Edit tour

Linux Analysis Report
Space.arm.elf

Overview

General Information

Sample name:	Space.arm.elf
Analysis ID:	1588311
MD5:	288f03197282df74f3811ec0f5213dc0
SHA1:	c09732a84115ffb3a7791efe9b310f281c2102e8
SHA256:	1470f0e0b59ba0d757ceb8c58b7ec1d66f8abb839dac886a233343b8201e2a24
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

Sample contains only a LOAD segment without any section mappings

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1588311
Start date and time:	2025-01-10 23:51:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Space.arm.elf
Detection:	MAL
Classification:	mal68.troj.evad.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/Space.arm.elf
PID:	6237
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

system is lnxubuntu20

Space.arm.elf (PID: 6237, Parent: 6160, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/Space.arm.elf

Space.arm.elf New Fork (PID: 6239, Parent: 6237)

Space.arm.elf New Fork (PID: 6241, Parent: 6239)

Space.arm.elf New Fork (PID: 6243, Parent: 6239)

Space.arm.elf New Fork (PID: 6248, Parent: 6237)

Space.arm.elf New Fork (PID: 6249, Parent: 6237)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
6248.1.00007f45e8017000.00007f45e802c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6248.1.00007f45e8017000.00007f45e802c000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11f2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1201c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1206c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6241.1.00007f45e8017000.00007f45e802c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6241.1.00007f45e8017000.00007f45e802c000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11f2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1201c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1206c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6237.1.00007f45e8017000.00007f45e802c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6237.1.00007f45e8017000.00007f45e802c000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11f2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1201c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1206c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6239.1.00007f45e8017000.00007f45e802c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6239.1.00007f45e8017000.00007f45e802c000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11f2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1201c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1206c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.arm.elf PID: 6237	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.arm.elf PID: 6237	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x168a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16c6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16da:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1702:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1716:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x172a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x173e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1752:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1766:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x177a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x178e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17a2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17b6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17ca:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17de:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x17f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1806:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x181a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.arm.elf PID: 6239	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.arm.elf PID: 6239	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x124b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12500:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12514:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12528:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1253c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12550:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12564:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12578:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1258c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12604:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12618:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1262c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12640:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.arm.elf PID: 6241	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.arm.elf PID: 6241	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xe459:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe46d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe481:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe495:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe4a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe4bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe4d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe4e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe4f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe50d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe521:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe535:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe549:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe55d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe571:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe585:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe599:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe5ad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe5c1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe5d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe5e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.arm.elf PID: 6248	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.arm.elf PID: 6248	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x404:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x418:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x440:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x454:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x468:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x47c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x490:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x51c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 11 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: Space.arm.elf	Virustotal: Detection: 26%			Perma Link
Source: Space.arm.elf	ReversingLabs: Detection: 31%

Source: global traffic

TCP traffic: 192.168.2.23:49042 -> 89.213.158.208:3778

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208
Source: unknown	TCP traffic detected without corresponding DNS query: 89.213.158.208

Source: Space.arm.elf

String found in binary or memory: http://upx.sf.net

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: 6248.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6241.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6237.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6239.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.arm.elf PID: 6237, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.arm.elf PID: 6239, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.arm.elf PID: 6241, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.arm.elf PID: 6248, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: LOAD without section mappings

Program segment: 0x8000

Source: 6248.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6241.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6237.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6239.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.arm.elf PID: 6237, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.arm.elf PID: 6239, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.arm.elf PID: 6241, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.arm.elf PID: 6248, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal68.troj.evad.linELF@0/0@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1582/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/3088/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/230/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/110/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/231/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/111/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/232/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1579/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/112/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/233/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1699/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/113/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/234/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1335/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1698/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/114/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/235/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1334/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1576/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/2302/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/115/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/236/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/116/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/237/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/117/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/118/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/910/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/119/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/912/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/10/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/2307/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/11/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/918/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/12/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/13/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/6243/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/14/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/15/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/6245/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/16/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/17/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/18/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1594/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/120/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/121/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1349/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/122/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/243/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/123/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/2/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/124/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/3/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/4/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/125/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/126/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1344/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1465/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1586/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/127/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/6/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/248/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/128/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/249/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1463/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/800/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/9/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/801/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/6237/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/20/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/21/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1900/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/22/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/23/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/24/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/25/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/26/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/27/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/28/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/29/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/491/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/250/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/130/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/251/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/252/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/132/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/253/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/254/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/255/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/256/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1599/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/257/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1477/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/379/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/258/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1476/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/259/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1475/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/936/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/30/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/2208/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/35/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1809/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/1494/status	Jump to behavior
Source: /tmp/Space.arm.elf (PID: 6237)	File opened: /proc/260/status	Jump to behavior

Source: Space.arm.elf

Submission file: segment LOAD with 7.9688 entropy (max. 8.0)

Source: /tmp/Space.arm.elf (PID: 6237)

Queries kernel information via 'uname':

