Edit tour

Linux Analysis Report
fenty.arm5.elf

Overview

General Information

Sample name:	fenty.arm5.elf
Analysis ID:	1586207
MD5:	afe25e6159cdc6dd506cab755bc2bc75
SHA1:	531362ffc8da8326de5e22a36c0efd3f47d1c71e
SHA256:	fb5213d7803ad1bf0d22ba13cf9241c02bf985ed56545a4f75d2a79426c67ba7
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	72
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample deletes itself

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Sample contains only a LOAD segment without any section mappings

Sample listens on a socket

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586207
Start date and time:	2025-01-08 20:42:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	fenty.arm5.elf
Detection:	MAL
Classification:	mal72.troj.evad.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/fenty.arm5.elf
PID:	6235
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Hello, World!
Standard Error:

Process Tree

system is lnxubuntu20

fenty.arm5.elf (PID: 6235, Parent: 6157, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/fenty.arm5.elf

fenty.arm5.elf New Fork (PID: 6237, Parent: 6235)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
6235.1.00007f8a9c017000.00007f8a9c024000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
6235.1.00007f8a9c017000.00007f8a9c024000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xbf88:$x2: /dev/misc/watchdog 0xbf78:$x3: /dev/watchdog 0xbfc4:$x3: /dev/watchdog 0xc138:$s1: LCOGQGPTGP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: fenty.arm5.elf

ReversingLabs: Detection: 15%

Source: global traffic

TCP traffic: 192.168.2.23:50710 -> 185.196.9.234:2969

Source: /tmp/fenty.arm5.elf (PID: 6235)

Socket: 0.0.0.0:54721

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234
Source: unknown	TCP traffic detected without corresponding DNS query: 185.196.9.234

Source: fenty.arm5.elf

String found in binary or memory: http://upx.sf.net

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: 6235.1.00007f8a9c017000.00007f8a9c024000.r-x.sdmp, type: MEMORY

Matched rule: Detects Mirai Botnet Malware Author: Florian Roth

Source: LOAD without section mappings

Program segment: 0x8000

Source: 6235.1.00007f8a9c017000.00007f8a9c024000.r-x.sdmp, type: MEMORY

Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b

Source: classification engine

Classification label: mal72.troj.evad.linELF@0/0@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/fenty.arm5.elf (PID: 6235)

File: /tmp/fenty.arm5.elf

Jump to behavior

Source: fenty.arm5.elf

Submission file: segment LOAD with 7.6883 entropy (max. 8.0)

Source: /tmp/fenty.arm5.elf (PID: 6235)

Queries kernel information via 'uname':

Jump to behavior

Source: fenty.arm5.elf, 6235.1.00005573e304f000.00005573e319d000.rw-.sdmp	Binary or memory string: sU!/etc/qemu-binfmt/arm
Source: fenty.arm5.elf, 6235.1.00005573e304f000.00005573e319d000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: fenty.arm5.elf, 6235.1.00007ffd993d8000.00007ffd993f9000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: fenty.arm5.elf, 6235.1.00007ffd993d8000.00007ffd993f9000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/fenty.arm5.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/fenty.arm5.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match

File source: 6235.1.00007f8a9c017000.00007f8a9c024000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match

File source: 6235.1.00007f8a9c017000.00007f8a9c024000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
fenty.arm5.elf	16%	ReversingLabs

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	fenty.arm5.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
185.196.9.234	unknown	Switzerland	42624	SIMPLECARRIERCH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
185.196.9.234	fenty.arm5.elf	Get hash	malicious	Mirai	Browse
	fenty.arm5.elf	Get hash	malicious	Mirai	Browse
	fenty.arm5.elf	Get hash	malicious	Mirai	Browse
91.189.91.43	Kloki.arm7.elf	Get hash	malicious	Unknown	Browse
	Kloki.arm6.elf	Get hash	malicious	Unknown	Browse
	dlr.mips.elf	Get hash	malicious	Unknown	Browse
	earm6.elf	Get hash	malicious	Mirai	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse
	main_x86.elf	Get hash	malicious	Mirai	Browse
	m5.elf	Get hash	malicious	Unknown	Browse
	uYtea.x86.elf	Get hash	malicious	Unknown	Browse
	uYtea.mpsl.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	Kloki.arm7.elf	Get hash	malicious	Unknown	Browse
	Kloki.arm6.elf	Get hash	malicious	Unknown	Browse
	dlr.mips.elf	Get hash	malicious	Unknown	Browse
	earm6.elf	Get hash	malicious	Mirai	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse
	main_x86.elf	Get hash	malicious	Mirai	Browse
	m5.elf	Get hash	malicious	Unknown	Browse
	uYtea.x86.elf	Get hash	malicious	Unknown	Browse
	uYtea.mpsl.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	Kloki.arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Kloki.x86_64.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Kloki.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	dlr.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	earm6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	main_x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	m5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	uYtea.sh4.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
CANONICAL-ASGB	Kloki.arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Kloki.x86_64.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Kloki.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	dlr.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	earm6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	main_x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	m5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	uYtea.sh4.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
SIMPLECARRIERCH	fenty.arm5.elf	Get hash	malicious	Mirai	Browse	185.196.9.234
	fenty.arm5.elf	Get hash	malicious	Mirai	Browse	185.196.9.234
	fenty.arm5.elf	Get hash	malicious	Mirai	Browse	185.196.9.234
	sparc.elf	Get hash	malicious	Mirai	Browse	185.196.10.127
	armv6l.elf	Get hash	malicious	Mirai	Browse	185.196.10.127
	sh4.elf	Get hash	malicious	Mirai	Browse	185.196.10.127
	mips.elf	Get hash	malicious	Mirai	Browse	185.196.10.127
	mipsel.elf	Get hash	malicious	Mirai	Browse	185.196.10.127
	x86_64.elf	Get hash	malicious	Mirai	Browse	185.196.10.127
	armv7l.elf	Get hash	malicious	Mirai	Browse	185.196.10.127
INIT7CH	Kloki.arm7.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Kloki.arm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	dlr.mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	earm6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	2.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	main_x86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	m5.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	uYtea.x86.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	uYtea.mpsl.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, no section header
Entropy (8bit):	7.6827427868141855
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	fenty.arm5.elf
File size:	22'276 bytes
MD5:	afe25e6159cdc6dd506cab755bc2bc75
SHA1:	531362ffc8da8326de5e22a36c0efd3f47d1c71e
SHA256:	fb5213d7803ad1bf0d22ba13cf9241c02bf985ed56545a4f75d2a79426c67ba7
SHA512:	2590f02753fbbb07019997aba25597eba62b7e03ab57ec2d5767d0ba99e7ff2d6504e82a0d01ee3044560463f880dd0dd86cec4042aed9f9ca72e5f30903bb26
SSDEEP:	384:B91ltcjAe9TG7sIhcnI+d+cVNHRqUSGHLd2O6YMxh2yXoEvlEkn1kxhTp/f2Bl:B9XqkwTGIn3+iRqUS65v0YECJdIl
TLSH:	0CA2C002E580845FCF0B01BAB00FD33D9F4B7AAB3A9A56781C55798DA80F5E4E515E87
File Content Preview:	.ELF...a..........(.........4...........4. ...(......................V...V...............I..........................Q.td................................Gdg!T...................U.........ELF.ra....(........4....... ........g..g......._......F,.@h.....Q.t.d

