Edit tour

Linux Analysis Report
Space.arm7.elf

Overview

General Information

Sample name:	Space.arm7.elf
Analysis ID:	1589118
MD5:	93aa9a8b4e28717e0830ef8b2d82bcc3
SHA1:	1e2bb31f3c460072cde00c7640022bba97574c48
SHA256:	39bd327da21fbde353f8e485be703f20946c1862a5804775dda72bd0cd3b42aa
Tags:	user-elfdigest
Infos:

Detection

Mirai

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

Sample contains only a LOAD segment without any section mappings

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589118
Start date and time:	2025-01-11 10:29:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Space.arm7.elf
Detection:	MAL
Classification:	mal68.troj.evad.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/Space.arm7.elf
PID:	6236
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

system is lnxubuntu20

Space.arm7.elf (PID: 6236, Parent: 6158, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/Space.arm7.elf

Space.arm7.elf New Fork (PID: 6238, Parent: 6236)

Space.arm7.elf New Fork (PID: 6240, Parent: 6238)

Space.arm7.elf New Fork (PID: 6242, Parent: 6238)

Space.arm7.elf New Fork (PID: 6246, Parent: 6236)

Space.arm7.elf New Fork (PID: 6248, Parent: 6236)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
6238.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6238.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1542c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15440:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15454:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15468:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1547c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15490:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6246.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6246.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1542c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15440:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15454:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15468:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1547c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15490:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6240.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6240.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1542c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15440:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15454:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15468:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1547c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15490:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6236.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6236.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1542c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15440:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15454:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15468:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1547c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15490:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.arm7.elf PID: 6236	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.arm7.elf PID: 6236	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x127b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x128f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12a3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12cb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12df:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1307:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1343:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1357:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x136b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x137f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1393:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13a7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13bb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13cf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13e3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13f7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x140b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.arm7.elf PID: 6238	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.arm7.elf PID: 6238	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x75d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x771:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x785:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x799:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7ad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7fd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x811:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x825:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x839:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x84d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x861:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x875:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x889:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x89d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8b1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8c5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8d9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8ed:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.arm7.elf PID: 6240	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.arm7.elf PID: 6240	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6e7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x723:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x737:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x74b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x75f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x773:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x787:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x79b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7af:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7d7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7eb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7ff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x813:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x827:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x83b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x84f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x863:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x877:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.arm7.elf PID: 6246	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.arm7.elf PID: 6246	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 11 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: Space.arm7.elf	Virustotal: Detection: 37%			Perma Link
Source: Space.arm7.elf	ReversingLabs: Detection: 50%

Source: global traffic

TCP traffic: 192.168.2.23:38528 -> 212.81.47.243:3778

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknown	TCP traffic detected without corresponding DNS query: 212.81.47.243

Source: Space.arm7.elf

String found in binary or memory: http://upx.sf.net

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: 6238.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6246.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6240.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6236.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.arm7.elf PID: 6236, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.arm7.elf PID: 6238, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.arm7.elf PID: 6240, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.arm7.elf PID: 6246, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: LOAD without section mappings

Program segment: 0x8000

Source: 6238.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6246.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6240.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6236.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.arm7.elf PID: 6236, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.arm7.elf PID: 6238, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.arm7.elf PID: 6240, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.arm7.elf PID: 6246, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal68.troj.evad.linELF@0/0@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/6236/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1582/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/3088/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/230/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/110/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/231/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/111/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/232/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1579/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/112/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/233/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1699/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/113/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/234/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1335/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1698/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/114/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/235/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1334/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1576/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/2302/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/115/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/236/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/116/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/237/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/117/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/118/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/910/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/119/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/912/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/10/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/2307/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/11/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/918/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/12/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/13/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/14/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/6242/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/15/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/16/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/17/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/18/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1594/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/120/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/121/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1349/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/122/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/243/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/123/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/2/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/124/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/3/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/4/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/125/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/126/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1344/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1465/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1586/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/127/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/6/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/248/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/128/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/249/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1463/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/800/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/9/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/801/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/20/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/21/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1900/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/22/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/23/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/24/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/25/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/26/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/27/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/28/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/29/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/491/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/250/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/130/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/251/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/252/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/132/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/253/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/254/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/255/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/256/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1599/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/257/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1477/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/379/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/258/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1476/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/259/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1475/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/936/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/30/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/2208/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/35/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1809/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/1494/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/260/status	Jump to behavior
Source: /tmp/Space.arm7.elf (PID: 6236)	File opened: /proc/261/status	Jump to behavior

Source: Space.arm7.elf

Submission file: segment LOAD with 7.9743 entropy (max. 8.0)

Source: /tmp/Space.arm7.elf (PID: 6236)

Queries kernel information via 'uname':