Jump to behavior

Source: Space.arm.elf, 6237.1.000055b410be8000.000055b410d98000.rw-.sdmp, Space.arm.elf, 6239.1.000055b410be8000.000055b410d76000.rw-.sdmp, Space.arm.elf, 6241.1.000055b410be8000.000055b410d76000.rw-.sdmp, Space.arm.elf, 6248.1.000055b410be8000.000055b410d98000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: Space.arm.elf, 6237.1.000055b410be8000.000055b410d98000.rw-.sdmp, Space.arm.elf, 6239.1.000055b410be8000.000055b410d76000.rw-.sdmp, Space.arm.elf, 6241.1.000055b410be8000.000055b410d76000.rw-.sdmp, Space.arm.elf, 6248.1.000055b410be8000.000055b410d98000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: Space.arm.elf, 6237.1.00007fff2e58b000.00007fff2e5ac000.rw-.sdmp, Space.arm.elf, 6239.1.00007fff2e58b000.00007fff2e5ac000.rw-.sdmp, Space.arm.elf, 6241.1.00007fff2e58b000.00007fff2e5ac000.rw-.sdmp, Space.arm.elf, 6248.1.00007fff2e58b000.00007fff2e5ac000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: Space.arm.elf, 6237.1.00007fff2e58b000.00007fff2e5ac000.rw-.sdmp, Space.arm.elf, 6239.1.00007fff2e58b000.00007fff2e5ac000.rw-.sdmp, Space.arm.elf, 6241.1.00007fff2e58b000.00007fff2e5ac000.rw-.sdmp, Space.arm.elf, 6248.1.00007fff2e58b000.00007fff2e5ac000.rw-.sdmp	Binary or memory string: )@x86_64/usr/bin/qemu-arm/tmp/Space.arm.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Space.arm.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 6248.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6241.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6237.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6239.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Space.arm.elf PID: 6237, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm.elf PID: 6239, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm.elf PID: 6241, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm.elf PID: 6248, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 6248.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6241.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6237.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6239.1.00007f45e8017000.00007f45e802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Space.arm.elf PID: 6237, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm.elf PID: 6239, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm.elf PID: 6241, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm.elf PID: 6248, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Space.arm.elf	27%	Virustotal		Browse
Space.arm.elf	32%	ReversingLabs	Linux.Trojan.Mirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	Space.arm.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
89.213.158.208	unknown	United Kingdom	8851	EDGEtaGCIComGB	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
89.213.158.208	Space.x86_64.elf	Get hash	malicious	Unknown	Browse
	Space.i686.elf	Get hash	malicious	Unknown	Browse
	Space.m68k.elf	Get hash	malicious	Mirai	Browse
	Space.mpsl.elf	Get hash	malicious	Unknown	Browse
	Space.x86.elf	Get hash	malicious	Unknown	Browse
	Space.arm6.elf	Get hash	malicious	Unknown	Browse
	Space.ppc.elf	Get hash	malicious	Unknown	Browse
	Space.mips.elf	Get hash	malicious	Unknown	Browse
	Space.mpsl.elf	Get hash	malicious	Unknown	Browse
	Space.arm7.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	arm.elf	Get hash	malicious	Unknown	Browse
	ss.elf	Get hash	malicious	Gafgyt	Browse
	boatnet.x86.elf	Get hash	malicious	Unknown	Browse
	Space.arm5.elf	Get hash	malicious	Unknown	Browse
	ssd.elf	Get hash	malicious	Gafgyt	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	ssy.elf	Get hash	malicious	Gafgyt	Browse
	UnHAnaAW.mpsl.elf	Get hash	malicious	Mirai	Browse
	UnHAnaAW.sh4.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	arm.elf	Get hash	malicious	Unknown	Browse
	ss.elf	Get hash	malicious	Gafgyt	Browse
	boatnet.x86.elf	Get hash	malicious	Unknown	Browse
	Space.arm5.elf	Get hash	malicious	Unknown	Browse
	ssd.elf	Get hash	malicious	Gafgyt	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	ssy.elf	Get hash	malicious	Gafgyt	Browse
	UnHAnaAW.mpsl.elf	Get hash	malicious	Mirai	Browse
	UnHAnaAW.arm7.elf	Get hash	malicious	Mirai	Browse
	UnHAnaAW.sh4.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ss.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	boatnet.arm7.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	boatnet.x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Space.arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.m68k.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	ssd.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	ssy.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssh.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
CANONICAL-ASGB	arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ss.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	boatnet.arm7.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	boatnet.x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Space.arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.m68k.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	ssd.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	ssy.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssh.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
EDGEtaGCIComGB	Space.x86_64.elf	Get hash	malicious	Unknown	Browse	89.213.158.208
	Space.i686.elf	Get hash	malicious	Unknown	Browse	89.213.158.208
	Space.m68k.elf	Get hash	malicious	Mirai	Browse	89.213.158.208
	Space.mpsl.elf	Get hash	malicious	Unknown	Browse	89.213.158.208
	Space.x86.elf	Get hash	malicious	Unknown	Browse	89.213.158.208
	Space.arm6.elf	Get hash	malicious	Unknown	Browse	89.213.158.208
	Space.ppc.elf	Get hash	malicious	Unknown	Browse	89.213.158.208
	Space.mips.elf	Get hash	malicious	Unknown	Browse	89.213.158.208
	Space.mpsl.elf	Get hash	malicious	Unknown	Browse	89.213.158.208
	armv4l.elf	Get hash	malicious	Unknown	Browse	77.107.65.89
INIT7CH	arm.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ss.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	boatnet.x86.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Space.arm5.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ssd.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	ssy.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	UnHAnaAW.mpsl.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	UnHAnaAW.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	UnHAnaAW.sh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, no section header
Entropy (8bit):	7.966840399101271
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Space.arm.elf
File size:	39'288 bytes
MD5:	288f03197282df74f3811ec0f5213dc0
SHA1:	c09732a84115ffb3a7791efe9b310f281c2102e8
SHA256:	1470f0e0b59ba0d757ceb8c58b7ec1d66f8abb839dac886a233343b8201e2a24
SHA512:	092e9396c1a635fe5f27d3444fcc2b01f3065947cc30f4ad3b5a9f4961d722880e367ffee98bdc0d45e82ca369ae55afbc1c156ce4953b3e784d50676ed42058
SSDEEP:	768:mu7RATME9ze1AfVe5E7xoGbjVDMZZOyrMUy6GPMOes3UozOX:LRA99C1Atfa9zxozOX
TLSH:	D203F172A686F4B1E7A01D39D9BE0513F7D76D78C8E130A51E080D343E9349D61B8A6A
File Content Preview:	.ELF...a..........(.........4...........4. ...(.....................W...W................{...{...{..................Q.td............................s.y.UPX!.........T...T......S..........?.E.h;.}...^..........fK..z..,vU...].XLU..0.)..0(7n..V5.'...,;.q9...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x106a8
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8000	0x8000	0x9857	0x9857	7.9688	0x5	R E	0x8000
LOAD	0x7bc8	0x27bc8	0x27bc8	0x0	0x0	0.0000	0x6	RW	0x8000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 23:51:55.400904894 CET	43928	443	192.168.2.23	91.189.91.42
Jan 10, 2025 23:51:56.431109905 CET	49042	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:56.436093092 CET	3778	49042	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:56.436144114 CET	49042	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:56.478915930 CET	49042	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:56.483736992 CET	3778	49042	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:56.483772993 CET	49042	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:56.488512039 CET	3778	49042	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:57.084199905 CET	3778	49042	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:57.084259033 CET	49042	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.084449053 CET	49042	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.095156908 CET	49044	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.100033998 CET	3778	49044	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:57.103328943 CET	49044	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.132057905 CET	49044	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.136936903 CET	3778	49044	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:57.137639046 CET	49044	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.142441034 CET	3778	49044	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:57.789307117 CET	3778	49044	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:57.789407015 CET	49044	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.789478064 CET	49044	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.790452957 CET	49046	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.795293093 CET	3778	49046	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:57.795396090 CET	49046	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.797806978 CET	49046	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.802623987 CET	3778	49046	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:57.802742004 CET	49046	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:57.807590008 CET	3778	49046	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:58.518095016 CET	3778	49046	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:58.518310070 CET	49046	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:58.518429041 CET	49046	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:58.519606113 CET	49048	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:58.524379015 CET	3778	49048	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:58.524432898 CET	49048	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:58.526036978 CET	49048	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:58.530802965 CET	3778	49048	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:58.530857086 CET	49048	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:58.535675049 CET	3778	49048	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:59.144838095 CET	3778	49048	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:59.145092010 CET	49048	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.145107031 CET	49048	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.146091938 CET	49050	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.150850058 CET	3778	49050	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:59.150897026 CET	49050	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.151844978 CET	49050	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.156625032 CET	3778	49050	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:59.156670094 CET	49050	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.161425114 CET	3778	49050	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:59.845335960 CET	3778	49050	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:59.845504999 CET	49050	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.845550060 CET	49050	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.846143961 CET	49052	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.851027012 CET	3778	49052	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:59.851078987 CET	49052	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.852195024 CET	49052	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.857002974 CET	3778	49052	89.213.158.208	192.168.2.23
Jan 10, 2025 23:51:59.857053041 CET	49052	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:51:59.861893892 CET	3778	49052	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:00.547550917 CET	3778	49052	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:00.547660112 CET	49052	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:00.547698975 CET	49052	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:00.548317909 CET	49054	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:00.553193092 CET	3778	49054	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:00.553253889 CET	49054	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:00.554071903 CET	49054	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:00.559520960 CET	3778	49054	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:00.559576988 CET	49054	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:00.564750910 CET	3778	49054	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:01.031965017 CET	42836	443	192.168.2.23	91.189.91.43
Jan 10, 2025 23:52:01.285607100 CET	3778	49054	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:01.285778046 CET	49054	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.285809040 CET	49054	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.286412954 CET	49056	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.291407108 CET	3778	49056	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:01.291503906 CET	49056	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.292773008 CET	49056	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.297686100 CET	3778	49056	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:01.297754049 CET	49056	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.303105116 CET	3778	49056	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:01.986387014 CET	3778	49056	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:01.986651897 CET	49056	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.986697912 CET	49056	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.987332106 CET	49058	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.992185116 CET	3778	49058	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:01.992283106 CET	49058	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.993690014 CET	49058	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:01.998482943 CET	3778	49058	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:01.998569965 CET	49058	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.003354073 CET	3778	49058	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:02.311810970 CET	42516	80	192.168.2.23	109.202.202.202
Jan 10, 2025 23:52:02.718854904 CET	3778	49058	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:02.719002962 CET	49058	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.719002962 CET	49058	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.719991922 CET	49060	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.724849939 CET	3778	49060	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:02.724924088 CET	49060	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.726059914 CET	49060	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.730838060 CET	3778	49060	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:02.730983019 CET	49060	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.735797882 CET	3778	49060	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:02.954925060 CET	49062	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.959853888 CET	3778	49062	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:02.959925890 CET	49062	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.993837118 CET	49062	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:02.998817921 CET	3778	49062	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:02.998950005 CET	49062	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.003989935 CET	3778	49062	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:03.408201933 CET	3778	49060	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:03.408368111 CET	49060	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.408397913 CET	49060	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.408904076 CET	49064	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.413737059 CET	3778	49064	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:03.413825035 CET	49064	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.414565086 CET	49064	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.419431925 CET	3778	49064	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:03.419504881 CET	49064	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.424319029 CET	3778	49064	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:03.763463974 CET	3778	49062	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:03.763595104 CET	49062	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.763916016 CET	49062	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.764470100 CET	49066	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.770452023 CET	3778	49066	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:03.770534039 CET	49066	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.771272898 CET	49066	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.777719975 CET	3778	49066	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:03.777785063 CET	49066	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:03.785167933 CET	3778	49066	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.125304937 CET	3778	49064	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.125442028 CET	49064	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.125598907 CET	49064	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.126421928 CET	49068	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.131335020 CET	3778	49068	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.131411076 CET	49068	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.132569075 CET	49068	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.137430906 CET	3778	49068	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.137527943 CET	49068	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.142422915 CET	3778	49068	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.419107914 CET	3778	49066	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.419188976 CET	49066	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.419220924 CET	49066	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.419697046 CET	49070	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.424587011 CET	3778	49070	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.424695969 CET	49070	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.425985098 CET	49070	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.430845976 CET	3778	49070	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.430922031 CET	49070	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.435883999 CET	3778	49070	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.822376013 CET	3778	49068	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.822479963 CET	49068	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.822530985 CET	49068	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.822978020 CET	49072	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.827795982 CET	3778	49072	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.827860117 CET	49072	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.828397036 CET	49072	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.833187103 CET	3778	49072	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:04.833236933 CET	49072	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:04.838023901 CET	3778	49072	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:05.168807030 CET	3778	49070	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:05.168943882 CET	49070	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.168987036 