348993 CET	4564	52932	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:57.754436016 CET	52932	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:57.755233049 CET	52932	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:57.760031939 CET	4564	52932	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:57.760121107 CET	52932	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:57.764890909 CET	4564	52932	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:59.389833927 CET	4564	52932	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:59.391000032 CET	52932	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:59.391555071 CET	52934	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:59.395890951 CET	4564	52932	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:59.396328926 CET	4564	52934	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:59.396415949 CET	52934	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:59.397171974 CET	52934	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:59.401947021 CET	4564	52934	77.90.22.16	192.168.2.13
Jan 8, 2025 17:48:59.402010918 CET	52934	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:48:59.406794071 CET	4564	52934	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:01.037631035 CET	4564	52934	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:01.038552999 CET	52934	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:01.039067030 CET	52936	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:01.043379068 CET	4564	52934	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:01.043916941 CET	4564	52936	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:01.044135094 CET	52936	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:01.045010090 CET	52936	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:01.049851894 CET	4564	52936	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:01.049925089 CET	52936	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:01.054764986 CET	4564	52936	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:02.670794964 CET	4564	52936	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:02.671581984 CET	52936	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:02.672028065 CET	52938	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:02.676403046 CET	4564	52936	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:02.676892042 CET	4564	52938	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:02.676954031 CET	52938	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:02.677448988 CET	52938	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:02.682204962 CET	4564	52938	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:02.682250023 CET	52938	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:02.687043905 CET	4564	52938	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:04.318877935 CET	4564	52938	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:04.319889069 CET	52938	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:04.319972038 CET	52938	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:04.320446968 CET	52940	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:04.324757099 CET	4564	52938	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:04.325216055 CET	4564	52940	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:04.325300932 CET	52940	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:04.325875998 CET	52940	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:04.330651045 CET	4564	52940	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:04.330729961 CET	52940	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:04.335547924 CET	4564	52940	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:05.954495907 CET	4564	52940	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:05.955434084 CET	52940	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:05.956270933 CET	52942	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:05.960285902 CET	4564	52940	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:05.961070061 CET	4564	52942	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:05.961155891 CET	52942	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:05.961896896 CET	52942	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:05.966653109 CET	4564	52942	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:05.966708899 CET	52942	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:05.971470118 CET	4564	52942	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:07.657907963 CET	4564	52942	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:07.658642054 CET	52942	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:07.658972979 CET	52944	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:07.663430929 CET	4564	52942	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:07.663846970 CET	4564	52944	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:07.663899899 CET	52944	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:07.665606976 CET	52944	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:07.670439005 CET	4564	52944	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:07.670494080 CET	52944	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:07.675288916 CET	4564	52944	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:09.318849087 CET	4564	52944	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:09.319885969 CET	52944	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:09.319930077 CET	52944	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:09.320296049 CET	52946	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:09.324747086 CET	4564	52944	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:09.325129986 CET	4564	52946	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:09.325211048 CET	52946	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:09.325885057 CET	52946	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:09.330760002 CET	4564	52946	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:09.330842972 CET	52946	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:09.335686922 CET	4564	52946	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:10.959465981 CET	4564	52946	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:10.959896088 CET	52946	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:10.960326910 CET	52946	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:10.960895061 CET	52948	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:10.965168953 CET	4564	52946	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:10.965708017 CET	4564	52948	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:10.965791941 CET	52948	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:10.966646910 CET	52948	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:10.971447945 CET	4564	52948	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:10.971522093 CET	52948	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:10.976334095 CET	4564	52948	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:12.599917889 CET	4564	52948	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:12.601202011 CET	52948	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:12.601723909 CET	52950	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:12.606072903 CET	4564	52948	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:12.606554985 CET	4564	52950	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:12.606627941 CET	52950	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:12.607325077 CET	52950	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:12.612164974 CET	4564	52950	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:12.612234116 CET	52950	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:12.617027998 CET	4564	52950	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:14.240250111 CET	4564	52950	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:14.241168022 CET	52950	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:14.241611004 CET	52952	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:14.246018887 CET	4564	52950	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:14.246479034 CET	4564	52952	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:14.246555090 CET	52952	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:14.247198105 CET	52952	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:14.252011061 CET	4564	52952	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:14.252079964 CET	52952	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:14.256899118 CET	4564	52952	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:15.875655890 CET	4564	52952	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:15.875957966 CET	52952	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:15.876432896 CET	52952	