Jump to behavior

Source: Space.arm7.elf, 6236.1.00005619467f6000.0000561946a44000.rw-.sdmp, Space.arm7.elf, 6238.1.00005619467f6000.0000561946a24000.rw-.sdmp, Space.arm7.elf, 6240.1.00005619467f6000.0000561946a24000.rw-.sdmp, Space.arm7.elf, 6246.1.00005619467f6000.0000561946a44000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: Space.arm7.elf, 6236.1.00007ffefddbf000.00007ffefdde0000.rw-.sdmp, Space.arm7.elf, 6238.1.00007ffefddbf000.00007ffefdde0000.rw-.sdmp, Space.arm7.elf, 6240.1.00007ffefddbf000.00007ffefdde0000.rw-.sdmp, Space.arm7.elf, 6246.1.00007ffefddbf000.00007ffefdde0000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: Space.arm7.elf, 6236.1.00005619467f6000.0000561946a44000.rw-.sdmp, Space.arm7.elf, 6238.1.00005619467f6000.0000561946a24000.rw-.sdmp, Space.arm7.elf, 6240.1.00005619467f6000.0000561946a24000.rw-.sdmp, Space.arm7.elf, 6246.1.00005619467f6000.0000561946a44000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/arm
Source: Space.arm7.elf, 6236.1.00007ffefddbf000.00007ffefdde0000.rw-.sdmp, Space.arm7.elf, 6238.1.00007ffefddbf000.00007ffefdde0000.rw-.sdmp, Space.arm7.elf, 6240.1.00007ffefddbf000.00007ffefdde0000.rw-.sdmp, Space.arm7.elf, 6246.1.00007ffefddbf000.00007ffefdde0000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/Space.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Space.arm7.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 6238.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6246.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6240.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6236.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Space.arm7.elf PID: 6236, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm7.elf PID: 6238, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm7.elf PID: 6240, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm7.elf PID: 6246, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 6238.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6246.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6240.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6236.1.00007fe5ac017000.00007fe5ac02f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Space.arm7.elf PID: 6236, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm7.elf PID: 6238, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm7.elf PID: 6240, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.arm7.elf PID: 6246, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Space.arm7.elf	37%	Virustotal		Browse
Space.arm7.elf	50%	ReversingLabs	Linux.Trojan.Mirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	Space.arm7.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
212.81.47.243	unknown	Germany	9009	M247GB	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	ARMV7L.elf	Get hash	malicious	Unknown	Browse
	MIPS.elf	Get hash	malicious	Unknown	Browse
	SH4.elf	Get hash	malicious	Unknown	Browse
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	I586.elf	Get hash	malicious	Unknown	Browse
	ssl.elf	Get hash	malicious	Gafgyt	Browse
	sst.elf	Get hash	malicious	Gafgyt	Browse
	sss.elf	Get hash	malicious	Gafgyt	Browse
	ARMV7L.elf	Get hash	malicious	Unknown	Browse
	ssb.elf	Get hash	malicious	Gafgyt	Browse
91.189.91.42	ARMV7L.elf	Get hash	malicious	Unknown	Browse
	MIPS.elf	Get hash	malicious	Unknown	Browse
	SH4.elf	Get hash	malicious	Unknown	Browse
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	I586.elf	Get hash	malicious	Unknown	Browse
	ssl.elf	Get hash	malicious	Gafgyt	Browse
	sst.elf	Get hash	malicious	Gafgyt	Browse
	sss.elf	Get hash	malicious	Gafgyt	Browse
	ARMV7L.elf	Get hash	malicious	Unknown	Browse
	ssb.elf	Get hash	malicious	Gafgyt	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	ARMV7L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	MIPS.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	SH4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse	91.189.91.42
	ssi.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.125.190.26
	I586.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ssc.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	ssl.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	sst.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	sss.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
CANONICAL-ASGB	ARMV7L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	MIPS.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	SH4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse	91.189.91.42
	ssi.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.125.190.26
	I586.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ssc.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	ssl.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	sst.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	sss.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
INIT7CH	ARMV7L.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	MIPS.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	SH4.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse	109.202.202.202
	I586.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ssl.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	sst.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	sss.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	ARMV7L.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ssb.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
M247GB	ssd.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssp.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	sse.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse	89.33.192.138
	ssi.elf	Get hash	malicious	Mirai, Gafgyt	Browse	89.33.192.138
	ssc.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssl.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	sst.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	sss.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssx.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (GNU/Linux), statically linked, no section header
Entropy (8bit):	7.984554521417899
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Space.arm7.elf
File size:	61'844 bytes
MD5:	93aa9a8b4e28717e0830ef8b2d82bcc3
SHA1:	1e2bb31f3c460072cde00c7640022bba97574c48
SHA256:	39bd327da21fbde353f8e485be703f20946c1862a5804775dda72bd0cd3b42aa
SHA512:	6fa887700f5dd3e8713842d4d7acdad88934766aabb0c3f85b3bdbe8ff76ec9df75d38c02f2135cfff334311f11d0aa98094c1b8342058e7d4df07574b752406
SSDEEP:	1536:zVQSmwtMJXmejtrLTM5Tfv83KJ2crl2EW8:zVywt8XZtLgTX83KHl2EW8
TLSH:	C25302D2A440D1E3D75A03BF65E4E807FF651BBC79E9309A3679C24861E2D0878D7AC2
File Content Preview:	.ELF..............(.........4...........4. ...(.....................m...m................6...6...6..................Q.td...............................OUPX!.........n...n......j..........?.E.h;....#..$...o....P.G.o.....X.*.V......f..T.qh...4.8........8.\|i