CET	49070	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.169440031 CET	49074	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.174355984 CET	3778	49074	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:05.174406052 CET	49074	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.174916029 CET	49074	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.179738045 CET	3778	49074	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:05.179778099 CET	49074	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.184623003 CET	3778	49074	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:05.834676981 CET	3778	49072	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:05.834933043 CET	49072	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.834979057 CET	49072	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.835748911 CET	49076	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.840662956 CET	3778	49076	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:05.840724945 CET	49076	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.842634916 CET	49076	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.847481966 CET	3778	49076	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:05.847531080 CET	49076	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:05.852353096 CET	3778	49076	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.042359114 CET	3778	49074	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.042733908 CET	49074	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.042733908 CET	49074	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.043247938 CET	49078	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.048144102 CET	3778	49078	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.048201084 CET	49078	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.048865080 CET	49078	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.054364920 CET	3778	49078	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.054424047 CET	49078	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.059267044 CET	3778	49078	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.606013060 CET	3778	49076	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.606283903 CET	49076	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.606326103 CET	49076	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.606822014 CET	49080	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.611996889 CET	3778	49080	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.612059116 CET	49080	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.613193989 CET	49080	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.618263960 CET	3778	49080	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.618377924 CET	49080	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.623399973 CET	3778	49080	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.765561104 CET	3778	49078	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.765805960 CET	49078	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.765839100 CET	49078	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.766316891 CET	49082	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.771783113 CET	3778	49082	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.771842003 CET	49082	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.773377895 CET	49082	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.779114008 CET	3778	49082	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:06.779263973 CET	49082	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:06.785060883 CET	3778	49082	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:07.268737078 CET	3778	49080	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:07.268835068 CET	49080	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.268862009 CET	49080	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.269961119 CET	49084	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.275264978 CET	3778	49084	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:07.275341034 CET	49084	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.276901007 CET	49084	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.283422947 CET	3778	49084	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:07.283488035 CET	49084	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.288623095 CET	3778	49084	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:07.469495058 CET	3778	49082	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:07.469630957 CET	49082	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.469661951 CET	49082	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.470375061 CET	49086	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.475419044 CET	3778	49086	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:07.475472927 CET	49086	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.476156950 CET	49086	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.481548071 CET	3778	49086	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:07.481600046 CET	49086	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:07.487390041 CET	3778	49086	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.019927979 CET	3778	49084	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.020181894 CET	49084	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.020262957 CET	49084	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.020937920 CET	49088	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.025804996 CET	3778	49088	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.025917053 CET	49088	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.026968956 CET	49088	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.031729937 CET	3778	49088	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.031814098 CET	49088	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.036581039 CET	3778	49088	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.092787027 CET	3778	49086	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.092897892 CET	49086	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.092899084 CET	49086	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.093642950 CET	49090	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.098428965 CET	3778	49090	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.098525047 CET	49090	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.099236965 CET	49090	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.104012966 CET	3778	49090	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.104059935 CET	49090	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.108798981 CET	3778	49090	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.685642958 CET	3778	49088	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.685934067 CET	49088	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.685934067 CET	49088	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.686731100 CET	49092	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.691590071 CET	3778	49092	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.691678047 CET	49092	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.692756891 CET	49092	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.697577000 CET	3778	49092	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.697647095 CET	49092	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.702459097 CET	3778	49092	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.785972118 CET	3778	49090	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.786276102 CET	49090	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.786405087 CET	49090	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.787355900 CET	49094	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.792185068 CET	3778	49094	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.792246103 CET	49094	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.792943954 CET	49094	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.797718048 CET	3778	49094	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:08.797768116 CET	49094	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:08.802638054 CET	3778	49094	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:09.407749891 CET	3778	49092	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:09.407953024 CET	49092	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.407953024 CET	49092	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.408808947 CET	49096	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.413642883 CET	3778	49096	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:09.413714886 CET	49096	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.415009022 CET	49096	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.419893980 CET	3778	49096	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:09.419974089 CET	49096	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.424802065 CET	3778	49096	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:09.516942978 CET	3778	49094	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:09.517061949 CET	49094	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.517224073 CET	49094	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.518081903 CET	49098	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.522943020 CET	3778	49098	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:09.523005962 CET	49098	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.524132013 CET	49098	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.528960943 CET	3778	49098	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:09.529023886 CET	49098	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:09.533894062 CET	3778	49098	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.027889967 CET	3778	49096	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.028105021 CET	49096	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.028157949 CET	49096	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.029014111 CET	49100	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.033914089 CET	3778	49100	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.033996105 CET	49100	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.035140991 CET	49100	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.042714119 CET	3778	49100	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.042798996 CET	49100	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.049968958 CET	3778	49100	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.232040882 CET	3778	49098	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.232204914 CET	49098	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.232350111 CET	49098	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.233139038 CET	49102	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.238023996 CET	3778	49102	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.238107920 CET	49102	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.239280939 CET	49102	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.244121075 CET	3778	49102	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.244189024 CET	49102	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.249017000 CET	3778	49102	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.671422958 CET	3778	49100	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.671618938 CET	49100	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.671703100 CET	49100	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.672422886 CET	49104	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.677485943 CET	3778	49104	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.677556992 CET	49104	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.678558111 CET	49104	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.683434010 CET	3778	49104	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.683554888 CET	49104	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.688838005 CET	3778	49104	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.936608076 CET	3778	49102	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.936786890 CET	49102	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.936846018 CET	49102	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.938144922 CET	49106	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.942915916 CET	3778	49106	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.942985058 CET	49106	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.943968058 CET	49106	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.948725939 CET	3778	49106	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:10.948785067 CET	49106	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:10.953533888 CET	3778	49106	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:11.379120111 CET	3778	49104	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:11.379257917 CET	49104	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.379302979 CET	49104	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.379951000 CET	49108	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.384777069 CET	3778	49108	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:11.384846926 CET	49108	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.385623932 CET	49108	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.390386105 CET	3778	49108	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:11.390475035 CET	49108	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.395279884 CET	3778	49108	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:11.624959946 CET	3778	49106	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:11.625157118 CET	49106	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.625195026 CET	49106	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.625690937 CET	49110	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.630553007 CET	3778	49110	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:11.630619049 CET	49110	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.631475925 CET	49110	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.636342049 CET	3778	49110	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:11.636388063 CET	49110	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:11.641189098 CET	3778	49110	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.087043047 CET	3778	49108	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.087213039 CET	49108	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.087282896 CET	49108	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.088293076 CET	49112	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.093132019 CET	3778	49112	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.093218088 CET	49112	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.094824076 CET	49112	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.099639893 CET	3778	49112	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.099729061 CET	49112	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.104583979 CET	3778	49112	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.329328060 CET	3778	49110	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.329499960 CET	49110	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.329566002 CET	49110	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.330341101 CET	49114	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.335201025 CET	3778	49114	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.335253000 CET	49114	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.336513042 CET	49114	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.341320992 CET	3778	49114	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.341398001 CET	49114	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.346267939 CET	3778	49114	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.792969942 CET	3778	49112	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.793225050 CET	49112	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.793296099 CET	49112	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.794492006 CET	49116	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.799305916 CET	3778	49116	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.799498081 CET	49116	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.801961899 CET	49116	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.806835890 CET	3778	49116	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.806904078 CET	49116	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.811784029 CET	3778	49116	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.959180117 CET	3778	49114	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.959364891 CET	49114	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.959439993 CET	49114	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.960365057 CET	49118	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.965620041 CET	3778	49118	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.965702057 CET	49118	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.967077971 CET	49118	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.971857071 CET	3778	49118	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:12.971929073 CET	49118	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:12.977089882 CET	3778	49118	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:13.439563990 CET	3778	49116	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:13.439678907 CET	49116	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.439728975 CET	49116	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.440536976 CET	49120	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.445364952 CET	3778	49120	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:13.445425034 CET	49120	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.446217060 CET	49120	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.450999975 CET	3778	49120	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:13.451040030 CET	49120	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.455944061 CET	3778	49120	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:13.681899071 CET	3778	49118	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:13.682126999 CET	49118	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.682174921 CET	49118	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.683080912 CET	49122	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.687907934 CET	3778	49122	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:13.687973022 CET	49122	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.689125061 CET	49122	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.693892956 CET	3778	49122	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:13.693941116 CET	49122	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:13.698767900 CET	3778	49122	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.065637112 CET	3778	49120	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.065784931 CET	49120	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.065845013 CET	49120	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.066926956 CET	49124	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.071752071 CET	3778	49124	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.071835995 CET	49124	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.072952986 CET	49124	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.077743053 CET	3778	49124	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.077816963 CET	49124	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.082974911 CET	3778	49124	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.385257006 CET	3778	49122	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.385601997 CET	49122	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.385637045 CET	49122	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.386379957 CET	49126	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.391247034 CET	3778	49126	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.391464949 CET	49126	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.391928911 CET	49126	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.396744013 CET	3778	49126	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.396822929 CET	49126	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.401865005 CET	3778	49126	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.820888996 CET	3778	49124	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.821027040 CET	49124	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.821083069 CET	49124	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.821811914 CET	49128	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.826672077 CET	3778	49128	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.826747894 CET	49128	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.827713013 CET	49128	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.832516909 CET	3778	49128	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.832564116 CET	49128	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.837363958 CET	3778	49128	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.998358965 CET	3778	49126	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:14.998507977 CET	49126	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.998601913 CET	49126	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:14.999150991 CET	49130	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.003957033 CET	3778	49130	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.004021883 CET	49130	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.004647017 CET	49130	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.009383917 CET	3778	49130	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.009435892 CET	49130	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.014210939 CET	3778	49130	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.366007090 CET	43928	443	192.168.2.23	91.189.91.42