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:15.876775026 CET	52954	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:15.881195068 CET	4564	52952	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:15.881582022 CET	4564	52954	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:15.881644964 CET	52954	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:15.882304907 CET	52954	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:15.887125015 CET	4564	52954	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:15.887216091 CET	52954	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:15.891968012 CET	4564	52954	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:17.498490095 CET	4564	52954	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:17.499196053 CET	52954	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:17.499564886 CET	52956	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:17.504050016 CET	4564	52954	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:17.504461050 CET	4564	52956	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:17.504525900 CET	52956	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:17.505131960 CET	52956	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:17.509953976 CET	4564	52956	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:17.510004044 CET	52956	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:17.514935970 CET	4564	52956	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:19.151985884 CET	4564	52956	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:19.153024912 CET	52956	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:19.153536081 CET	52958	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:19.157895088 CET	4564	52956	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:19.158485889 CET	4564	52958	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:19.158571005 CET	52958	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:19.159230947 CET	52958	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:19.164022923 CET	4564	52958	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:19.164087057 CET	52958	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:19.168893099 CET	4564	52958	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:20.834518909 CET	4564	52958	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:20.835479021 CET	52958	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:20.835964918 CET	52960	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:20.840300083 CET	4564	52958	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:20.840857029 CET	4564	52960	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:20.840939045 CET	52960	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:20.841866970 CET	52960	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:20.846609116 CET	4564	52960	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:20.846676111 CET	52960	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:20.851407051 CET	4564	52960	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:22.485538006 CET	4564	52960	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:22.486526966 CET	52960	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:22.486988068 CET	52962	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:22.491295099 CET	4564	52960	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:22.491844893 CET	4564	52962	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:22.491909981 CET	52962	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:22.492538929 CET	52962	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:22.497353077 CET	4564	52962	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:22.497406960 CET	52962	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:22.502199888 CET	4564	52962	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:24.115999937 CET	4564	52962	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:24.117001057 CET	52962	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:24.117460012 CET	52964	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:24.121797085 CET	4564	52962	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:24.122335911 CET	4564	52964	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:24.122421026 CET	52964	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:24.123092890 CET	52964	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:24.127937078 CET	4564	52964	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:24.128002882 CET	52964	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:24.132822990 CET	4564	52964	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:25.787031889 CET	4564	52964	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:25.787849903 CET	52964	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:25.788213968 CET	52966	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:25.793061972 CET	4564	52964	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:25.793075085 CET	4564	52966	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:25.793131113 CET	52966	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:25.793697119 CET	52966	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:25.798446894 CET	4564	52966	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:25.798496008 CET	52966	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:25.803488970 CET	4564	52966	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:27.424505949 CET	4564	52966	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:27.425380945 CET	52966	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:27.425888062 CET	52968	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:27.430283070 CET	4564	52966	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:27.430749893 CET	4564	52968	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:27.430805922 CET	52968	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:27.431582928 CET	52968	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:27.436333895 CET	4564	52968	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:27.436381102 CET	52968	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:27.441139936 CET	4564	52968	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:29.068934917 CET	4564	52968	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:29.069649935 CET	52968	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:29.070014000 CET	52970	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:29.074454069 CET	4564	52968	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:29.074805975 CET	4564	52970	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:29.074865103 CET	52970	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:29.075419903 CET	52970	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:29.080180883 CET	4564	52970	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:29.080229044 CET	52970	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:29.085006952 CET	4564	52970	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:30.758173943 CET	4564	52970	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:30.759150028 CET	52970	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:30.759629965 CET	52972	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:30.763930082 CET	4564	52970	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:30.764461994 CET	4564	52972	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:30.764520884 CET	52972	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:30.765327930 CET	52972	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:30.770140886 CET	4564	52972	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:30.770200968 CET	52972	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:30.775034904 CET	4564	52972	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:32.389738083 CET	4564	52972	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:32.390686035 CET	52972	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:32.391196966 CET	52974	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:32.395442009 CET	4564	52972	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:32.396023035 CET	4564	52974	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:32.396114111 CET	52974	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:32.396801949 CET	52974	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:32.401612997 CET	4564	52974	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:32.401657104 CET	52974	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:32.406454086 CET	4564	52974	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:34.032205105 CET	4564	52974	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:34.033210039 CET	52974	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:34.033786058 CET	52976	