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0x11c80
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8000	0x8000	0xae6d	0xae6d	7.9743	0x5	R E	0x8000
LOAD	0x36c8	0x236c8	0x236c8	0x0	0x0	0.0000	0x6	RW	0x8000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 10:29:50.934700966 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 10:29:51.175801039 CET	38528	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:51.180874109 CET	3778	38528	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:51.180938959 CET	38528	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:51.231720924 CET	38528	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:51.236676931 CET	3778	38528	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:51.236721039 CET	38528	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:51.241535902 CET	3778	38528	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:52.122658968 CET	3778	38528	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:52.122876883 CET	38528	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:52.122876883 CET	38528	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:52.124469042 CET	38530	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:52.129358053 CET	3778	38530	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:52.129415989 CET	38530	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:52.133654118 CET	38530	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:52.138520002 CET	3778	38530	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:52.138569117 CET	38530	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:52.143457890 CET	3778	38530	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:53.171422005 CET	3778	38530	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:53.173784018 CET	38530	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:53.173851013 CET	38530	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:53.189296961 CET	38532	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:53.194210052 CET	3778	38532	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:53.194278002 CET	38532	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:53.233232021 CET	38532	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:53.238082886 CET	3778	38532	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:53.238131046 CET	38532	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:53.242960930 CET	3778	38532	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:54.121762991 CET	3778	38532	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:54.121910095 CET	38532	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:54.121946096 CET	38532	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:54.122433901 CET	38534	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:54.127598047 CET	3778	38534	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:54.127652884 CET	38534	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:54.128196955 CET	38534	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:54.133059025 CET	3778	38534	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:54.133107901 CET	38534	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:54.138104916 CET	3778	38534	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:55.023134947 CET	3778	38534	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:55.023411036 CET	38534	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.023411989 CET	38534	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.023814917 CET	38536	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.028748989 CET	3778	38536	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:55.028800964 CET	38536	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.029337883 CET	38536	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.034219027 CET	3778	38536	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:55.034264088 CET	38536	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.039592028 CET	3778	38536	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:55.940629005 CET	3778	38536	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:55.941050053 CET	38536	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.941050053 CET	38536	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.941409111 CET	38538	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.946261883 CET	3778	38538	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:55.946319103 CET	38538	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.946891069 CET	38538	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.951765060 CET	3778	38538	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:55.951881886 CET	38538	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:55.956754923 CET	3778	38538	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:56.562144041 CET	42836	443	192.168.2.23	91.189.91.43
Jan 11, 2025 10:29:56.847027063 CET	3778	38538	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:56.847306013 CET	38538	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:56.847306967 CET	38538	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:56.848021030 CET	38540	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:56.852925062 CET	3778	38540	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:56.852998018 CET	38540	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:56.853529930 CET	38540	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:56.858376026 CET	3778	38540	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:56.858475924 CET	38540	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:56.863306046 CET	3778	38540	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:57.224009991 CET	38542	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.229742050 CET	3778	38542	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:57.229805946 CET	38542	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.243303061 CET	38542	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.248224974 CET	3778	38542	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:57.248281956 CET	38542	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.253087997 CET	3778	38542	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:57.329936981 CET	42516	80	192.168.2.23	109.202.202.202
Jan 11, 2025 10:29:57.744697094 CET	3778	38540	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:57.744924068 CET	38540	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.744924068 CET	38540	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.745326042 CET	38544	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.750185013 CET	3778	38544	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:57.750330925 CET	38544	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.750881910 CET	38544	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.755717993 CET	3778	38544	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:57.755768061 CET	38544	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:57.760626078 CET	3778	38544	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:58.155550003 CET	3778	38542	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:58.155807972 CET	38542	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.156116962 CET	38542	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.157049894 CET	38546	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.161891937 CET	3778	38546	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:58.161957979 CET	38546	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.163536072 CET	38546	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.168339968 CET	3778	38546	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:58.168390036 CET	38546	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.173207045 CET	3778	38546	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:58.661762953 CET	3778	38544	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:58.662116051 CET	38544	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.662116051 CET	38544	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.662820101 CET	38548	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.667680979 CET	3778	38548	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:58.667834044 CET	38548	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.669186115 CET	38548	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.674063921 CET	3778	38548	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:58.674304962 CET	38548	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:58.679140091 CET	3778	38548	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:59.074223042 CET	3778	38546	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:59.074331999 CET	38546	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.074364901 CET	38546	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.074798107 CET	38550	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.079658031 CET	3778	38550	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:59.079718113 CET	38550	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.080374002 CET	38550	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.085170031 CET	3778	38550	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:59.085264921 CET	38550	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.090064049 CET	3778	38550	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:59.606122017 CET	3778	38548	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:59.606189013 CET	38548	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.606347084 CET	38548	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.606848955 CET	38552	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.611670017 CET	3778	38552	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:59.611722946 CET	38552	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.612376928 CET	38552	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.617234945 CET	3778	38552	212.81.47.243	192.168.2.23
Jan 11, 2025 10:29:59.617328882 CET	38552	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:29:59.622772932 CET	3778	38552	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.003824949 CET	3778	38550	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.004137993 CET	38550	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.004184008 CET	38550	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.004611015 CET	38554	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.009516954 CET	3778	38554	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.009573936 CET	38554	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.010237932 CET	38554	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.015064001 CET	3778	38554	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.015166998 CET	38554	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.020047903 CET	3778	38554	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.536029100 CET	3778	38552	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.536117077 CET	38552	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.536279917 CET	38552	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.536757946 CET	38556	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.541661978 CET	3778	38556	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.541723967 CET	38556	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.542368889 CET	38556	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.547230959 CET	3778	38556	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.547344923 CET	38556	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.552217007 CET	3778	38556	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.920973063 CET	3778	38554	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.921129942 CET	38554	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.921180964 CET	38554	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.921636105 CET	38558	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.926523924 CET	3778	38558	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.926642895 CET	38558	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.927484035 CET	38558	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.932346106 CET	3778	38558	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:00.932399988 CET	38558	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:00.937521935 CET	3778	38558	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:01.437414885 CET	3778	38556	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:01.437881947 CET	38556	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.437881947 CET	38556	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.438391924 CET	38560	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.443351030 CET	3778	38560	