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0xccd0
Flags:	0x2
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8000	0x8000	0x560b	0x560b	7.6883	0x5	R E	0x8000
LOAD	0x4918	0x1c918	0x1c918	0x0	0x0	0.0000	0x6	RW	0x8000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 8, 2025 20:42:49.720220089 CET	50710	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:49.725193977 CET	2969	50710	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:49.725255966 CET	50710	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:49.742614031 CET	50710	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:49.747450113 CET	2969	50710	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:49.747558117 CET	50710	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:49.752465963 CET	2969	50710	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:50.441931009 CET	2969	50710	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:50.442143917 CET	50710	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:50.442317009 CET	50710	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:50.442928076 CET	50712	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:50.447705030 CET	2969	50712	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:50.447779894 CET	50712	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:50.448621988 CET	50712	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:50.453353882 CET	2969	50712	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:50.453447104 CET	50712	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:50.458200932 CET	2969	50712	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:51.160763979 CET	2969	50712	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:51.160942078 CET	50712	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.160994053 CET	50712	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.161592007 CET	50714	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.166405916 CET	2969	50714	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:51.166510105 CET	50714	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.167560101 CET	50714	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.172354937 CET	2969	50714	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:51.172426939 CET	50714	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.177248955 CET	2969	50714	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:51.449460983 CET	43928	443	192.168.2.23	91.189.91.42
Jan 8, 2025 20:42:51.877012968 CET	2969	50714	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:51.877115011 CET	50714	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.877162933 CET	50714	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.877549887 CET	50716	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.882348061 CET	2969	50716	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:51.882405043 CET	50716	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.883073092 CET	50716	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.887846947 CET	2969	50716	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:51.887913942 CET	50716	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:51.892683983 CET	2969	50716	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:52.599020958 CET	2969	50716	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:52.599159956 CET	50716	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:52.599191904 CET	50716	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:52.600014925 CET	50718	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:52.606506109 CET	2969	50718	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:52.606570959 CET	50718	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:52.607186079 CET	50718	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:52.616112947 CET	2969	50718	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:52.616288900 CET	50718	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:52.622538090 CET	2969	50718	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:53.352149963 CET	2969	50718	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:53.352298975 CET	50718	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:53.352298975 CET	50718	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:53.352773905 CET	50720	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:53.357656002 CET	2969	50720	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:53.357722044 CET	50720	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:53.358376026 CET	50720	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:53.363142967 CET	2969	50720	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:53.363218069 CET	50720	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:53.367959023 CET	2969	50720	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:54.096168041 CET	2969	50720	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:54.096335888 CET	50720	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.096381903 CET	50720	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.096836090 CET	50722	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.101641893 CET	2969	50722	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:54.101706982 CET	50722	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.102406979 CET	50722	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.107117891 CET	2969	50722	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:54.107189894 CET	50722	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.111943007 CET	2969	50722	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:54.830280066 CET	2969	50722	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:54.830446959 CET	50722	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.830533028 CET	50722	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.831047058 CET	50724	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.835808039 CET	2969	50724	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:54.835865021 CET	50724	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.836525917 CET	50724	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.841259003 CET	2969	50724	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:54.841311932 CET	50724	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:54.846076965 CET	2969	50724	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:55.539803982 CET	2969	50724	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:55.540050030 CET	50724	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:55.540050030 CET	50724	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:55.540517092 CET	50726	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:55.545303106 CET	2969	50726	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:55.545367002 CET	50726	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:55.546001911 CET	50726	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:55.551672935 CET	2969	50726	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:55.551753998 CET	50726	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:55.556534052 CET	2969	50726	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:56.238374949 CET	2969	50726	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:56.238504887 CET	50726	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.238646984 CET	50726	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.239177942 CET	50728	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.245157003 CET	2969	50728	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:56.245215893 CET	50728	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.245867014 CET	50728	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.250633955 CET	2969	50728	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:56.250694036 CET	50728	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.255455971 CET	2969	50728	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:56.824728012 CET	42836	443	192.168.2.23	91.189.91.43
Jan 8, 2025 20:42:56.927294970 CET	2969	50728	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:56.927454948 CET	50728	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.927711010 CET	50728	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.928172112 CET	50730	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.932976007 CET	2969	50730	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:56.933041096 CET	50730	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.933834076 CET	50730	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.938617945 CET	2969	50730	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:56.938666105 CET	50730	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:56.943473101 CET	2969	50730	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:57.754220009 CET	2969	50730	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:57.754342079 CET	50730	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:57.754517078 CET	50730	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:57.755060911 CET	50732	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:57.759854078 CET	2969	50732	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:57.759917974 CET	50732	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:57.760588884 CET	50732	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:57.765342951 CET	2969	50732	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:57.765388966 CET	50732	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:57.770165920 CET	2969	50732	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:58.511961937 CET	2969	50732	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:58.512089014 CET	50732	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:58.512310028 CET	50732	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:58.513062954 CET	50734	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:58.517842054 CET	2969	50734	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:58.517899990 CET	50734	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:58.518872976 CET	50734	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:58.523793936 CET	2969	50734	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:58.523838043 CET	50734	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:58.528798103 CET	2969	50734	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:58.616445065 CET	42516	80	192.168.2.23	109.202.202.202