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:34.038053036 CET	4564	52974	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:34.038573980 CET	4564	52976	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:34.038639069 CET	52976	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:34.039449930 CET	52976	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:34.044203997 CET	4564	52976	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:34.044261932 CET	52976	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:34.049077988 CET	4564	52976	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:35.678606987 CET	4564	52976	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:35.679367065 CET	52976	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:35.679725885 CET	52978	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:35.684149027 CET	4564	52976	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:35.684492111 CET	4564	52978	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:35.684545994 CET	52978	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:35.685009956 CET	52978	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:35.689841032 CET	4564	52978	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:35.689898014 CET	52978	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:35.694724083 CET	4564	52978	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:37.315771103 CET	4564	52978	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:37.316754103 CET	52978	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:37.317286968 CET	52980	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:37.321638107 CET	4564	52978	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:37.322099924 CET	4564	52980	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:37.322161913 CET	52980	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:37.322813034 CET	52980	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:37.328164101 CET	4564	52980	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:37.328232050 CET	52980	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:37.333039999 CET	4564	52980	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:38.957849979 CET	4564	52980	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:38.958833933 CET	52980	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:38.959330082 CET	52982	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:38.963754892 CET	4564	52980	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:38.964183092 CET	4564	52982	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:38.964268923 CET	52982	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:38.964926004 CET	52982	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:38.969727039 CET	4564	52982	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:38.969798088 CET	52982	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:38.974572897 CET	4564	52982	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:40.596682072 CET	4564	52982	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:40.597620964 CET	52982	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:40.598161936 CET	52984	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:40.602385044 CET	4564	52982	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:40.602982044 CET	4564	52984	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:40.603049994 CET	52984	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:40.603769064 CET	52984	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:40.608549118 CET	4564	52984	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:40.608648062 CET	52984	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:40.613416910 CET	4564	52984	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:42.242666960 CET	4564	52984	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:42.243745089 CET	52984	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:42.244317055 CET	52986	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:42.248555899 CET	4564	52984	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:42.249161005 CET	4564	52986	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:42.249243021 CET	52986	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:42.249916077 CET	52986	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:42.254869938 CET	4564	52986	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:42.254935026 CET	52986	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:42.259917974 CET	4564	52986	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:43.877893925 CET	4564	52986	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:43.878962040 CET	52986	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:43.879585981 CET	52988	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:43.883760929 CET	4564	52986	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:43.884438038 CET	4564	52988	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:43.884529114 CET	52988	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:43.885380030 CET	52988	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:43.890156984 CET	4564	52988	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:43.890228033 CET	52988	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:43.894964933 CET	4564	52988	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:45.537954092 CET	4564	52988	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:45.538650990 CET	52988	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:45.539086103 CET	52990	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:45.543473005 CET	4564	52988	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:45.543909073 CET	4564	52990	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:45.543992043 CET	52990	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:45.544538975 CET	52990	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:45.549273968 CET	4564	52990	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:45.549331903 CET	52990	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:45.554141045 CET	4564	52990	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:47.156399965 CET	4564	52990	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:47.157346010 CET	52990	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:47.157799006 CET	52992	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:47.162122965 CET	4564	52990	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:47.162636042 CET	4564	52992	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:47.162693024 CET	52992	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:47.163311005 CET	52992	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:47.168121099 CET	4564	52992	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:47.168169975 CET	52992	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:47.173002005 CET	4564	52992	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:48.801104069 CET	4564	52992	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:48.801976919 CET	52992	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:48.802458048 CET	52994	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:48.806776047 CET	4564	52992	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:48.807233095 CET	4564	52994	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:48.807338953 CET	52994	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:48.807950974 CET	52994	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:48.812659025 CET	4564	52994	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:48.812752008 CET	52994	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:48.817531109 CET	4564	52994	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:50.424952984 CET	4564	52994	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:50.426048994 CET	52994	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:50.426520109 CET	52996	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:50.430845976 CET	4564	52994	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:50.431412935 CET	4564	52996	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:50.431524038 CET	52996	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:50.432157040 CET	52996	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:50.436943054 CET	4564	52996	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:50.436992884 CET	52996	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:50.441776991 CET	4564	52996	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:52.084945917 CET	4564	52996	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:52.085791111 CET	52996	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:52.086138964 CET	52998	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:52.090612888 CET	4564	