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:01.443411112 CET	38560	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.444257975 CET	38560	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.449150085 CET	3778	38560	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:01.449198008 CET	38560	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.454067945 CET	3778	38560	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:01.846002102 CET	3778	38558	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:01.846283913 CET	38558	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.846283913 CET	38558	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.846770048 CET	38562	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.851613045 CET	3778	38562	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:01.851717949 CET	38562	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.852552891 CET	38562	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.857553005 CET	3778	38562	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:01.857609034 CET	38562	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:01.862466097 CET	3778	38562	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:02.356797934 CET	3778	38560	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:02.357050896 CET	38560	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.357127905 CET	38560	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.357698917 CET	38564	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.362631083 CET	3778	38564	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:02.362692118 CET	38564	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.363533020 CET	38564	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.368328094 CET	3778	38564	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:02.368386984 CET	38564	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.373367071 CET	3778	38564	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:02.742893934 CET	3778	38562	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:02.743099928 CET	38562	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.743155003 CET	38562	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.743762016 CET	38566	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.748595953 CET	3778	38566	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:02.748693943 CET	38566	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.749527931 CET	38566	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.754342079 CET	3778	38566	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:02.754395008 CET	38566	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:02.759215117 CET	3778	38566	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:03.271236897 CET	3778	38564	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:03.271414995 CET	38564	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.271440029 CET	38564	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.271933079 CET	38568	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.276782990 CET	3778	38568	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:03.276840925 CET	38568	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.277538061 CET	38568	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.282460928 CET	3778	38568	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:03.282577991 CET	38568	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.287475109 CET	3778	38568	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:03.675827026 CET	3778	38566	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:03.676024914 CET	38566	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.676024914 CET	38566	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.676439047 CET	38570	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.681257963 CET	3778	38570	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:03.681308985 CET	38570	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.681952000 CET	38570	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.686743975 CET	3778	38570	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:03.686810970 CET	38570	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:03.691581011 CET	3778	38570	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:04.165779114 CET	3778	38568	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:04.166019917 CET	38568	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.166071892 CET	38568	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.166537046 CET	38572	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.171401978 CET	3778	38572	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:04.171458006 CET	38572	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.172068119 CET	38572	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.176789045 CET	3778	38572	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:04.176836014 CET	38572	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.181634903 CET	3778	38572	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:04.623205900 CET	3778	38570	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:04.623539925 CET	38570	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.623541117 CET	38570	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.624268055 CET	38574	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.629120111 CET	3778	38574	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:04.629200935 CET	38574	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.630304098 CET	38574	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.635169029 CET	3778	38574	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:04.635258913 CET	38574	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:04.640065908 CET	3778	38574	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:05.103667974 CET	3778	38572	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:05.104131937 CET	38572	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.104131937 CET	38572	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.104823112 CET	38576	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.109723091 CET	3778	38576	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:05.109834909 CET	38576	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.110816002 CET	38576	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.115695000 CET	3778	38576	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:05.115767956 CET	38576	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.120582104 CET	3778	38576	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:05.521620035 CET	3778	38574	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:05.521888971 CET	38574	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.521888971 CET	38574	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.522768021 CET	38578	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.527653933 CET	3778	38578	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:05.527764082 CET	38578	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.528744936 CET	38578	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.533518076 CET	3778	38578	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:05.533585072 CET	38578	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:05.538341999 CET	3778	38578	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.019263029 CET	3778	38576	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.019407034 CET	38576	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.019490004 CET	38576	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.020143032 CET	38580	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.025648117 CET	3778	38580	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.025758028 CET	38580	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.026667118 CET	38580	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.031472921 CET	3778	38580	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.031518936 CET	38580	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.036312103 CET	3778	38580	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.427211046 CET	3778	38578	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.427542925 CET	38578	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.427544117 CET	38578	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.428312063 CET	38582	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.434354067 CET	3778	38582	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.434418917 CET	38582	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.435492992 CET	38582	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.441565037 CET	3778	38582	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.441618919 CET	38582	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.447688103 CET	3778	38582	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.918390036 CET	3778	38580	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.918773890 CET	38580	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.918773890 CET	38580	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.919214010 CET	38584	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.924161911 CET	3778	38584	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.924236059 CET	38584	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.924921989 CET	38584	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.929766893 CET	3778	38584	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:06.929827929 CET	38584	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:06.934712887 CET	3778	38584	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:07.330070972 CET	3778	38582	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:07.330471039 CET	38582	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.330532074 CET	38582	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.331171036 CET	38586	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.336097956 CET	3778	38586	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:07.336193085 CET	38586	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.337184906 CET	38586	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.342008114 CET	3778	38586	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:07.342130899 CET	38586	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.346992970 CET	3778	38586	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:07.825773001 CET	3778	38584	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:07.826078892 CET	38584	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.826164961 CET	38584	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.826997042 CET	38588	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.831896067 CET	3778	38588	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:07.831969023 CET	38588	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.832990885 CET	38588	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.837831974 CET	3778	38588	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:07.837948084 CET	38588	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:07.842849016 CET	3778	38588	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:08.244038105 CET	3778	38586	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:08.244179964 CET	38586	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.244375944 CET	38586	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.245065928 CET	38590	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.249911070 CET	3778	38590	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:08.249974012 CET	38590	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.250993967 CET	38590	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.255764008 CET	3778	38590	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:08.255825996 CET	38590	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.260664940 CET	3778	38590	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:08.724879980 CET	3778	38588	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:08.725214005 CET	38588	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.725297928 CET	38588	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.725933075 CET	38592	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.730916977 CET	3778	38592	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:08.730997086 CET	38592	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.732027054 CET	38592	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.736886024 CET	3778	38592	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:08.736954927 CET	38592	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:08.741830111 CET	3778	38592	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:09.163021088 CET	3778	38590	