Jan 8, 2025 20:42:59.224246025 CET	2969	50734	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:59.224360943 CET	50734	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.224554062 CET	50734	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.225294113 CET	50736	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.230112076 CET	2969	50736	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:59.230194092 CET	50736	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.231153011 CET	50736	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.235960960 CET	2969	50736	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:59.236027002 CET	50736	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.240833998 CET	2969	50736	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:59.925827026 CET	2969	50736	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:59.925992012 CET	50736	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.926027060 CET	50736	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.926510096 CET	50738	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.931271076 CET	2969	50738	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:59.931330919 CET	50738	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.931973934 CET	50738	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.936748028 CET	2969	50738	185.196.9.234	192.168.2.23
Jan 8, 2025 20:42:59.936805964 CET	50738	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:42:59.941610098 CET	2969	50738	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:00.639370918 CET	2969	50738	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:00.639626980 CET	50738	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:00.639683962 CET	50738	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:00.640234947 CET	50740	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:00.645018101 CET	2969	50740	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:00.645095110 CET	50740	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:00.645987988 CET	50740	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:00.650718927 CET	2969	50740	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:00.650778055 CET	50740	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:00.655512094 CET	2969	50740	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:01.352905035 CET	2969	50740	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:01.353337049 CET	50740	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:01.353337049 CET	50740	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:01.354021072 CET	50742	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:01.358820915 CET	2969	50742	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:01.358875036 CET	50742	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:01.359536886 CET	50742	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:01.364288092 CET	2969	50742	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:01.364339113 CET	50742	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:01.369096041 CET	2969	50742	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:02.076073885 CET	2969	50742	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:02.076389074 CET	50742	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.076468945 CET	50742	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.077137947 CET	50744	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.081957102 CET	2969	50744	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:02.082048893 CET	50744	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.083113909 CET	50744	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.087867022 CET	2969	50744	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:02.087960958 CET	50744	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.092747927 CET	2969	50744	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:02.820350885 CET	2969	50744	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:02.820610046 CET	50744	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.820688963 CET	50744	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.821463108 CET	50746	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.827892065 CET	2969	50746	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:02.827969074 CET	50746	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.829009056 CET	50746	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.836062908 CET	2969	50746	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:02.836122036 CET	50746	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:02.842803001 CET	2969	50746	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:03.577143908 CET	2969	50746	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:03.577328920 CET	50746	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:03.577429056 CET	50746	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:03.578188896 CET	50748	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:03.583077908 CET	2969	50748	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:03.583183050 CET	50748	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:03.584220886 CET	50748	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:03.588953018 CET	2969	50748	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:03.589010954 CET	50748	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:03.593802929 CET	2969	50748	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:04.300965071 CET	2969	50748	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:04.301165104 CET	50748	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:04.301278114 CET	50748	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:04.302027941 CET	50750	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:04.306811094 CET	2969	50750	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:04.306886911 CET	50750	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:04.307961941 CET	50750	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:04.312783003 CET	2969	50750	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:04.312845945 CET	50750	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:04.317668915 CET	2969	50750	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:05.003262043 CET	2969	50750	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:05.003438950 CET	50750	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.003653049 CET	50750	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.004250050 CET	50752	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.009076118 CET	2969	50752	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:05.009162903 CET	50752	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.009967089 CET	50752	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.014717102 CET	2969	50752	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:05.014790058 CET	50752	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.019539118 CET	2969	50752	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:05.729302883 CET	2969	50752	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:05.729505062 CET	50752	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.729533911 CET	50752	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.730142117 CET	50754	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.734975100 CET	2969	50754	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:05.735073090 CET	50754	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.735784054 CET	50754	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.740575075 CET	2969	50754	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:05.740636110 CET	50754	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:05.745402098 CET	2969	50754	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:06.451055050 CET	2969	50754	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:06.451219082 CET	50754	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:06.451366901 CET	50754	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:06.451996088 CET	50756	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:06.457217932 CET	2969	50756	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:06.457274914 CET	50756	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:06.458287001 CET	50756	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:06.463618994 CET	2969	50756	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:06.463663101 CET	50756	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:06.469202995 CET	2969	50756	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:07.165925026 CET	2969	50756	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:07.166203022 CET	50756	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.166203976 CET	50756	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.166836023 CET	50758	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.171616077 CET	2969	50758	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:07.171725035 CET	50758	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.172705889 CET	50758	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.177490950 CET	2969	50758	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:07.177540064 CET	50758	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.182291031 CET	2969	50758	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:07.887243986 CET	2969	50758	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:07.887469053 CET	50758	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.887511969 CET	50758	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.888149977 CET	50760	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.892999887 CET	2969	50760	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:07.893241882 CET	50760	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.893985033 CET	50760	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.898768902 CET	2969	50760	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:07.898818970 CET	50760	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:07.903649092 CET	2969	50760	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:08.607439995 CET	2969	50760	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:08.607722044 CET	50760	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:08.607775927 CET	50760	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:08.608513117 CET	50762	