Jan 10, 2025 23:52:15.446191072 CET	3778	49128	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.446300983 CET	49128	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.446465969 CET	49128	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.447168112 CET	49132	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.451988935 CET	3778	49132	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.452055931 CET	49132	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.453233957 CET	49132	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.458055019 CET	3778	49132	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.458126068 CET	49132	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.462924957 CET	3778	49132	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.639668941 CET	3778	49130	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.639786959 CET	49130	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.639925957 CET	49130	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.640846014 CET	49134	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.645730972 CET	3778	49134	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.645793915 CET	49134	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.647011995 CET	49134	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.651851892 CET	3778	49134	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:15.651896000 CET	49134	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:15.656722069 CET	3778	49134	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.208122969 CET	3778	49132	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.208259106 CET	49132	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.208306074 CET	49132	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.209079981 CET	49136	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.215099096 CET	3778	49136	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.215238094 CET	49136	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.216337919 CET	49136	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.228159904 CET	3778	49136	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.228233099 CET	49136	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.233037949 CET	3778	49136	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.272394896 CET	3778	49134	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.272524118 CET	49134	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.272617102 CET	49134	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.273576975 CET	49138	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.278533936 CET	3778	49138	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.278628111 CET	49138	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.279840946 CET	49138	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.284718037 CET	3778	49138	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.284787893 CET	49138	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.289717913 CET	3778	49138	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.920634985 CET	3778	49136	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.920867920 CET	49136	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.920969963 CET	49136	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.921607018 CET	49140	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.926450014 CET	3778	49140	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.926515102 CET	49140	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.927330971 CET	49140	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.932161093 CET	3778	49140	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:16.932220936 CET	49140	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:16.937129021 CET	3778	49140	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.043395996 CET	3778	49138	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.043521881 CET	49138	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.043577909 CET	49138	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.044070005 CET	49142	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.048976898 CET	3778	49142	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.049045086 CET	49142	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.049830914 CET	49142	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.054753065 CET	3778	49142	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.054820061 CET	49142	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.059669971 CET	3778	49142	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.564795971 CET	3778	49140	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.564965010 CET	49140	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.564996958 CET	49140	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.565733910 CET	49144	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.570605993 CET	3778	49144	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.570682049 CET	49144	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.571346045 CET	49144	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.577029943 CET	3778	49144	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.577084064 CET	49144	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.582003117 CET	3778	49144	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.765125036 CET	3778	49142	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.765316010 CET	49142	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.765403032 CET	49142	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.766108036 CET	49146	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.770978928 CET	3778	49146	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.771074057 CET	49146	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.772070885 CET	49146	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.777020931 CET	3778	49146	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:17.777131081 CET	49146	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:17.782072067 CET	3778	49146	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.271507025 CET	3778	49144	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.271687031 CET	49144	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.271739006 CET	49144	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.272613049 CET	49148	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.277600050 CET	3778	49148	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.277703047 CET	49148	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.278990984 CET	49148	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.284064054 CET	3778	49148	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.284135103 CET	49148	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.289660931 CET	3778	49148	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.472618103 CET	3778	49146	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.472773075 CET	49146	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.472816944 CET	49146	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.473601103 CET	49150	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.478589058 CET	3778	49150	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.478676081 CET	49150	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.479958057 CET	49150	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.484776020 CET	3778	49150	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.484853029 CET	49150	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.489943981 CET	3778	49150	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.890165091 CET	3778	49148	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.890291929 CET	49148	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.890388012 CET	49148	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.891063929 CET	49152	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.896018028 CET	3778	49152	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.896119118 CET	49152	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.897157907 CET	49152	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.901998043 CET	3778	49152	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:18.902067900 CET	49152	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:18.906888962 CET	3778	49152	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.092539072 CET	3778	49150	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.092700958 CET	49150	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.092818975 CET	49150	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.093424082 CET	49154	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.098311901 CET	3778	49154	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.098373890 CET	49154	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.099349976 CET	49154	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.104145050 CET	3778	49154	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.104190111 CET	49154	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.108968973 CET	3778	49154	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.508064985 CET	3778	49152	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.508296013 CET	49152	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.508357048 CET	49152	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.509947062 CET	49156	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.515084982 CET	3778	49156	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.515185118 CET	49156	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.516191959 CET	49156	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.521079063 CET	3778	49156	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.521147013 CET	49156	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.525966883 CET	3778	49156	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.822376013 CET	3778	49154	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.822756052 CET	49154	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.822756052 CET	49154	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.823307037 CET	49158	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.828135014 CET	3778	49158	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.828192949 CET	49158	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.829134941 CET	49158	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.833956957 CET	3778	49158	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:19.834012985 CET	49158	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:19.838845968 CET	3778	49158	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.126632929 CET	3778	49156	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.126771927 CET	49156	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.126827955 CET	49156	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.127347946 CET	49160	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.132153034 CET	3778	49160	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.132214069 CET	49160	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.132904053 CET	49160	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.137728930 CET	3778	49160	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.137789011 CET	49160	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.142657042 CET	3778	49160	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.524239063 CET	3778	49158	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.524408102 CET	49158	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.524454117 CET	49158	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.525245905 CET	49162	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.530065060 CET	3778	49162	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.530128002 CET	49162	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.531197071 CET	49162	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.536066055 CET	3778	49162	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.536118031 CET	49162	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.540906906 CET	3778	49162	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.833553076 CET	3778	49160	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.833750010 CET	49160	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.833807945 CET	49160	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.834387064 CET	49164	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.839261055 CET	3778	49164	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.839466095 CET	49164	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.840739965 CET	49164	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.845555067 CET	3778	49164	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:20.845623016 CET	49164	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:20.850424051 CET	3778	49164	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.236500025 CET	3778	49162	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.236677885 CET	49162	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.236721992 CET	49162	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.237261057 CET	49166	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.242216110 CET	3778	49166	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.242305040 CET	49166	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.243565083 CET	49166	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.248397112 CET	3778	49166	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.248471022 CET	49166	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.253293991 CET	3778	49166	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.469829082 CET	3778	49164	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.470015049 CET	49164	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.470066071 CET	49164	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.470839024 CET	49168	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.475727081 CET	3778	49168	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.475847960 CET	49168	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.476831913 CET	49168	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.481678009 CET	3778	49168	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.481762886 CET	49168	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.486704111 CET	3778	49168	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.953941107 CET	3778	49166	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.954092026 CET	49166	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.954149008 CET	49166	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.955101013 CET	49170	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.960859060 CET	3778	49170	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.960983992 CET	49170	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.961915970 CET	49170	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.967978001 CET	3778	49170	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:21.968046904 CET	49170	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:21.974132061 CET	3778	49170	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.173782110 CET	3778	49168	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.173948050 CET	49168	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.174005032 CET	49168	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.175043106 CET	49172	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.180007935 CET	3778	49172	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.180077076 CET	49172	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.181411028 CET	49172	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.186259031 CET	3778	49172	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.186311007 CET	49172	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.191129923 CET	3778	49172	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.683383942 CET	3778	49170	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.683594942 CET	49170	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.683723927 CET	49170	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.684442043 CET	49174	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.689286947 CET	3778	49174	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.689352989 CET	49174	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.690447092 CET	49174	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.695252895 CET	3778	49174	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.695305109 CET	49174	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.700081110 CET	3778	49174	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.879857063 CET	3778	49172	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.880203962 CET	49172	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.880305052 CET	49172	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.880809069 CET	49176	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.885642052 CET	3778	49176	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.886277914 CET	49176	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.886959076 CET	49176	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.891757965 CET	3778	49176	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:22.892380953 CET	49176	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:22.897258043 CET	3778	49176	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:23.391431093 CET	3778	49174	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:23.391695976 CET	49174	