52996	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:52.090979099 CET	4564	52998	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:52.091056108 CET	52998	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:52.091576099 CET	52998	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:52.096333981 CET	4564	52998	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:52.096405983 CET	52998	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:52.101206064 CET	4564	52998	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:53.722019911 CET	4564	52998	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:53.722845078 CET	52998	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:53.723289967 CET	53000	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:53.727727890 CET	4564	52998	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:53.728197098 CET	4564	53000	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:53.728276014 CET	53000	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:53.728878975 CET	53000	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:53.733715057 CET	4564	53000	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:53.733786106 CET	53000	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:53.738627911 CET	4564	53000	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:55.364168882 CET	4564	53000	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:55.365159035 CET	53000	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:55.365616083 CET	53002	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:55.373627901 CET	4564	53000	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:55.373639107 CET	4564	53002	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:55.373753071 CET	53002	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:55.374316931 CET	53002	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:55.382412910 CET	4564	53002	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:55.382512093 CET	53002	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:55.390399933 CET	4564	53002	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:57.003144979 CET	4564	53002	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:57.003910065 CET	53002	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:57.004018068 CET	53002	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:57.004487991 CET	53004	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:57.008866072 CET	4564	53002	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:57.009275913 CET	4564	53004	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:57.009345055 CET	53004	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:57.009934902 CET	53004	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:57.014729977 CET	4564	53004	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:57.014795065 CET	53004	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:57.019633055 CET	4564	53004	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:58.628073931 CET	4564	53004	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:58.629004002 CET	53004	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:58.629523039 CET	53006	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:58.633793116 CET	4564	53004	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:58.634308100 CET	4564	53006	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:58.634399891 CET	53006	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:58.634994984 CET	53006	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:58.639781952 CET	4564	53006	77.90.22.16	192.168.2.13
Jan 8, 2025 17:49:58.639976978 CET	53006	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:49:58.644773960 CET	4564	53006	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:00.284661055 CET	4564	53006	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:00.285665035 CET	53006	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:00.286104918 CET	53008	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:00.290494919 CET	4564	53006	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:00.290988922 CET	4564	53008	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:00.291054010 CET	53008	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:00.291668892 CET	53008	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:00.296448946 CET	4564	53008	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:00.296495914 CET	53008	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:00.301304102 CET	4564	53008	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:01.910825014 CET	4564	53008	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:01.911757946 CET	53008	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:01.912276983 CET	53010	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:01.916609049 CET	4564	53008	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:01.917085886 CET	4564	53010	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:01.917166948 CET	53010	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:01.918076992 CET	53010	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:01.922939062 CET	4564	53010	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:01.923022032 CET	53010	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:01.927848101 CET	4564	53010	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:03.534522057 CET	4564	53010	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:03.535388947 CET	53010	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:03.535864115 CET	53012	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:03.540204048 CET	4564	53010	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:03.540668964 CET	4564	53012	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:03.540745974 CET	53012	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:03.541480064 CET	53012	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:03.546344995 CET	4564	53012	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:03.546394110 CET	53012	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:03.551119089 CET	4564	53012	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:05.175345898 CET	4564	53012	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:05.175926924 CET	53012	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:05.176521063 CET	53012	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:05.177077055 CET	53014	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:05.181257010 CET	4564	53012	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:05.181890011 CET	4564	53014	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:05.181972027 CET	53014	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:05.182642937 CET	53014	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:05.187382936 CET	4564	53014	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:05.187465906 CET	53014	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:05.192229033 CET	4564	53014	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:06.835227966 CET	4564	53014	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:06.835824966 CET	53014	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:06.836136103 CET	53016	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:06.840624094 CET	4564	53014	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:06.840996027 CET	4564	53016	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:06.841047049 CET	53016	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:06.841473103 CET	53016	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:06.846216917 CET	4564	53016	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:06.846266031 CET	53016	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:06.851022959 CET	4564	53016	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:08.491619110 CET	4564	53016	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:08.491895914 CET	53016	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:08.492279053 CET	53016	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:08.492630959 CET	53018	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:08.497049093 CET	4564	53016	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:08.497535944 CET	4564	53018	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:08.497608900 CET	53018	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:08.498090982 CET	53018	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:08.502876043 CET	4564	53018	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:08.502921104 CET	53018	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:08.507698059 CET	4564	53018	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:10.109126091 CET	4564	53018	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:10.109924078 CET	53018	