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:08.613320112 CET	2969	50762	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:08.613420010 CET	50762	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:08.614461899 CET	50762	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:08.619249105 CET	2969	50762	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:08.619332075 CET	50762	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:08.624198914 CET	2969	50762	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:09.341895103 CET	2969	50762	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:09.342108965 CET	50762	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:09.342163086 CET	50762	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:09.342840910 CET	50764	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:09.347635031 CET	2969	50764	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:09.347723961 CET	50764	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:09.348720074 CET	50764	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:09.353487015 CET	2969	50764	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:09.353562117 CET	50764	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:09.358405113 CET	2969	50764	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:10.084110022 CET	2969	50764	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:10.084306002 CET	50764	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.084521055 CET	50764	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.085354090 CET	50766	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.090117931 CET	2969	50766	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:10.090202093 CET	50766	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.091310978 CET	50766	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.096052885 CET	2969	50766	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:10.096120119 CET	50766	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.100929022 CET	2969	50766	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:10.834947109 CET	2969	50766	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:10.835124969 CET	50766	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.835262060 CET	50766	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.835969925 CET	50768	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.840763092 CET	2969	50768	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:10.840852022 CET	50768	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.841928959 CET	50768	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.846731901 CET	2969	50768	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:10.846808910 CET	50768	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:10.851608038 CET	2969	50768	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:11.560298920 CET	2969	50768	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:11.560636044 CET	50768	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:11.560718060 CET	50768	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:11.561494112 CET	50770	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:11.566282988 CET	2969	50770	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:11.566359043 CET	50770	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:11.567323923 CET	50770	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:11.572030067 CET	2969	50770	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:11.572087049 CET	50770	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:11.576827049 CET	2969	50770	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:11.926668882 CET	43928	443	192.168.2.23	91.189.91.42
Jan 8, 2025 20:43:12.342080116 CET	2969	50770	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:12.342225075 CET	50770	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:12.342279911 CET	50770	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:12.342839003 CET	50772	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:12.347692013 CET	2969	50772	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:12.347740889 CET	50772	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:12.348361969 CET	50772	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:12.353185892 CET	2969	50772	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:12.353226900 CET	50772	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:12.358061075 CET	2969	50772	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:13.063582897 CET	2969	50772	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:13.063838959 CET	50772	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.063838959 CET	50772	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.064409971 CET	50774	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.069206953 CET	2969	50774	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:13.069266081 CET	50774	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.069901943 CET	50774	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.074682951 CET	2969	50774	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:13.074796915 CET	50774	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.079612017 CET	2969	50774	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:13.775732040 CET	2969	50774	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:13.776030064 CET	50774	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.776030064 CET	50774	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.776721001 CET	50776	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.781480074 CET	2969	50776	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:13.781562090 CET	50776	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.782586098 CET	50776	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.787374973 CET	2969	50776	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:13.787435055 CET	50776	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:13.792233944 CET	2969	50776	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:14.498738050 CET	2969	50776	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:14.499083996 CET	50776	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:14.499177933 CET	50776	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:14.500019073 CET	50778	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:14.504807949 CET	2969	50778	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:14.504897118 CET	50778	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:14.506112099 CET	50778	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:14.510909081 CET	2969	50778	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:14.510972023 CET	50778	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:14.515788078 CET	2969	50778	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:15.222673893 CET	2969	50778	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:15.222901106 CET	50778	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.223006964 CET	50778	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.223779917 CET	50780	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.228558064 CET	2969	50780	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:15.228662968 CET	50780	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.229635000 CET	50780	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.234436989 CET	2969	50780	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:15.234522104 CET	50780	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.239376068 CET	2969	50780	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:15.927448034 CET	2969	50780	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:15.927725077 CET	50780	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.927771091 CET	50780	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.928576946 CET	50782	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.933438063 CET	2969	50782	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:15.933521986 CET	50782	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.934717894 CET	50782	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.939462900 CET	2969	50782	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:15.939522982 CET	50782	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:15.944377899 CET	2969	50782	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:16.632767916 CET	2969	50782	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:16.633037090 CET	50782	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:16.633037090 CET	50782	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:16.633820057 CET	50784	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:16.638678074 CET	2969	50784	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:16.638746023 CET	50784	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:16.639802933 CET	50784	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:16.644555092 CET	2969	50784	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:16.644617081 CET	50784	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:16.649439096 CET	2969	50784	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:17.336687088 CET	2969	50784	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:17.337105036 CET	50784	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:17.337263107 CET	50784	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:17.338061094 CET	50786	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:17.342875004 CET	2969	50786	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:17.342957973 CET	50786	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:17.344054937 CET	50786	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:17.348824978 CET	2969	50786	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:17.348884106 CET	50786	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:17.353763103 CET	2969	50786	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:18.066627979 CET	2969	50786	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:18.066924095 CET	50786	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.066997051 CET	50786	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.067770004 CET	50788	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.072652102 CET	2969	50788	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:18.072736979 CET	50788	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.073692083 