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:09.163316965 CET	38590	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.163433075 CET	38590	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.164025068 CET	38594	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.168934107 CET	3778	38594	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:09.168992043 CET	38594	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.169817924 CET	38594	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.174671888 CET	3778	38594	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:09.174776077 CET	38594	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.179657936 CET	3778	38594	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:09.624005079 CET	3778	38592	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:09.624329090 CET	38592	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.624475002 CET	38592	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.625129938 CET	38596	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.630001068 CET	3778	38596	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:09.630083084 CET	38596	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.631032944 CET	38596	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.635864019 CET	3778	38596	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:09.635932922 CET	38596	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:09.641074896 CET	3778	38596	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:10.104610920 CET	3778	38594	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:10.104840040 CET	38594	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.104918003 CET	38594	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.105571032 CET	38598	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.110466003 CET	3778	38598	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:10.110658884 CET	38598	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.111531019 CET	38598	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.116379976 CET	3778	38598	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:10.116453886 CET	38598	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.121260881 CET	3778	38598	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:10.547667980 CET	3778	38596	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:10.547921896 CET	38596	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.548005104 CET	38596	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.548748970 CET	38600	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.553622961 CET	3778	38600	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:10.553702116 CET	38600	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.555030107 CET	38600	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.559993029 CET	3778	38600	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:10.560102940 CET	38600	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:10.564945936 CET	3778	38600	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.014843941 CET	3778	38598	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.015388966 CET	38598	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.015533924 CET	38598	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.016638041 CET	38602	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.021508932 CET	3778	38602	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.021627903 CET	38602	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.022658110 CET	38602	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.027544975 CET	3778	38602	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.027609110 CET	38602	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.032465935 CET	3778	38602	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.407876015 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 10:30:11.455231905 CET	3778	38600	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.455409050 CET	38600	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.455544949 CET	38600	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.456497908 CET	38604	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.461335897 CET	3778	38604	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.461419106 CET	38604	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.462382078 CET	38604	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.467204094 CET	3778	38604	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.467293024 CET	38604	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.472306967 CET	3778	38604	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.937158108 CET	3778	38602	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.937437057 CET	38602	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.937438011 CET	38602	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.938170910 CET	38606	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.943267107 CET	3778	38606	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.943372965 CET	38606	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.944453001 CET	38606	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.949350119 CET	3778	38606	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:11.949424028 CET	38606	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:11.954308033 CET	3778	38606	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:12.371921062 CET	3778	38604	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:12.372212887 CET	38604	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.372294903 CET	38604	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.372992039 CET	38608	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.377907038 CET	3778	38608	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:12.378040075 CET	38608	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.379062891 CET	38608	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.383956909 CET	3778	38608	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:12.384058952 CET	38608	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.388947964 CET	3778	38608	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:12.855531931 CET	3778	38606	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:12.855695009 CET	38606	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.855772972 CET	38606	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.856271029 CET	38610	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.861219883 CET	3778	38610	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:12.861305952 CET	38610	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.862111092 CET	38610	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.866987944 CET	3778	38610	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:12.867057085 CET	38610	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:12.871918917 CET	3778	38610	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:13.269411087 CET	3778	38608	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:13.269583941 CET	38608	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.269584894 CET	38608	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.270442963 CET	38612	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.275353909 CET	3778	38612	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:13.275423050 CET	38612	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.276431084 CET	38612	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.281284094 CET	3778	38612	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:13.281335115 CET	38612	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.286196947 CET	3778	38612	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:13.806134939 CET	3778	38610	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:13.806356907 CET	38610	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.806356907 CET	38610	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.806916952 CET	38614	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.811785936 CET	3778	38614	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:13.811847925 CET	38614	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.812963009 CET	38614	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.817751884 CET	3778	38614	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:13.817851067 CET	38614	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:13.822658062 CET	3778	38614	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:14.163728952 CET	3778	38612	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:14.163985968 CET	38612	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.164048910 CET	38612	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.164911985 CET	38616	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.169789076 CET	3778	38616	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:14.169862032 CET	38616	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.170924902 CET	38616	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.175812006 CET	3778	38616	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:14.175879955 CET	38616	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.180707932 CET	3778	38616	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:14.738106966 CET	3778	38614	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:14.738615036 CET	38614	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.738615990 CET	38614	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.739289045 CET	38618	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.744237900 CET	3778	38618	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:14.744313955 CET	38618	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.745330095 CET	38618	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.750201941 CET	3778	38618	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:14.750319004 CET	38618	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:14.755198956 CET	3778	38618	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:15.104815006 CET	3778	38616	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:15.105077982 CET	38616	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.105159044 CET	38616	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.105842113 CET	38620	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.110779047 CET	3778	38620	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:15.110841036 CET	38620	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.111907005 CET	38620	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.116786003 CET	3778	38620	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:15.116923094 CET	38620	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.121819973 CET	3778	38620	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:15.645277023 CET	3778	38618	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:15.645709038 CET	38618	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.645709038 CET	38618	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.646634102 CET	38622	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.651598930 CET	3778	38622	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:15.651678085 CET	38622	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.652764082 CET	38622	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.657636881 CET	3778	38622	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:15.657695055 CET	38622	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:15.662617922 CET	3778	38622	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.017535925 CET	3778	38620	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.017808914 CET	38620	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.017870903 CET	38620	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.018590927 CET	38624	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.023525000 CET	3778	38624	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.023617983 CET	38624	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.024545908 CET	38624	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.029474020 CET	3778	38624	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.029547930 CET	38624	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.034413099 CET	3778	38624	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.543901920 CET	3778	38622	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.544194937 CET	38622	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.544286013 CET	38622	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.545119047 CET	38626	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.550146103 CET	3778	38626	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.550214052 CET	38626	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.551352024 