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:10.110275984 CET	53020	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:10.114738941 CET	4564	53018	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:10.115078926 CET	4564	53020	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:10.115156889 CET	53020	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:10.115753889 CET	53020	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:10.120508909 CET	4564	53020	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:10.120587111 CET	53020	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:10.125369072 CET	4564	53020	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:11.744674921 CET	4564	53020	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:11.745630026 CET	53020	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:11.746093988 CET	53022	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:11.751235962 CET	4564	53020	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:11.751246929 CET	4564	53022	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:11.751302958 CET	53022	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:11.751967907 CET	53022	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:11.756772995 CET	4564	53022	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:11.756820917 CET	53022	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:11.761781931 CET	4564	53022	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:13.376703024 CET	4564	53022	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:13.377845049 CET	53022	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:13.378277063 CET	53024	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:13.382589102 CET	4564	53022	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:13.383193016 CET	4564	53024	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:13.383239031 CET	53024	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:13.383775949 CET	53024	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:13.388739109 CET	4564	53024	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:13.388786077 CET	53024	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:13.393541098 CET	4564	53024	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:15.006185055 CET	4564	53024	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:15.007077932 CET	53024	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:15.007510900 CET	53026	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:15.011893034 CET	4564	53024	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:15.012305975 CET	4564	53026	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:15.012392998 CET	53026	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:15.012979031 CET	53026	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:15.017765999 CET	4564	53026	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:15.017832994 CET	53026	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:15.022559881 CET	4564	53026	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:16.645057917 CET	4564	53026	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:16.645773888 CET	53026	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:16.646157980 CET	53028	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:16.650614023 CET	4564	53026	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:16.650935888 CET	4564	53028	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:16.650999069 CET	53028	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:16.651489973 CET	53028	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:16.656227112 CET	4564	53028	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:16.656266928 CET	53028	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:16.661014080 CET	4564	53028	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:18.286545038 CET	4564	53028	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:18.287591934 CET	53028	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:18.288122892 CET	53030	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:18.295398951 CET	4564	53028	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:18.296133995 CET	4564	53030	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:18.296196938 CET	53030	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:18.296842098 CET	53030	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:18.304826975 CET	4564	53030	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:18.304883957 CET	53030	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:18.312228918 CET	4564	53030	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:19.937428951 CET	4564	53030	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:19.938440084 CET	53030	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:19.938930988 CET	53032	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:19.943331003 CET	4564	53030	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:19.943766117 CET	4564	53032	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:19.943826914 CET	53032	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:19.944700956 CET	53032	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:19.949484110 CET	4564	53032	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:19.949537039 CET	53032	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:19.954345942 CET	4564	53032	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:21.566026926 CET	4564	53032	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:21.566916943 CET	53032	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:21.567390919 CET	53034	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:21.571712971 CET	4564	53032	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:21.572779894 CET	4564	53034	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:21.572864056 CET	53034	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:21.573434114 CET	53034	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:21.578191042 CET	4564	53034	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:21.578277111 CET	53034	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:21.583085060 CET	4564	53034	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:23.224534988 CET	4564	53034	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:23.225740910 CET	53034	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:23.226268053 CET	53036	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:23.230622053 CET	4564	53034	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:23.231021881 CET	4564	53036	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:23.231086969 CET	53036	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:23.231801033 CET	53036	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:23.236589909 CET	4564	53036	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:23.236677885 CET	53036	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:23.241522074 CET	4564	53036	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:24.893910885 CET	4564	53036	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:24.894664049 CET	53036	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:24.895162106 CET	53038	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:24.899478912 CET	4564	53036	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:24.899981022 CET	4564	53038	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:24.900077105 CET	53038	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:24.900702000 CET	53038	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:24.905456066 CET	4564	53038	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:24.905510902 CET	53038	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:24.910269022 CET	4564	53038	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:26.519102097 CET	4564	53038	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:26.519835949 CET	53038	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:26.520207882 CET	53040	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:26.524650097 CET	4564	53038	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:26.525098085 CET	4564	53040	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:26.525214911 CET	53040	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:26.525697947 CET	53040	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:26.530507088 CET	4564	53040	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:26.530566931 CET	53040	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:26.535335064 CET	4564	53040	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:28.214996099 CET	4564	53040	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:28.215909958 CET	53040	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:28.215970993 CET	53040	