CET	50788	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.078490973 CET	2969	50788	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:18.078758001 CET	50788	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.083553076 CET	2969	50788	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:18.784621000 CET	2969	50788	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:18.784905910 CET	50788	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.785047054 CET	50788	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.785845995 CET	50790	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.790606022 CET	2969	50790	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:18.790693045 CET	50790	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.791740894 CET	50790	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.796551943 CET	2969	50790	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:18.796611071 CET	50790	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:18.801358938 CET	2969	50790	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:19.531333923 CET	2969	50790	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:19.531516075 CET	50790	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:19.531564951 CET	50790	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:19.532212973 CET	50792	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:19.537034035 CET	2969	50792	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:19.537125111 CET	50792	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:19.537950039 CET	50792	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:19.542788029 CET	2969	50792	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:19.542859077 CET	50792	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:19.547607899 CET	2969	50792	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:20.267028093 CET	2969	50792	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:20.267373085 CET	50792	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.267373085 CET	50792	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.268047094 CET	50794	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.272882938 CET	2969	50794	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:20.272960901 CET	50794	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.273993015 CET	50794	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.278717995 CET	2969	50794	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:20.278773069 CET	50794	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.283596992 CET	2969	50794	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:20.979058027 CET	2969	50794	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:20.979362011 CET	50794	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.979401112 CET	50794	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.980021000 CET	50796	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.984827042 CET	2969	50796	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:20.984916925 CET	50796	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.985686064 CET	50796	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.990451097 CET	2969	50796	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:20.990519047 CET	50796	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:20.995332003 CET	2969	50796	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:21.708916903 CET	2969	50796	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:21.709044933 CET	50796	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:21.709340096 CET	50796	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:21.710082054 CET	50798	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:21.714879036 CET	2969	50798	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:21.714945078 CET	50798	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:21.716078043 CET	50798	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:21.720869064 CET	2969	50798	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:21.720917940 CET	50798	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:21.725698948 CET	2969	50798	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:22.414623976 CET	2969	50798	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:22.414922953 CET	50798	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:22.415025949 CET	50798	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:22.415771961 CET	50800	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:22.420562983 CET	2969	50800	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:22.420650959 CET	50800	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:22.421694040 CET	50800	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:22.426462889 CET	2969	50800	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:22.426527977 CET	50800	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:22.431282043 CET	2969	50800	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:23.140533924 CET	2969	50800	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:23.140818119 CET	50800	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.140818119 CET	50800	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.141621113 CET	50802	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.146450996 CET	2969	50802	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:23.146529913 CET	50802	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.147629976 CET	50802	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.152447939 CET	2969	50802	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:23.152508974 CET	50802	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.157321930 CET	2969	50802	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:23.871788025 CET	2969	50802	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:23.872095108 CET	50802	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.872095108 CET	50802	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.872853994 CET	50804	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.877737045 CET	2969	50804	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:23.877810001 CET	50804	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.878956079 CET	50804	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.883744955 CET	2969	50804	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:23.883812904 CET	50804	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:23.888581991 CET	2969	50804	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:24.212935925 CET	42836	443	192.168.2.23	91.189.91.43
Jan 8, 2025 20:43:24.595277071 CET	2969	50804	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:24.595452070 CET	50804	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:24.595539093 CET	50804	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:24.596297026 CET	50806	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:24.601053953 CET	2969	50806	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:24.601129055 CET	50806	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:24.602149010 CET	50806	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:24.607009888 CET	2969	50806	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:24.607074022 CET	50806	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:24.611887932 CET	2969	50806	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:25.318620920 CET	2969	50806	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:25.318818092 CET	50806	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:25.318902969 CET	50806	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:25.319658995 CET	50808	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:25.324462891 CET	2969	50808	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:25.324539900 CET	50808	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:25.325581074 CET	50808	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:25.330426931 CET	2969	50808	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:25.330487967 CET	50808	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:25.335253954 CET	2969	50808	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:26.009913921 CET	2969	50808	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:26.010128975 CET	50808	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.010200977 CET	50808	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.011023998 CET	50810	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.015824080 CET	2969	50810	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:26.015914917 CET	50810	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.017036915 CET	50810	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.021838903 CET	2969	50810	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:26.021900892 CET	50810	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.026659012 CET	2969	50810	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:26.728625059 CET	2969	50810	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:26.728939056 CET	50810	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.728939056 CET	50810	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.729716063 CET	50812	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.734489918 CET	2969	50812	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:26.734579086 CET	50812	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.735694885 CET	50812	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.740474939 CET	2969	50812	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:26.740575075 CET	50812	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:26.745388985 CET	2969	50812	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:27.428055048 CET	2969	50812	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:27.428359032 CET	50812	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:27.428492069 CET	50812	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:27.429296017 CET	50814	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:27.434114933 CET	2969	50814	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:27.434201956 CET	50814	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:27.435348034 CET	50814	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:27.440098047 CET	2969	50814	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:27.440172911 CET	50814	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:27.444947004 CET	2969	50814	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:28.133008957 CET	2969	50814	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:28.133357048 CET	50814	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.133452892 CET	50814	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.134207964 CET	50816	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.138972998 CET	2969	50816	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:28.139040947 CET	50816	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.139935017 CET	50816	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.144675016 CET	2969	50816	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:28.144736052 CET	50816	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.149456024 CET	2969	50816	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:28.308402061 CET	42516	80	192.168.2.23	109.202.202.202