CET	38626	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.556195021 CET	3778	38626	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.556261063 CET	38626	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.561161995 CET	3778	38626	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.938129902 CET	3778	38624	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.938323021 CET	38624	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.938373089 CET	38624	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.939434052 CET	38628	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.944395065 CET	3778	38628	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.944487095 CET	38628	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.945863008 CET	38628	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.950737000 CET	3778	38628	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:16.950829029 CET	38628	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:16.955636024 CET	3778	38628	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:17.470241070 CET	3778	38626	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:17.470458984 CET	38626	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.470594883 CET	38626	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.471384048 CET	38630	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.476291895 CET	3778	38630	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:17.476377964 CET	38630	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.477400064 CET	38630	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.482755899 CET	3778	38630	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:17.482836962 CET	38630	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.487797022 CET	3778	38630	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:17.840044975 CET	3778	38628	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:17.840286970 CET	38628	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.840286970 CET	38628	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.840882063 CET	38632	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.845782995 CET	3778	38632	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:17.845845938 CET	38632	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.846682072 CET	38632	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.851531982 CET	3778	38632	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:17.851594925 CET	38632	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:17.856399059 CET	3778	38632	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:18.425064087 CET	3778	38630	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:18.425385952 CET	38630	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.425385952 CET	38630	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.425839901 CET	38634	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.430726051 CET	3778	38634	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:18.430820942 CET	38634	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.431674004 CET	38634	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.436573029 CET	3778	38634	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:18.436635017 CET	38634	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.441446066 CET	3778	38634	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:18.739084959 CET	3778	38632	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:18.739397049 CET	38632	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.739397049 CET	38632	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.740003109 CET	38636	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.744936943 CET	3778	38636	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:18.745004892 CET	38636	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.745805979 CET	38636	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.750639915 CET	3778	38636	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:18.750737906 CET	38636	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:18.755573034 CET	3778	38636	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:19.342240095 CET	3778	38634	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:19.342353106 CET	38634	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.342412949 CET	38634	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.343070030 CET	38638	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.347956896 CET	3778	38638	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:19.348021984 CET	38638	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.349006891 CET	38638	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.353825092 CET	3778	38638	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:19.353878021 CET	38638	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.358722925 CET	3778	38638	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:19.657780886 CET	3778	38636	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:19.658061981 CET	38636	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.658107042 CET	38636	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.658915997 CET	38640	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.663794994 CET	3778	38640	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:19.663939953 CET	38640	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.665214062 CET	38640	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.670104980 CET	3778	38640	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:19.670214891 CET	38640	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:19.675036907 CET	3778	38640	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:20.245002985 CET	3778	38638	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:20.245399952 CET	38638	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.245399952 CET	38638	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.246140957 CET	38642	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.251055002 CET	3778	38642	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:20.251168966 CET	38642	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.252293110 CET	38642	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.257137060 CET	3778	38642	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:20.257215023 CET	38642	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.262054920 CET	3778	38642	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:20.555820942 CET	3778	38640	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:20.556304932 CET	38640	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.556304932 CET	38640	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.557039976 CET	38644	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.561911106 CET	3778	38644	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:20.562032938 CET	38644	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.563121080 CET	38644	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.567950964 CET	3778	38644	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:20.568027973 CET	38644	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:20.572840929 CET	3778	38644	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:21.153291941 CET	3778	38642	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:21.153613091 CET	38642	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.153613091 CET	38642	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.154561043 CET	38646	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.159456015 CET	3778	38646	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:21.159537077 CET	38646	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.160626888 CET	38646	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.165560007 CET	3778	38646	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:21.165621042 CET	38646	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.170459032 CET	3778	38646	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:21.458189011 CET	3778	38644	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:21.458612919 CET	38644	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.458612919 CET	38644	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.459456921 CET	38648	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.464337111 CET	3778	38648	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:21.464423895 CET	38648	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.465503931 CET	38648	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.470336914 CET	3778	38648	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:21.470442057 CET	38648	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:21.475339890 CET	3778	38648	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.051347971 CET	3778	38646	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.051793098 CET	38646	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.051793098 CET	38646	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.052546024 CET	38650	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.057416916 CET	3778	38650	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.057538986 CET	38650	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.058686018 CET	38650	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.063548088 CET	3778	38650	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.063620090 CET	38650	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.072561979 CET	3778	38650	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.362488031 CET	3778	38648	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.362827063 CET	38648	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.362890959 CET	38648	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.363934040 CET	38652	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.368843079 CET	3778	38652	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.368949890 CET	38652	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.369873047 CET	38652	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.374716043 CET	3778	38652	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.374795914 CET	38652	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.379631996 CET	3778	38652	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.952244997 CET	3778	38650	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.952606916 CET	38650	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.952606916 CET	38650	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.953392982 CET	38654	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.958353043 CET	3778	38654	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.958451033 CET	38654	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.959646940 CET	38654	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.964519024 CET	3778	38654	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:22.964593887 CET	38654	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:22.969469070 CET	3778	38654	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:23.265527010 CET	3778	38652	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:23.265836000 CET	38652	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.265836000 CET	38652	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.266618967 CET	38656	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.271518946 CET	3778	38656	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:23.271595955 CET	38656	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.272897959 CET	38656	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.277759075 CET	3778	38656	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:23.277820110 CET	38656	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.282700062 CET	3778	38656	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:23.694163084 CET	42836	443	192.168.2.23	91.189.91.43