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.391870022 CET	49174	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.392950058 CET	49178	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.398957014 CET	3778	49178	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:23.399183035 CET	49178	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.400480986 CET	49178	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.406106949 CET	3778	49178	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:23.406320095 CET	49178	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.411147118 CET	3778	49178	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:23.527669907 CET	3778	49176	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:23.530982971 CET	49176	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.531132936 CET	49176	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.531944036 CET	49180	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.536801100 CET	3778	49180	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:23.537523985 CET	49180	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.538800001 CET	49180	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.543590069 CET	3778	49180	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:23.543806076 CET	49180	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:23.548654079 CET	3778	49180	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.131763935 CET	3778	49178	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.131926060 CET	49178	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.132106066 CET	49178	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.132992029 CET	49182	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.137924910 CET	3778	49182	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.138032913 CET	49182	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.139014959 CET	49182	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.143862963 CET	3778	49182	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.143934011 CET	49182	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.148868084 CET	3778	49182	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.342237949 CET	3778	49180	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.342328072 CET	49180	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.342386007 CET	49180	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.343094110 CET	49184	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.347975016 CET	3778	49184	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.348067045 CET	49184	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.349020004 CET	49184	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.353861094 CET	3778	49184	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.353920937 CET	49184	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.358891964 CET	3778	49184	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.811264038 CET	3778	49182	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.811430931 CET	49182	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.811496973 CET	49182	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.812575102 CET	49186	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.817534924 CET	3778	49186	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.817591906 CET	49186	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.818830013 CET	49186	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.823726892 CET	3778	49186	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:24.823784113 CET	49186	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:24.828677893 CET	3778	49186	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:25.068397999 CET	3778	49184	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:25.068505049 CET	49184	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.068551064 CET	49184	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.069133997 CET	49188	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.074028969 CET	3778	49188	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:25.074103117 CET	49188	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.075061083 CET	49188	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.079797029 CET	3778	49188	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:25.079843044 CET	49188	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.084659100 CET	3778	49188	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:25.875648975 CET	3778	49186	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:25.875838995 CET	49186	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.875955105 CET	49186	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.876810074 CET	49190	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.881675005 CET	3778	49190	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:25.881769896 CET	49190	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.882875919 CET	49190	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.887696981 CET	3778	49190	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:25.887793064 CET	49190	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:25.892584085 CET	3778	49190	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:27.652718067 CET	42836	443	192.168.2.23	91.189.91.43
Jan 10, 2025 23:52:28.728543997 CET	3778	49188	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:28.728662968 CET	49188	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:28.728698015 CET	49188	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:28.729320049 CET	49192	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:28.734245062 CET	3778	49192	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:28.734308004 CET	49192	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:28.734925032 CET	49192	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:28.740073919 CET	3778	49192	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:28.740125895 CET	49192	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:28.745024920 CET	3778	49192	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:29.454931021 CET	3778	49192	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:29.455101967 CET	49192	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.455148935 CET	49192	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.458306074 CET	49194	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.463152885 CET	3778	49194	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:29.463212013 CET	49194	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.464389086 CET	49194	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.469158888 CET	3778	49194	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:29.469244957 CET	49194	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.474003077 CET	3778	49194	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:29.558275938 CET	3778	49190	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:29.558401108 CET	49190	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.558535099 CET	49190	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.558995962 CET	49196	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.563762903 CET	3778	49196	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:29.563822031 CET	49196	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.566848993 CET	49196	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.571592093 CET	3778	49196	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:29.571635962 CET	49196	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:29.576373100 CET	3778	49196	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.172158003 CET	3778	49194	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.172420979 CET	49194	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.172420979 CET	49194	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.173201084 CET	49198	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.178090096 CET	3778	49198	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.178164959 CET	49198	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.179222107 CET	49198	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.184034109 CET	3778	49198	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.184072018 CET	49198	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.188837051 CET	3778	49198	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.223617077 CET	3778	49196	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.223697901 CET	49196	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.223748922 CET	49196	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.224370956 CET	49200	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.229259968 CET	3778	49200	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.229346037 CET	49200	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.230309963 CET	49200	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.235136986 CET	3778	49200	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.235197067 CET	49200	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.240008116 CET	3778	49200	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.833455086 CET	3778	49198	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.833682060 CET	49198	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.833753109 CET	49198	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.834476948 CET	49202	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.839310884 CET	3778	49202	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.839416981 CET	49202	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.840723038 CET	49202	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.845511913 CET	3778	49202	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.845571995 CET	49202	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.850348949 CET	3778	49202	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.959450960 CET	3778	49200	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.959692955 CET	49200	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.959764004 CET	49200	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.960702896 CET	49204	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.965555906 CET	3778	49204	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.965651989 CET	49204	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.967108011 CET	49204	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.972043037 CET	3778	49204	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:30.972126961 CET	49204	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:30.976916075 CET	3778	49204	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:31.547195911 CET	3778	49202	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:31.547352076 CET	49202	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.547411919 CET	49202	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.548238039 CET	49206	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.553987026 CET	3778	49206	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:31.554060936 CET	49206	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.555042982 CET	49206	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.559855938 CET	3778	49206	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:31.559915066 CET	49206	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.564749002 CET	3778	49206	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:31.648758888 CET	3778	49204	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:31.648977041 CET	49204	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.649075985 CET	49204	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.650132895 CET	49208	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.655168056 CET	3778	49208	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:31.655267954 CET	49208	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.656747103 CET	49208	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.661611080 CET	3778	49208	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:31.661691904 CET	49208	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:31.666565895 CET	3778	49208	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:31.747761965 CET	42516	80	192.168.2.23	109.202.202.202
Jan 10, 2025 23:52:32.270423889 CET	3778	49206	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:32.270670891 CET	49206	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.270672083 CET	49206	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.271235943 CET	49210	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.276626110 CET	3778	49210	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:32.276715040 CET	49210	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.277493954 CET	49210	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.282295942 CET	3778	49210	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:32.282365084 CET	49210	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.287226915 CET	3778	49210	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:32.373996019 CET	3778	49208	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:32.374171019 CET	49208	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.374300003 CET	49208	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.375402927 CET	49212	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.380215883 CET	3778	49212	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:32.380291939 CET	49212	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.381501913 CET	49212	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.386338949 CET	3778	49212	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:32.386384010 CET	49212	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:32.391227961 CET	3778	49212	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.003355026 CET	3778	49210	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.003482103 CET	49210	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.003539085 CET	49210	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.004093885 CET	49214	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.008960962 CET	3778	49214	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.009032011 CET	49214	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.009917974 CET	49214	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.014741898 CET	3778	49214	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.014802933 CET	49214	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.019634962 CET	3778	49214	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.103934050 CET	3778	49212	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.104083061 CET	49212	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.104140043 CET	49212	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.105089903 CET	49216	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.110013962 CET	3778	49216	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.110188007 CET	49216	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.111637115 CET	49216	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.116421938 CET	3778	49216	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.116477013 CET	49216	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.121319056 CET	3778	49216	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.905570030 CET	3778	49214	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.905723095 CET	49214	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.905801058 CET	49214	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.906430960 CET	49218	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.910213947 CET	3778	49216	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.910331011 CET	49216	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.910362005 CET	49216	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.910831928 CET	49220	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.911361933 CET	3778	49218	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.911436081 CET	49218	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.912095070 CET	49218	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.915728092 CET	3778	49220	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.915821075 CET	49220	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.916577101 CET	49220	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.916841030 CET	3778	49218	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.916877031 CET	49218	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.921426058 CET	3778	49220	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.921516895 CET	49220	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:33.921617985 CET	3778	49218	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:33.926345110 CET	3778	49220	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:34.635385036 CET	3778	49220	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:34.635571003 CET	49220	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.635628939 CET	49220	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.636464119 CET	49222	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.641235113 CET	3778	49222	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:34.641336918 CET	49222	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.642246962 CET	49222	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.646980047 CET	3778	49222	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:34.647095919 CET	49222	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.651890039 CET	3778	49222	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:34.656959057 CET	3778	49218	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:34.657054901 CET	49218	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.657099962 CET	49218	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.657639027 CET	49224	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.662522078 CET	3778	49224	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:34.662637949 CET	49224	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.663788080 CET	49224	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.668620110 CET	3778	49224	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:34.668701887 CET	49224	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:34.673455954 CET	3778	49224	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:35.344707012 CET	3778	49222	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:35.344727039 CET	3778	49224	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:35.344877005 CET	49224	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.344882965 CET	49222	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.345010996 CET	49222	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.345094919 CET	49224	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.345963001 CET	49226	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.346208096 CET	49228	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.351928949 CET	3778	49226	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:35.352020979 CET	49226	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.352197886 CET	3778	49228	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:35.352236986 CET	49228	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.353377104 CET	49226	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.353728056 CET	49228	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.358998060 CET	3778	49226	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:35.359066963 CET	49226	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.359266996 CET	3778	49228	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:35.359302044 CET	49228	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:35.365071058 CET	3778	49226	