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:28.216353893 CET	53042	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:28.220813990 CET	4564	53040	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:28.221132040 CET	4564	53042	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:28.221193075 CET	53042	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:28.221688986 CET	53042	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:28.226519108 CET	4564	53042	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:28.226572037 CET	53042	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:28.231332064 CET	4564	53042	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:30.187501907 CET	4564	53042	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:30.187896967 CET	53042	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:30.188160896 CET	53042	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:30.188519001 CET	53044	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:30.193309069 CET	4564	53042	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:30.193320990 CET	4564	53044	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:30.193372011 CET	53044	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:30.193815947 CET	53044	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:30.199414968 CET	4564	53044	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:30.199465036 CET	53044	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:30.205013037 CET	4564	53044	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:31.818044901 CET	4564	53044	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:31.818798065 CET	53044	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:31.819135904 CET	53046	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:31.823626041 CET	4564	53044	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:31.823895931 CET	4564	53046	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:31.823954105 CET	53046	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:31.824485064 CET	53046	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:31.829305887 CET	4564	53046	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:31.829349041 CET	53046	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:31.834091902 CET	4564	53046	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:33.462141037 CET	4564	53046	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:33.463068008 CET	53046	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:33.463563919 CET	53048	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:33.467832088 CET	4564	53046	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:33.468327999 CET	4564	53048	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:33.468416929 CET	53048	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:33.469080925 CET	53048	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:33.473834991 CET	4564	53048	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:33.473896980 CET	53048	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:33.478990078 CET	4564	53048	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:35.097502947 CET	4564	53048	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:35.098527908 CET	53048	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:35.099055052 CET	53050	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:35.103293896 CET	4564	53048	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:35.103893995 CET	4564	53050	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:35.103992939 CET	53050	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:35.104686975 CET	53050	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:35.109457016 CET	4564	53050	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:35.109522104 CET	53050	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:35.114331961 CET	4564	53050	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:36.722573996 CET	4564	53050	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:36.723634958 CET	53050	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:36.724250078 CET	53052	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:36.728816986 CET	4564	53050	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:36.729090929 CET	4564	53052	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:36.729187012 CET	53052	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:36.730046988 CET	53052	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:36.734797001 CET	4564	53052	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:36.734863997 CET	53052	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:36.739662886 CET	4564	53052	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:38.367192030 CET	4564	53052	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:38.367960930 CET	53052	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:38.368419886 CET	53052	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:38.368870974 CET	53054	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:38.373173952 CET	4564	53052	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:38.373615026 CET	4564	53054	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:38.373709917 CET	53054	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:38.374339104 CET	53054	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:38.379060030 CET	4564	53054	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:38.379123926 CET	53054	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:38.383887053 CET	4564	53054	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:40.064879894 CET	4564	53054	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:40.065694094 CET	53054	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:40.066040993 CET	53056	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:40.070636034 CET	4564	53054	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:40.070844889 CET	4564	53056	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:40.070911884 CET	53056	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:40.071465969 CET	53056	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:40.076328993 CET	4564	53056	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:40.076385975 CET	53056	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:40.081119061 CET	4564	53056	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:41.725756884 CET	4564	53056	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:41.726993084 CET	53056	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:41.727941990 CET	53058	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:41.731846094 CET	4564	53056	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:41.732749939 CET	4564	53058	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:41.732834101 CET	53058	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:41.734083891 CET	53058	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:41.738886118 CET	4564	53058	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:41.739002943 CET	53058	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:41.743882895 CET	4564	53058	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:43.371648073 CET	4564	53058	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:43.371951103 CET	53058	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:43.372447968 CET	53058	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:43.372801065 CET	53060	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:43.377228022 CET	4564	53058	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:43.377588034 CET	4564	53060	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:43.377646923 CET	53060	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:43.378129959 CET	53060	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:43.382920980 CET	4564	53060	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:43.382973909 CET	53060	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:43.387682915 CET	4564	53060	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:44.984146118 CET	4564	53060	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:44.984966040 CET	53060	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:44.985312939 CET	53062	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:44.989748001 CET	4564	53060	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:44.990107059 CET	4564	53062	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:44.990164995 CET	53062	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:44.990592957 CET	53062	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:44.995505095 CET	4564	53062	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:44.995553017 CET	53062	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:45.000369072 CET	4564	53062	