Jan 8, 2025 20:43:28.844655037 CET	2969	50816	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:28.844958067 CET	50816	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.845035076 CET	50816	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.845843077 CET	50818	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.850671053 CET	2969	50818	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:28.850745916 CET	50818	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.851810932 CET	50818	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.856617928 CET	2969	50818	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:28.856671095 CET	50818	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:28.861440897 CET	2969	50818	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:29.549618959 CET	2969	50818	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:29.549786091 CET	50818	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:29.549884081 CET	50818	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:29.550684929 CET	50820	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:29.556054115 CET	2969	50820	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:29.556149006 CET	50820	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:29.557219982 CET	50820	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:29.561954975 CET	2969	50820	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:29.562024117 CET	50820	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:29.566751957 CET	2969	50820	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:30.245672941 CET	2969	50820	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:30.245961905 CET	50820	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.246041059 CET	50820	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.246776104 CET	50822	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.251619101 CET	2969	50822	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:30.251688957 CET	50822	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.252522945 CET	50822	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.257308960 CET	2969	50822	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:30.257354975 CET	50822	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.262135983 CET	2969	50822	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:30.953025103 CET	2969	50822	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:30.953298092 CET	50822	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.953397989 CET	50822	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.954085112 CET	50824	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.958894014 CET	2969	50824	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:30.958950996 CET	50824	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.959659100 CET	50824	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.964369059 CET	2969	50824	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:30.964413881 CET	50824	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:30.969192982 CET	2969	50824	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:31.679995060 CET	2969	50824	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:31.680361986 CET	50824	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:31.680442095 CET	50824	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:31.681596041 CET	50826	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:31.686348915 CET	2969	50826	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:31.686429977 CET	50826	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:31.687982082 CET	50826	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:31.692836046 CET	2969	50826	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:31.692895889 CET	50826	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:31.697738886 CET	2969	50826	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:32.407844067 CET	2969	50826	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:32.408083916 CET	50826	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:32.408083916 CET	50826	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:32.408806086 CET	50828	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:32.413657904 CET	2969	50828	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:32.413737059 CET	50828	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:32.414794922 CET	50828	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:32.419517994 CET	2969	50828	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:32.419580936 CET	50828	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:32.424386978 CET	2969	50828	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.048325062 CET	2969	50828	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.048489094 CET	50828	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.048573971 CET	50828	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.049294949 CET	50830	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.051382065 CET	2969	50828	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.051450968 CET	50828	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.051657915 CET	2969	50828	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.051717043 CET	50828	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.051726103 CET	2969	50828	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.051785946 CET	50828	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.059952021 CET	2969	50830	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.060009956 CET	50830	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.060697079 CET	50830	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.069822073 CET	2969	50830	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.069870949 CET	50830	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.075294971 CET	2969	50830	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.759732962 CET	2969	50830	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.759874105 CET	50830	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.759895086 CET	50830	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.760442019 CET	50832	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.765238047 CET	2969	50832	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.765307903 CET	50832	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.765988111 CET	50832	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.770828962 CET	2969	50832	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:34.770889997 CET	50832	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:34.775721073 CET	2969	50832	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:35.497575998 CET	2969	50832	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:35.497782946 CET	50832	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:35.497828960 CET	50832	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:35.498610020 CET	50834	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:35.503371954 CET	2969	50834	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:35.503464937 CET	50834	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:35.504324913 CET	50834	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:35.509728909 CET	2969	50834	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:35.509804010 CET	50834	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:35.514583111 CET	2969	50834	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:36.209384918 CET	2969	50834	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:36.209625006 CET	50834	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.209664106 CET	50834	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.210441113 CET	50836	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.215249062 CET	2969	50836	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:36.215339899 CET	50836	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.216526031 CET	50836	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.221385956 CET	2969	50836	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:36.221457958 CET	50836	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.226317883 CET	2969	50836	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:36.912431955 CET	2969	50836	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:36.912585020 CET	50836	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.912632942 CET	50836	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.913163900 CET	50838	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.918006897 CET	2969	50838	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:36.918076038 CET	50838	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.918833971 CET	50838	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.923592091 CET	2969	50838	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:36.923646927 CET	50838	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:36.928359032 CET	2969	50838	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:37.640898943 CET	2969	50838	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:37.641062021 CET	50838	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:37.641087055 CET	50838	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:37.641683102 CET	50840	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:37.646465063 CET	2969	50840	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:37.646532059 CET	50840	