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:35.365205050 CET	3778	49228	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.004498959 CET	3778	49226	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.004679918 CET	49226	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.004724026 CET	49226	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.005393982 CET	49230	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.010215044 CET	3778	49230	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.010272980 CET	49230	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.010900974 CET	49230	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.015686989 CET	3778	49230	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.015733004 CET	49230	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.020478010 CET	3778	49230	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.085186958 CET	3778	49228	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.085284948 CET	49228	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.085333109 CET	49228	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.086054087 CET	49232	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.090922117 CET	3778	49232	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.091032982 CET	49232	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.092051983 CET	49232	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.096899033 CET	3778	49232	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.097048998 CET	49232	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.101959944 CET	3778	49232	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.638073921 CET	3778	49230	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.638252020 CET	49230	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.638304949 CET	49230	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.638886929 CET	49234	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.643672943 CET	3778	49234	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.643735886 CET	49234	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.644988060 CET	49234	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.649791956 CET	3778	49234	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.649858952 CET	49234	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.654633045 CET	3778	49234	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.797379971 CET	3778	49232	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.797653913 CET	49232	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.797758102 CET	49232	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.798593044 CET	49236	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.803498030 CET	3778	49236	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.803647041 CET	49236	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.804626942 CET	49236	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.809400082 CET	3778	49236	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:36.809497118 CET	49236	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:36.814320087 CET	3778	49236	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:37.337615967 CET	3778	49234	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:37.337723017 CET	49234	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.337766886 CET	49234	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.338320971 CET	49238	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.343184948 CET	3778	49238	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:37.343261003 CET	49238	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.344041109 CET	49238	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.350310087 CET	3778	49238	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:37.350373983 CET	49238	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.355715036 CET	3778	49238	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:37.442245007 CET	3778	49236	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:37.442380905 CET	49236	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.442440033 CET	49236	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.443234921 CET	49240	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.448123932 CET	3778	49240	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:37.448184967 CET	49240	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.449515104 CET	49240	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.454286098 CET	3778	49240	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:37.454334974 CET	49240	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:37.459217072 CET	3778	49240	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.503298998 CET	3778	49238	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.503390074 CET	3778	49238	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.503401995 CET	3778	49240	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.503475904 CET	49240	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.503500938 CET	49238	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.503500938 CET	49238	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.503614902 CET	49238	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.503633976 CET	49240	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.503663063 CET	3778	49238	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.503689051 CET	3778	49240	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.503731966 CET	49240	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.503746033 CET	49238	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.504681110 CET	49242	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.504976988 CET	49244	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.684303999 CET	3778	49240	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.684350014 CET	3778	49242	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.684360981 CET	3778	49244	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.684479952 CET	49240	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.684587955 CET	49242	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.684622049 CET	49244	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.686162949 CET	49242	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.686259031 CET	49244	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.690953016 CET	3778	49242	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.690973997 CET	3778	49244	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.691004038 CET	49242	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.691020966 CET	49244	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:38.695818901 CET	3778	49242	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:38.695830107 CET	3778	49244	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:39.379134893 CET	3778	49244	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:39.379328012 CET	49244	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.379394054 CET	49244	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.379944086 CET	49246	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.384778976 CET	3778	49246	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:39.384884119 CET	49246	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.385533094 CET	49246	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.390400887 CET	3778	49246	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:39.390507936 CET	49246	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.395555019 CET	3778	49246	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:39.400017977 CET	3778	49242	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:39.400064945 CET	49242	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.400103092 CET	49242	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.400760889 CET	49248	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.405608892 CET	3778	49248	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:39.405702114 CET	49248	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.406883001 CET	49248	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.411721945 CET	3778	49248	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:39.411881924 CET	49248	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:39.416703939 CET	3778	49248	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.064060926 CET	3778	49246	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.064188957 CET	49246	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.064258099 CET	49246	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.065089941 CET	49250	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.071614981 CET	3778	49250	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.071723938 CET	49250	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.072906017 CET	49250	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.077663898 CET	3778	49250	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.077760935 CET	49250	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.084172010 CET	3778	49250	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.107737064 CET	3778	49248	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.107882023 CET	49248	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.107922077 CET	49248	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.108575106 CET	49252	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.115112066 CET	3778	49252	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.115171909 CET	49252	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.116327047 CET	49252	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.122859001 CET	3778	49252	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.122910976 CET	49252	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.129247904 CET	3778	49252	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.761009932 CET	3778	49250	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.761040926 CET	3778	49252	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.761181116 CET	49252	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.761228085 CET	49252	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.761291027 CET	49250	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.761394978 CET	49250	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.762355089 CET	49254	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.762645006 CET	49256	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.767194033 CET	3778	49254	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.767251015 CET	49254	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.767458916 CET	3778	49256	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.767493010 CET	49256	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.768755913 CET	49254	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.769145966 CET	49256	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.773542881 CET	3778	49254	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.773602962 CET	49254	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.773941994 CET	3778	49256	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.774096966 CET	49256	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:40.778434038 CET	3778	49254	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:40.778939962 CET	3778	49256	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:41.469257116 CET	3778	49256	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:41.469618082 CET	49256	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.469619036 CET	49256	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.470177889 CET	49258	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.476342916 CET	3778	49258	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:41.476423979 CET	49258	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.477185965 CET	49258	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.482043982 CET	3778	49258	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:41.482114077 CET	49258	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.486944914 CET	3778	49258	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:41.490665913 CET	3778	49254	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:41.490762949 CET	49254	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.490852118 CET	49254	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.491180897 CET	49260	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.497026920 CET	3778	49260	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:41.497106075 CET	49260	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.497819901 CET	49260	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.504254103 CET	3778	49260	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:41.504321098 CET	49260	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:41.510421038 CET	3778	49260	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.096471071 CET	3778	49258	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.096632004 CET	49258	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.096716881 CET	49258	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.097481966 CET	49262	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.105482101 CET	3778	49262	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.105607033 CET	49262	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.106636047 CET	49262	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.113468885 CET	3778	49262	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.113540888 CET	49262	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.121670961 CET	3778	49262	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.198636055 CET	3778	49260	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.198791981 CET	49260	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.198832035 CET	49260	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.199356079 CET	49264	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.204175949 CET	3778	49264	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.204263926 CET	49264	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.204880953 CET	49264	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.209700108 CET	3778	49264	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.209762096 CET	49264	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.214548111 CET	3778	49264	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.895651102 CET	3778	49264	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.895834923 CET	49264	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.895936012 CET	49264	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.896748066 CET	49266	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.901545048 CET	3778	49266	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.901623964 CET	49266	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.902815104 CET	49266	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.907639980 CET	3778	49266	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:42.907708883 CET	49266	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:42.912676096 CET	3778	49266	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:43.608633041 CET	3778	49266	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:43.608824015 CET	49266	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:43.608887911 CET	49266	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:43.609519005 CET	49268	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:43.614372969 CET	3778	49268	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:43.614432096 CET	49268	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:43.615289927 CET	49268	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:43.620102882 CET	3778	49268	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:43.620213985 CET	49268	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:43.625003099 CET	3778	49268	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:44.228853941 CET	3778	49268	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:44.229024887 CET	49268	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.229024887 CET	49268	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.229716063 CET	49270	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.234571934 CET	3778	49270	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:44.234719992 CET	49270	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.236007929 CET	49270	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.240921974 CET	3778	49270	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:44.241542101 CET	49270	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.246346951 CET	3778	49270	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:44.936214924 CET	3778	49270	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:44.936348915 CET	49270	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.936384916 CET	49270	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.936925888 CET	49272	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.945580959 CET	3778	49272	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:44.945652008 CET	49272	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.946443081 CET	49272	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.953946114 CET	3778	49272	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:44.953995943 CET	49272	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:44.961623907 CET	3778	49272	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:45.639617920 CET	3778	49272	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:45.639867067 CET	49272	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:45.639867067 CET	49272	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:45.640779972 CET	49274	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:45.645625114 CET	3778	49274	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:45.645683050 CET	49274	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:45.646981001 CET	49274	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:45.651760101 CET	3778	49274	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:45.651819944 CET	49274	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:45.656630039 CET	3778	49274	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:46.370137930 CET	3778	49274	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:46.370544910 CET	49274	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:46.370583057 CET	49274	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:46.371614933 CET	49276	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:46.376597881 CET	3778	49276	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:46.376692057 CET	49276	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:46.377501965 CET	49276	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:46.382293940 CET	3778	49276	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:46.382391930 CET	49276	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:46.387358904 CET	3778	49276	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:47.048432112 CET	3778	49276	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:47.048676968 CET	49276	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.048806906 CET	49276	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.050535917 CET	49278	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.055373907 CET	3778	49278	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:47.055449009 CET	49278	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.057956934 CET	49278	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.062766075 CET	3778	49278	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:47.062827110 CET	49278	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.067636967 CET	3778	