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:46.634696007 CET	4564	53062	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:46.635533094 CET	53062	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:46.635869026 CET	53064	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:46.642041922 CET	4564	53062	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:46.642055035 CET	4564	53064	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:46.642100096 CET	53064	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:46.642612934 CET	53064	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:46.648634911 CET	4564	53064	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:46.648689032 CET	53064	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:46.654860973 CET	4564	53064	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:48.269665956 CET	4564	53064	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:48.270488024 CET	53064	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:48.270901918 CET	53066	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:48.275285959 CET	4564	53064	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:48.275682926 CET	4564	53066	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:48.275741100 CET	53066	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:48.276238918 CET	53066	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:48.281024933 CET	4564	53066	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:48.281078100 CET	53066	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:48.285855055 CET	4564	53066	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:49.926460028 CET	4564	53066	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:49.927249908 CET	53066	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:49.927625895 CET	53068	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:49.932091951 CET	4564	53066	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:49.932395935 CET	4564	53068	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:49.932457924 CET	53068	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:49.932992935 CET	53068	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:49.937807083 CET	4564	53068	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:49.937850952 CET	53068	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:49.942643881 CET	4564	53068	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:51.568480015 CET	4564	53068	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:51.569216967 CET	53068	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:51.569557905 CET	53070	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:51.573966026 CET	4564	53068	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:51.574342012 CET	4564	53070	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:51.574394941 CET	53070	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:51.574795008 CET	53070	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:51.579562902 CET	4564	53070	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:51.579605103 CET	53070	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:51.584335089 CET	4564	53070	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:53.191688061 CET	4564	53070	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:53.191946983 CET	53070	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:53.192560911 CET	53070	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:53.193013906 CET	53072	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:53.197304010 CET	4564	53070	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:53.197854042 CET	4564	53072	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:53.197917938 CET	53072	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:53.203654051 CET	53072	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:53.208431005 CET	4564	53072	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:53.208489895 CET	53072	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:53.213255882 CET	4564	53072	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:55.002938032 CET	4564	53072	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:55.003865004 CET	53072	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:55.004336119 CET	53074	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:55.008673906 CET	4564	53072	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:55.009105921 CET	4564	53074	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:55.009161949 CET	53074	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:55.009716988 CET	53074	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:55.014424086 CET	4564	53074	77.90.22.16	192.168.2.13
Jan 8, 2025 17:50:55.014467955 CET	53074	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:50:55.019232035 CET	4564	53074	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:08.545845032 CET	4564	53074	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:08.546581030 CET	53074	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:08.546927929 CET	53076	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:08.551414967 CET	4564	53074	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:08.551816940 CET	4564	53076	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:08.551899910 CET	53076	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:08.552503109 CET	53076	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:08.557260990 CET	4564	53076	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:08.557307959 CET	53076	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:08.562083006 CET	4564	53076	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:10.189343929 CET	4564	53076	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:10.190340042 CET	53076	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:10.190749884 CET	53078	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:10.195218086 CET	4564	53076	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:10.195535898 CET	4564	53078	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:10.195609093 CET	53078	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:10.196146011 CET	53078	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:10.200891972 CET	4564	53078	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:10.200957060 CET	53078	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:10.205717087 CET	4564	53078	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:11.849009037 CET	4564	53078	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:11.849664927 CET	53078	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:11.849966049 CET	53080	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:11.854464054 CET	4564	53078	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:11.854784966 CET	4564	53080	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:11.854836941 CET	53080	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:11.855254889 CET	53080	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:11.860024929 CET	4564	53080	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:11.860075951 CET	53080	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:11.864820957 CET	4564	53080	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:13.520117998 CET	4564	53080	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:13.521047115 CET	53080	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:13.521481991 CET	53082	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:13.527237892 CET	4564	53080	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:13.527738094 CET	4564	53082	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:13.527792931 CET	53082	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:13.528321028 CET	53082	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:13.533121109 CET	4564	53082	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:13.533179045 CET	53082	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:13.538009882 CET	4564	53082	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:15.195491076 CET	4564	53082	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:15.195887089 CET	53082	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:15.196485043 CET	53082	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:15.196930885 CET	53084	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:15.201246023 CET	4564	53082	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:15.201735020 CET	4564	53084	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:15.201839924 CET	53084	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:15.202343941 CET	53084	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:15.207103014 CET	4564	53084	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:15.207150936 CET	53084	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:15.211949110 