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:37.647428989 CET	50840	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:37.652185917 CET	2969	50840	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:37.652268887 CET	50840	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:37.657012939 CET	2969	50840	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:38.372606993 CET	2969	50840	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:38.372740030 CET	50840	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:38.372836113 CET	50840	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:38.373409986 CET	50842	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:38.380486965 CET	2969	50842	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:38.380578041 CET	50842	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:38.381544113 CET	50842	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:38.387451887 CET	2969	50842	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:38.387521982 CET	50842	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:38.392488956 CET	2969	50842	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:39.232156038 CET	2969	50842	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:39.232260942 CET	50842	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.232285023 CET	50842	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.232739925 CET	50844	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.237788916 CET	2969	50844	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:39.237839937 CET	50844	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.238507032 CET	50844	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.243216038 CET	2969	50844	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:39.243253946 CET	50844	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.247982979 CET	2969	50844	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:39.954857111 CET	2969	50844	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:39.954981089 CET	50844	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.955285072 CET	50844	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.958101034 CET	50846	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.962888956 CET	2969	50846	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:39.963241100 CET	50846	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.964647055 CET	50846	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.969391108 CET	2969	50846	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:39.969461918 CET	50846	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:39.974282026 CET	2969	50846	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:40.671807051 CET	2969	50846	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:40.671983004 CET	50846	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:40.672034025 CET	50846	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:40.672595978 CET	50848	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:40.677381992 CET	2969	50848	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:40.677464962 CET	50848	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:40.678286076 CET	50848	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:40.683029890 CET	2969	50848	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:40.683100939 CET	50848	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:40.687833071 CET	2969	50848	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:41.394844055 CET	2969	50848	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:41.394984961 CET	50848	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:41.395015001 CET	50848	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:41.395525932 CET	50850	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:41.400274038 CET	2969	50850	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:41.400326967 CET	50850	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:41.400995016 CET	50850	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:41.405719995 CET	2969	50850	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:41.405778885 CET	50850	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:41.410553932 CET	2969	50850	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:42.121439934 CET	2969	50850	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:42.121577024 CET	50850	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.121618032 CET	50850	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.122225046 CET	50852	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.127003908 CET	2969	50852	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:42.127057076 CET	50852	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.127789021 CET	50852	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.132524967 CET	2969	50852	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:42.132575989 CET	50852	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.137356997 CET	2969	50852	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:42.828874111 CET	2969	50852	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:42.829025984 CET	50852	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.829068899 CET	50852	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.829663992 CET	50854	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.834479094 CET	2969	50854	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:42.834541082 CET	50854	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.835406065 CET	50854	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.840204000 CET	2969	50854	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:42.840256929 CET	50854	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:42.845055103 CET	2969	50854	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:43.550049067 CET	2969	50854	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:43.550173044 CET	50854	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:43.550214052 CET	50854	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:43.550832033 CET	50856	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:43.555704117 CET	2969	50856	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:43.555777073 CET	50856	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:43.556540966 CET	50856	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:43.561279058 CET	2969	50856	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:43.561347008 CET	50856	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:43.566154957 CET	2969	50856	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:44.254885912 CET	2969	50856	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:44.255028009 CET	50856	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.255064011 CET	50856	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.255610943 CET	50858	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.260415077 CET	2969	50858	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:44.260467052 CET	50858	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.261158943 CET	50858	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.265921116 CET	2969	50858	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:44.265983105 CET	50858	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.270817041 CET	2969	50858	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:44.957324028 CET	2969	50858	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:44.957422018 CET	50858	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.957422972 CET	50858	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.957993031 CET	50860	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.962795973 CET	2969	50860	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:44.962862968 CET	50860	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.963618040 CET	50860	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.968377113 CET	2969	50860	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:44.968415022 CET	50860	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:44.973256111 CET	2969	50860	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:45.666239023 CET	2969	50860	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:45.666342020 CET	50860	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:45.666366100 CET	50860	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:45.666903019 CET	50862	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:45.671705961 CET	2969	50862	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:45.671758890 CET	50862	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:45.672561884 CET	50862	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:45.677320957 CET	2969	50862	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:45.677366018 CET	50862	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:45.682188988 CET	2969	50862	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:46.367475033 CET	2969	50862	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:46.367608070 CET	50862	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:46.367630959 CET	50862	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:46.368366957 CET	50864	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:46.373243093 CET	2969	50864	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:46.373332024 CET	50864	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:46.374274015 CET	50864	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:46.379064083 CET	2969	50864	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:46.379132032 CET	50864	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:46.383853912 CET	2969	50864	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:47.116574049 CET	2969	50864	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:47.116758108 CET	50864	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.116863966 CET	50864	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.117615938 CET	50866	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.122792006 CET	2969	50866	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:47.122875929 CET	50866	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.124155045 CET	50866	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.128925085 CET	2969	50866	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:47.128988028 CET	50866	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.133733988 