49278	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:47.754684925 CET	3778	49278	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:47.754910946 CET	49278	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.755011082 CET	49278	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.755748034 CET	49280	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.760622978 CET	3778	49280	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:47.760699034 CET	49280	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.761785030 CET	49280	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.766670942 CET	3778	49280	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:47.766726017 CET	49280	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:47.771615982 CET	3778	49280	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:48.393896103 CET	3778	49280	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:48.394115925 CET	49280	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:48.394179106 CET	49280	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:48.395097017 CET	49282	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:48.399895906 CET	3778	49282	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:48.400005102 CET	49282	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:48.401072025 CET	49282	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:48.405826092 CET	3778	49282	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:48.405996084 CET	49282	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:48.411007881 CET	3778	49282	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:49.006633043 CET	3778	49282	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:49.006831884 CET	49282	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.007106066 CET	49282	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.007814884 CET	49284	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.012650013 CET	3778	49284	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:49.012944937 CET	49284	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.014448881 CET	49284	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.019591093 CET	3778	49284	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:49.019679070 CET	49284	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.024616003 CET	3778	49284	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:49.714101076 CET	3778	49284	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:49.714273930 CET	49284	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.714273930 CET	49284	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.715065956 CET	49286	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.719980955 CET	3778	49286	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:49.720073938 CET	49286	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.721645117 CET	49286	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.726516008 CET	3778	49286	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:49.726577997 CET	49286	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:49.731445074 CET	3778	49286	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:50.834434032 CET	3778	49286	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:50.834798098 CET	49286	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:50.834798098 CET	49286	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:50.835129976 CET	3778	49286	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:50.835284948 CET	49286	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:50.835563898 CET	49288	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:50.840549946 CET	3778	49288	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:50.840605021 CET	49288	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:50.841763973 CET	49288	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:50.846579075 CET	3778	49288	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:50.846636057 CET	49288	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:50.851497889 CET	3778	49288	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:51.529937029 CET	3778	49288	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:51.530256987 CET	49288	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:51.530371904 CET	49288	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:51.531266928 CET	49290	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:51.537744999 CET	3778	49290	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:51.537828922 CET	49290	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:51.539061069 CET	49290	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:51.545466900 CET	3778	49290	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:51.545520067 CET	49290	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:51.553622007 CET	3778	49290	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.115511894 CET	49262	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.120647907 CET	3778	49262	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.257446051 CET	3778	49290	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.257635117 CET	49290	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.257635117 CET	49290	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.258440971 CET	49292	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.263359070 CET	3778	49292	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.263436079 CET	49292	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.264635086 CET	49292	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.269493103 CET	3778	49292	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.269548893 CET	49292	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.274400949 CET	3778	49292	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.381498098 CET	3778	49262	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.381611109 CET	49262	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.983653069 CET	3778	49292	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.983866930 CET	49292	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.983866930 CET	49292	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.984549999 CET	49294	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.990164995 CET	3778	49294	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.990418911 CET	49294	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.991585016 CET	49294	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:52.996768951 CET	3778	49294	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:52.996835947 CET	49294	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:53.001981020 CET	3778	49294	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:53.714760065 CET	3778	49294	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:53.714929104 CET	49294	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:53.714982986 CET	49294	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:53.715848923 CET	49296	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:53.720786095 CET	3778	49296	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:53.720881939 CET	49296	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:53.722515106 CET	49296	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:53.727327108 CET	3778	49296	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:53.727380037 CET	49296	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:53.732165098 CET	3778	49296	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:54.332228899 CET	3778	49296	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:54.332412958 CET	49296	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:54.332475901 CET	49296	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:54.333524942 CET	49298	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:54.338382959 CET	3778	49298	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:54.338435888 CET	49298	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:54.339504957 CET	49298	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:54.344355106 CET	3778	49298	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:54.344414949 CET	49298	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:54.353204012 CET	3778	49298	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:55.037125111 CET	3778	49298	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:55.037317038 CET	49298	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.037317038 CET	49298	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.038111925 CET	49300	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.044006109 CET	3778	49300	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:55.044085026 CET	49300	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.045376062 CET	49300	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.050196886 CET	3778	49300	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:55.050275087 CET	49300	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.055088997 CET	3778	49300	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:55.769048929 CET	3778	49300	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:55.769198895 CET	49300	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.769248962 CET	49300	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.769988060 CET	49302	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.774789095 CET	3778	49302	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:55.775278091 CET	49302	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.776258945 CET	49302	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.781001091 CET	3778	49302	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:55.781095028 CET	49302	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:55.785837889 CET	3778	49302	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:56.320430994 CET	43928	443	192.168.2.23	91.189.91.42
Jan 10, 2025 23:52:56.391556978 CET	3778	49302	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:56.391683102 CET	49302	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:56.391736031 CET	49302	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:56.392865896 CET	49304	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:56.397749901 CET	3778	49304	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:56.397830009 CET	49304	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:56.398966074 CET	49304	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:56.403907061 CET	3778	49304	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:56.403973103 CET	49304	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:56.408771038 CET	3778	49304	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:57.058974028 CET	3778	49304	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:57.059676886 CET	49304	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.059676886 CET	49304	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.060031891 CET	49306	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.064795971 CET	3778	49306	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:57.065016031 CET	49306	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.065581083 CET	49306	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.070359945 CET	3778	49306	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:57.070529938 CET	49306	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.075373888 CET	3778	49306	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:57.679260969 CET	3778	49306	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:57.679503918 CET	49306	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.679503918 CET	49306	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.680216074 CET	49308	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.685120106 CET	3778	49308	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:57.685198069 CET	49308	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.686187029 CET	49308	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.691006899 CET	3778	49308	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:57.691046953 CET	49308	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:57.695827007 CET	3778	49308	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:58.383040905 CET	3778	49308	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:58.383265972 CET	49308	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:58.383349895 CET	49308	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:58.384062052 CET	49310	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:58.390124083 CET	3778	49310	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:58.390196085 CET	49310	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:58.391264915 CET	49310	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:58.396001101 CET	3778	49310	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:58.396055937 CET	49310	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:58.402043104 CET	3778	49310	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:59.013906002 CET	3778	49310	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:59.014039040 CET	49310	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.014087915 CET	49310	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.014794111 CET	49312	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.019690990 CET	3778	49312	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:59.019860029 CET	49312	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.020911932 CET	49312	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.025728941 CET	3778	49312	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:59.025799036 CET	49312	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.030618906 CET	3778	49312	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:59.636557102 CET	3778	49312	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:59.636873960 CET	49312	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.637002945 CET	49312	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.638096094 CET	49314	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.642930031 CET	3778	49314	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:59.643004894 CET	49314	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.644567966 CET	49314	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.649398088 CET	3778	49314	89.213.158.208	192.168.2.23
Jan 10, 2025 23:52:59.649492025 CET	49314	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:52:59.654329062 CET	3778	49314	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:00.365209103 CET	3778	49314	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:00.365550995 CET	49314	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:00.365652084 CET	49314	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:00.366729975 CET	49316	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:00.371711016 CET	3778	49316	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:00.371869087 CET	49316	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:00.373306036 CET	49316	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:00.380470037 CET	3778	49316	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:00.380633116 CET	49316	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:00.387166023 CET	3778	49316	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:01.028954983 CET	3778	49316	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:01.029136896 CET	49316	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.029212952 CET	49316	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.029994011 CET	49318	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.035363913 CET	3778	49318	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:01.035458088 CET	49318	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.036432981 CET	49318	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.041640997 CET	3778	49318	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:01.041735888 CET	49318	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.047040939 CET	3778	49318	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:01.671295881 CET	3778	49318	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:01.671710014 CET	49318	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.671710014 CET	49318	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.672727108 CET	49320	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.677678108 CET	3778	49320	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:01.677767992 CET	49320	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.679406881 CET	49320	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.684948921 CET	3778	49320	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:01.685017109 CET	49320	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:01.690910101 CET	3778	49320	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:02.406090975 CET	3778	49320	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:02.406529903 CET	49320	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:02.406529903 CET	49320	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:02.407337904 CET	49322	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:02.412226915 CET	3778	49322	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:02.412372112 CET	49322	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:02.413853884 CET	49322	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:02.419784069 CET	3778	49322	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:02.419876099 CET	49322	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:02.424722910 CET	3778	49322	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:03.100780964 CET	3778	49322	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:03.100987911 CET	49322	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.101079941 CET	49322	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.102075100 CET	49324	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.107232094 CET	3778	49324	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:03.107337952 CET	49324	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.108669996 CET	49324	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.114212990 CET	3778	49324	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:03.114300966 CET	49324	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.119414091 CET	3778	49324	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:03.888793945 CET	3778	49324	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:03.889055014 CET	49324	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.889092922 CET	49324	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.890086889 CET	49326	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.898231983 CET	3778	49326	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:03.898328066 CET	49326	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.899877071 CET	49326	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.907138109 CET	3778	49326	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:03.907238007 CET	49326	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:03.912803888 CET	3778	49326	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:13.900650978 CET	49326	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:13.905529976 CET	3778	49326	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:14.347276926 CET	3778	49326	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:14.347414970 CET	49326	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:52.434360027 CET	49262	3778	192.168.2.23	89.213.158.208
Jan 10, 2025 23:53:52.439296961 CET	3778	49262	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:52.696316004 CET	3778	49262	89.213.158.208	192.168.2.23
Jan 10, 2025 23:53:52.696518898 CET	49262	3778	192.168.2.23	89.213.158.208