CET	4564	53084	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:16.833147049 CET	4564	53084	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:16.833934069 CET	53084	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:16.834254026 CET	53086	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:16.838866949 CET	4564	53084	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:16.839080095 CET	4564	53086	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:16.839143991 CET	53086	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:16.839526892 CET	53086	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:16.844289064 CET	4564	53086	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:16.844338894 CET	53086	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:16.849104881 CET	4564	53086	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:18.480206013 CET	4564	53086	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:18.481035948 CET	53086	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:18.481421947 CET	53088	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:18.488034964 CET	4564	53086	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:18.488049984 CET	4564	53088	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:18.488114119 CET	53088	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:18.488692999 CET	53088	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:18.496134996 CET	4564	53088	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:18.496197939 CET	53088	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:18.504285097 CET	4564	53088	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:20.114445925 CET	4564	53088	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:20.115554094 CET	53088	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:20.115992069 CET	53090	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:20.120693922 CET	4564	53088	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:20.120984077 CET	4564	53090	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:20.121078968 CET	53090	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:20.121675968 CET	53090	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:20.126668930 CET	4564	53090	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:20.126740932 CET	53090	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:20.132479906 CET	4564	53090	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:21.739376068 CET	4564	53090	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:21.739892006 CET	53090	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:21.740346909 CET	53090	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:21.740753889 CET	53092	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:21.745101929 CET	4564	53090	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:21.745740891 CET	4564	53092	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:21.745820045 CET	53092	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:21.746386051 CET	53092	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:21.751269102 CET	4564	53092	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:21.751338005 CET	53092	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:21.756140947 CET	4564	53092	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:23.363008976 CET	4564	53092	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:23.363893986 CET	53092	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:23.364074945 CET	53092	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:23.364475965 CET	53094	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:23.369106054 CET	4564	53092	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:23.369312048 CET	4564	53094	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:23.369393110 CET	53094	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:23.370038986 CET	53094	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:23.374871969 CET	4564	53094	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:23.374943972 CET	53094	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:23.379712105 CET	4564	53094	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:25.007761002 CET	4564	53094	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:25.009140015 CET	53094	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:25.009712934 CET	53096	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:25.013995886 CET	4564	53094	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:25.014493942 CET	4564	53096	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:25.014579058 CET	53096	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:25.015464067 CET	53096	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:25.020210981 CET	4564	53096	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:25.020298958 CET	53096	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:25.025130033 CET	4564	53096	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:26.632858038 CET	4564	53096	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:26.633718014 CET	53096	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:26.634138107 CET	53098	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:26.638529062 CET	4564	53096	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:26.638911009 CET	4564	53098	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:26.639070988 CET	53098	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:26.639632940 CET	53098	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:26.644460917 CET	4564	53098	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:26.644515038 CET	53098	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:26.649530888 CET	4564	53098	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:28.286914110 CET	4564	53098	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:28.287914038 CET	53098	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:28.287964106 CET	53098	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:28.288336039 CET	53100	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:28.292738914 CET	4564	53098	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:28.293265104 CET	4564	53100	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:28.293345928 CET	53100	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:28.293857098 CET	53100	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:28.298599005 CET	4564	53100	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:28.298671961 CET	53100	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:28.303443909 CET	4564	53100	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:29.930059910 CET	4564	53100	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:29.930824041 CET	53100	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:29.931147099 CET	53102	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:29.935628891 CET	4564	53100	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:29.935903072 CET	4564	53102	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:29.935957909 CET	53102	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:29.936388016 CET	53102	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:29.941157103 CET	4564	53102	77.90.22.16	192.168.2.13
Jan 8, 2025 17:51:29.941215992 CET	53102	4564	192.168.2.13	77.90.22.16
Jan 8, 2025 17:51:29.946307898 CET	4564	53102	77.90.22.16	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 8, 2025 17:50:40.711220026 CET	59574	53	192.168.2.13	8.8.8.8
Jan 8, 2025 17:50:40.711302042 CET	58003	53	192.168.2.13	8.8.8.8
Jan 8, 2025 17:50:40.717387915 CET	53	59574	8.8.8.8	192.168.2.13
Jan 8, 2025 17:50:40.717608929 CET	53	58003	8.8.8.8	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 8, 2025 17:50:40.711220026 CET	192.168.2.13	8.8.8.8	0x84d3	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:50:40.711302042 CET	192.168.2.13	8.8.8.8	0x3907	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 8, 2025 17:50:40.717387915 CET	8.8.8.8	192.168.2.13	0x84d3	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:50:40.717387915 CET	8.8.8.8	192.168.2.13	0x84d3	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: m2.elf PID: 5444, Parent PID: 5366

General

Start time (UTC):	16:47:54
Start date (UTC):	08/01/2025
Path:	/tmp/m2.elf
Arguments:	/tmp/m2.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: m2.elf PID: 5446, Parent PID: 5444

General

Start time (UTC):	16:47:54
Start date (UTC):	08/01/2025
Path:	/tmp/m2.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report m2.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: m2.elf PID: 5444, Parent PID: 5366

General

Chronological Activities

Analysis Process: m2.elf PID: 5446, Parent PID: 5444

General

Chronological Activities

Linux Analysis Report
m2.elf