CET	2969	50866	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:47.830235958 CET	2969	50866	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:47.830419064 CET	50866	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.830446959 CET	50866	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.831119061 CET	50868	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.835894108 CET	2969	50868	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:47.835975885 CET	50868	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.836786032 CET	50868	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.841516018 CET	2969	50868	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:47.841581106 CET	50868	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:47.846318007 CET	2969	50868	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:48.533719063 CET	2969	50868	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:48.533890963 CET	50868	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:48.533941031 CET	50868	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:48.534641981 CET	50870	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:48.539376020 CET	2969	50870	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:48.539453983 CET	50870	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:48.540486097 CET	50870	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:48.545274019 CET	2969	50870	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:48.545341015 CET	50870	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:48.550086021 CET	2969	50870	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:49.287213087 CET	2969	50870	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:49.287425041 CET	50870	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:49.287616968 CET	50870	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:49.288599014 CET	50872	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:49.293390036 CET	2969	50872	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:49.293452024 CET	50872	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:49.294964075 CET	50872	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:49.299736977 CET	2969	50872	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:49.299806118 CET	50872	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:49.304557085 CET	2969	50872	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:50.003017902 CET	2969	50872	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:50.003197908 CET	50872	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.003273964 CET	50872	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.004182100 CET	50874	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.008997917 CET	2969	50874	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:50.009069920 CET	50874	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.010729074 CET	50874	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.015526056 CET	2969	50874	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:50.015594006 CET	50874	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.020404100 CET	2969	50874	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:50.731106997 CET	2969	50874	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:50.731245995 CET	50874	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.731287956 CET	50874	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.732364893 CET	50876	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.737180948 CET	2969	50876	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:50.737227917 CET	50876	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.738635063 CET	50876	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.743386030 CET	2969	50876	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:50.743437052 CET	50876	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:50.748708010 CET	2969	50876	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:51.467781067 CET	2969	50876	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:51.467901945 CET	50876	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:51.467931032 CET	50876	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:51.468799114 CET	50878	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:51.473583937 CET	2969	50878	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:51.473645926 CET	50878	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:51.474932909 CET	50878	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:51.479732037 CET	2969	50878	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:51.479780912 CET	50878	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:51.484544039 CET	2969	50878	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:52.196861982 CET	2969	50878	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:52.196979046 CET	50878	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.197033882 CET	50878	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.197514057 CET	50880	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.202311039 CET	2969	50880	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:52.202383995 CET	50880	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.203120947 CET	50880	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.207870960 CET	2969	50880	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:52.207920074 CET	50880	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.212655067 CET	2969	50880	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:52.880951881 CET	43928	443	192.168.2.23	91.189.91.42
Jan 8, 2025 20:43:52.913458109 CET	2969	50880	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:52.913603067 CET	50880	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.913691998 CET	50880	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.914351940 CET	50882	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.921147108 CET	2969	50882	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:52.921253920 CET	50882	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.922220945 CET	50882	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.928982973 CET	2969	50882	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:52.929050922 CET	50882	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:52.935904026 CET	2969	50882	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:53.655159950 CET	2969	50882	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:53.655389071 CET	50882	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:53.655503035 CET	50882	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:53.656229973 CET	50884	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:53.661031961 CET	2969	50884	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:53.661112070 CET	50884	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:53.662166119 CET	50884	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:53.666939974 CET	2969	50884	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:53.667004108 CET	50884	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:53.671848059 CET	2969	50884	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:54.402247906 CET	2969	50884	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:54.402555943 CET	50884	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:54.402618885 CET	50884	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:54.403369904 CET	50886	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:54.410320997 CET	2969	50886	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:54.410382986 CET	50886	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:54.411036968 CET	50886	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:54.419136047 CET	2969	50886	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:54.419234991 CET	50886	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:54.427860022 CET	2969	50886	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:55.158015966 CET	2969	50886	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:55.158255100 CET	50886	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.158310890 CET	50886	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.159004927 CET	50888	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.163880110 CET	2969	50888	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:55.163968086 CET	50888	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.165011883 CET	50888	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.169796944 CET	2969	50888	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:55.169862032 CET	50888	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.174616098 CET	2969	50888	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:55.905047894 CET	2969	50888	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:55.905435085 CET	50888	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.905508041 CET	50888	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.906145096 CET	50890	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.911281109 CET	2969	50890	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:55.911406994 CET	50890	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.912401915 CET	50890	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.917155027 CET	2969	50890	185.196.9.234	192.168.2.23
Jan 8, 2025 20:43:55.917233944 CET	50890	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:43:55.922049046 CET	2969	50890	185.196.9.234	192.168.2.23
Jan 8, 2025 20:44:05.921560049 CET	50890	2969	192.168.2.23	185.196.9.234
Jan 8, 2025 20:44:05.926469088 CET	2969	50890	185.196.9.234	192.168.2.23
Jan 8, 2025 20:44:06.143155098 CET	2969	50890	185.196.9.234	192.168.2.23
Jan 8, 2025 20:44:06.143311024 CET	50890	2969	192.168.2.23	185.196.9.234

System Behavior

Analysis Process: fenty.arm5.elf PID: 6235, Parent PID: 6157

General

Start time (UTC):	19:42:49
Start date (UTC):	08/01/2025
Path:	/tmp/fenty.arm5.elf
Arguments:	/tmp/fenty.arm5.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	19:42:49
Start date (UTC):	08/01/2025
Path:	/tmp/fenty.arm5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report fenty.arm5.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: fenty.arm5.elf PID: 6235, Parent PID: 6157

General

Chronological Activities

Analysis Process: fenty.arm5.elf PID: 6237, Parent PID: 6235

General

Chronological Activities

Linux Analysis Report
fenty.arm5.elf