System Behavior

Analysis Process: Space.arm.elf PID: 6237, Parent PID: 6160

General

Start time (UTC):	22:51:55
Start date (UTC):	10/01/2025
Path:	/tmp/Space.arm.elf
Arguments:	/tmp/Space.arm.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm.elf PID: 6239, Parent PID: 6237

General

Start time (UTC):	22:51:55
Start date (UTC):	10/01/2025
Path:	/tmp/Space.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm.elf PID: 6241, Parent PID: 6239

General

Start time (UTC):	22:51:55
Start date (UTC):	10/01/2025
Path:	/tmp/Space.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm.elf PID: 6243, Parent PID: 6239

General

Start time (UTC):	22:51:55
Start date (UTC):	10/01/2025
Path:	/tmp/Space.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm.elf PID: 6248, Parent PID: 6237

General

Start time (UTC):	22:52:01
Start date (UTC):	10/01/2025
Path:	/tmp/Space.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm.elf PID: 6249, Parent PID: 6237

General

Start time (UTC):	22:52:01
Start date (UTC):	10/01/2025
Path:	/tmp/Space.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Space.arm.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: Space.arm.elf PID: 6237, Parent PID: 6160

General

Chronological Activities

Analysis Process: Space.arm.elf PID: 6239, Parent PID: 6237

General

Chronological Activities

Analysis Process: Space.arm.elf PID: 6241, Parent PID: 6239

General

Chronological Activities

Analysis Process: Space.arm.elf PID: 6243, Parent PID: 6239

General

Chronological Activities

Analysis Process: Space.arm.elf PID: 6248, Parent PID: 6237

General

Chronological Activities

Analysis Process: Space.arm.elf PID: 6249, Parent PID: 6237

General

Chronological Activities

Linux Analysis Report
Space.arm.elf