Jan 11, 2025 10:30:23.851886034 CET	3778	38654	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:23.852029085 CET	38654	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.852094889 CET	38654	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.852859020 CET	38658	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.857736111 CET	3778	38658	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:23.857809067 CET	38658	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.858896017 CET	38658	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.863791943 CET	3778	38658	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:23.863852978 CET	38658	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:23.868784904 CET	3778	38658	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:24.201275110 CET	3778	38656	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:24.201386929 CET	38656	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.201436043 CET	38656	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.202321053 CET	38660	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.207263947 CET	3778	38660	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:24.207355976 CET	38660	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.208417892 CET	38660	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.213304043 CET	3778	38660	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:24.213361025 CET	38660	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.218333960 CET	3778	38660	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:24.761394024 CET	3778	38658	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:24.761692047 CET	38658	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.761692047 CET	38658	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.762396097 CET	38662	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.767261028 CET	3778	38662	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:24.767343044 CET	38662	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.768744946 CET	38662	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.773583889 CET	3778	38662	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:24.773633003 CET	38662	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:24.778449059 CET	3778	38662	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:25.121335983 CET	3778	38660	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:25.121448040 CET	38660	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.121505976 CET	38660	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.122040987 CET	38664	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.127041101 CET	3778	38664	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:25.127121925 CET	38664	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.128161907 CET	38664	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.133032084 CET	3778	38664	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:25.133136988 CET	38664	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.137945890 CET	3778	38664	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:25.661171913 CET	3778	38662	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:25.661401033 CET	38662	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.661401033 CET	38662	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.662379026 CET	38666	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.667406082 CET	3778	38666	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:25.667493105 CET	38666	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.668673038 CET	38666	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.673552990 CET	3778	38666	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:25.673607111 CET	38666	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:25.678530931 CET	3778	38666	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.038856030 CET	3778	38664	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.039062977 CET	38664	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.039062977 CET	38664	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.039901018 CET	38668	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.044867039 CET	3778	38668	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.044965029 CET	38668	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.048871994 CET	38668	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.054111004 CET	3778	38668	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.054167986 CET	38668	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.059540987 CET	3778	38668	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.556735992 CET	3778	38666	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.557107925 CET	38666	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.557207108 CET	38666	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.558512926 CET	38670	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.563462973 CET	3778	38670	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.563544035 CET	38670	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.564841986 CET	38670	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.569711924 CET	3778	38670	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.569813967 CET	38670	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.574676991 CET	3778	38670	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.955420017 CET	3778	38668	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.956013918 CET	38668	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.956048965 CET	38668	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.956911087 CET	38672	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.961827040 CET	3778	38672	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.961947918 CET	38672	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.963357925 CET	38672	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.968255043 CET	3778	38672	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:26.968328953 CET	38672	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:26.973248005 CET	3778	38672	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:27.505004883 CET	3778	38670	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:27.505201101 CET	38670	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.505305052 CET	38670	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.506344080 CET	38674	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.511250973 CET	3778	38674	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:27.511432886 CET	38674	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.512794018 CET	38674	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.517663002 CET	3778	38674	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:27.517754078 CET	38674	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.522619009 CET	3778	38674	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:27.789729118 CET	42516	80	192.168.2.23	109.202.202.202
Jan 11, 2025 10:30:27.863935947 CET	3778	38672	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:27.864140987 CET	38672	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.864192963 CET	38672	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.865190029 CET	38676	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.870168924 CET	3778	38676	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:27.870299101 CET	38676	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.872939110 CET	38676	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.877778053 CET	3778	38676	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:27.877857924 CET	38676	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:27.882699013 CET	3778	38676	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:28.417288065 CET	3778	38674	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:28.417491913 CET	38674	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.417572975 CET	38674	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.418782949 CET	38678	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.423677921 CET	3778	38678	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:28.423793077 CET	38678	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.425112009 CET	38678	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.429948092 CET	3778	38678	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:28.430026054 CET	38678	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.434868097 CET	3778	38678	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:28.804544926 CET	3778	38676	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:28.804694891 CET	38676	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.804862022 CET	38676	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.805948973 CET	38680	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.812036991 CET	3778	38680	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:28.812131882 CET	38680	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.813574076 CET	38680	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.819221973 CET	3778	38680	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:28.819297075 CET	38680	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:28.824179888 CET	3778	38680	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:29.334043026 CET	3778	38678	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:29.334367990 CET	38678	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.334446907 CET	38678	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.335628033 CET	38682	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.340537071 CET	3778	38682	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:29.340630054 CET	38682	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.342113018 CET	38682	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.346957922 CET	3778	38682	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:29.347029924 CET	38682	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.351918936 CET	3778	38682	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:29.721023083 CET	3778	38680	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:29.721179962 CET	38680	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.721246958 CET	38680	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.722348928 CET	38684	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.727286100 CET	3778	38684	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:29.727395058 CET	38684	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.728712082 CET	38684	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.733566046 CET	3778	38684	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:29.733632088 CET	38684	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:29.738423109 CET	3778	38684	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:30.243819952 CET	3778	38682	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:30.244177103 CET	38682	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.244177103 CET	38682	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.245007992 CET	38686	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.249871969 CET	3778	38686	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:30.249962091 CET	38686	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.250983953 CET	38686	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.255790949 CET	3778	38686	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:30.255858898 CET	38686	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.260673046 CET	3778	38686	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:30.622157097 CET	3778	38684	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:30.622397900 CET	38684	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.622399092 CET	38684	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.623567104 CET	38688	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.628447056 CET	3778	38688	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:30.628557920 CET	38688	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.629599094 CET	38688	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.634502888 CET	3778	38688	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:30.634576082 CET	38688	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:30.639389038 CET	3778	38688	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:31.147027016 CET	3778	38686	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:31.147231102 CET	38686	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.147335052 CET	38686	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.148324966 CET	38690	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.153266907 CET	3778	38690	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:31.153376102 CET	38690	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.154686928 CET	38690	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.159491062 CET	3778	38690	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:31.159559011 CET	38690	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.164344072 CET	3778	38690	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:31.520486116 CET	3778	38688	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:31.520678997 CET	38688	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.520788908 CET	38688	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.521677971 CET	38692	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.526596069 CET	3778	38692	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:31.526675940 CET	38692	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.528012991 CET	38692	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.532881975 CET	3778	38692	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:31.532949924 CET	38692	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:31.537724972 CET	3778	38692	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:32.068775892 CET	3778	38690	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:32.068950891 CET	38690	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.069006920 CET	38690	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.069967985 CET	38694	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.074841022 CET	3778	38694	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:32.074949026 CET	38694	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.076308966 CET	38694	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.081166983 CET	3778	38694	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:32.081233025 CET	38694	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.085999966 CET	3778	38694	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:32.422570944 CET	3778	38692	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:32.422712088 CET	38692	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.422712088 CET	38692	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.423603058 CET	38696	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.428543091 CET	3778	38696	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:32.428601980 CET	38696	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.429393053 CET	38696	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.434210062 CET	3778	38696	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:32.434262991 CET	38696	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:32.439064980 CET	3778	38696	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.002774954 CET	3778	38694	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.003060102 CET	38694	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.003128052 CET	38694	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.003928900 CET	38698	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.008899927 CET	3778	38698	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.008969069 CET	38698	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.010030031 CET	38698	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.014853001 CET	3778	38698	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.014914989 CET	38698	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.019788980 CET	3778	38698	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.326416016 CET	3778	38696	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.326616049 CET	38696	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.326683044 CET	38696	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.327513933 CET	38700	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.332376957 CET	3778	38700	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.332488060 CET	38700	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.333760023 CET	38700	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.338609934 CET	3778	38700	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.338696957 CET	38700	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.343661070 CET	3778	38700	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.917395115 CET	3778	38698	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.917581081 CET	38698	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.917651892 CET	38698	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.918515921 CET	38702	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.923424006 CET	3778	38702	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.923510075 CET	38702	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.924870014 CET	38702	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.931226969 CET	3778	38702	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:33.931297064 CET	38702	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:33.936274052 CET	3778	38702	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:34.245966911 CET	3778	38700	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:34.246313095 CET	38700	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.246337891 CET	38700	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.247198105 CET	38704	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.252238035 CET	3778	38704	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:34.252341986 CET	38704	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.253736973 CET	38704	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.258595943 CET	3778	38704	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:34.258702040 CET	38704	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.263495922 CET	3778	38704	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:34.825944901 CET	3778	38702	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:34.826196909 CET	38702	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.826196909 CET	38702	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.827043056 CET	38706	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.831948996 CET	3778	38706	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:34.832067966 CET	38706	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.833357096 CET	38706	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.838228941 CET	3778	38706	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:34.838320971 CET	38706	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:34.843189001 CET	3778	38706	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:35.156753063 CET	3778	38704	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:35.156991959 CET	38704	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.157078981 CET	38704	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.157929897 CET	38708	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.162827015 CET	3778	38708	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:35.162940979 CET	38708	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.164361954 CET	38708	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.169286966 CET	3778	38708	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:35.169410944 CET	38708	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.174288988 CET	3778	38708	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:35.727937937 CET	3778	38706	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:35.728200912 CET	38706	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.728202105 CET	38706	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.729041100 CET	38710	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.733953953 CET	3778	38710	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:35.734118938 CET	38710	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.735399961 CET	38710	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.740278006 CET	3778	38710	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:35.740401983 CET	38710	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:35.745296955 CET	3778	38710	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.066519976 CET	3778	38708	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.066739082 CET	38708	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.066739082 CET	38708	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.067503929 CET	38712	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.072406054 CET	3778	38712	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.072501898 CET	38712	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.073900938 CET	38712	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.078710079 CET	3778	38712	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.078783035 CET	38712	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.083621979 CET	3778	38712	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.642210007 CET	3778	38710	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.642381907 CET	38710	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.642468929 CET	38710	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.643302917 CET	38714	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.648277044 CET	3778	38714	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.648371935 CET	38714	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.649702072 CET	38714	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.654546022 CET	3778	38714	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.654666901 CET	38714	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.659563065 CET	3778	38714	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.962801933 CET	3778	38712	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.962960958 CET	38712	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.963084936 CET	38712	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.963939905 CET	38716	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.968913078 CET	3778	38716	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.969003916 CET	38716	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.970349073 CET	38716	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.975255966 CET	3778	38716	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:36.975380898 CET	38716	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:36.980232000 CET	3778	38716	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:37.568608046 CET	3778	38714	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:37.568861008 CET	38714	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.568938017 CET	38714	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.569816113 CET	38718	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.574729919 CET	3778	38718	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:37.574856997 CET	38718	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.576201916 CET	38718	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.581068039 CET	3778	38718	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:37.581149101 CET	38718	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.586101055 CET	3778	38718	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:37.904705048 CET	3778	38716	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:37.904875994 CET	38716	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.904926062 CET	38716	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.905725956 CET	38720	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.910587072 CET	3778	38720	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:37.910684109 CET	38720	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.912147999 CET	38720	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.916965961 CET	3778	38720	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:37.917073011 CET	38720	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:37.921961069 CET	3778	38720	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:38.505558014 CET	3778	38718	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:38.505737066 CET	38718	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.506021023 CET	38718	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.506679058 CET	38722	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.511560917 CET	3778	38722	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:38.511657953 CET	38722	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.512742043 CET	38722	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.517627001 CET	3778	38722	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:38.517736912 CET	38722	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.522622108 CET	3778	38722	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:38.822002888 CET	3778	38720	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:38.822370052 CET	38720	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.822370052 CET	38720	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.822974920 CET	38724	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.827888012 CET	3778	38724	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:38.827985048 CET	38724	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.829113960 CET	38724	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.834018946 CET	3778	38724	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:38.834136009 CET	38724	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:38.839039087 CET	3778	38724	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:39.414658070 CET	3778	38722	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:39.414813042 CET	38722	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.414921045 CET	38722	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.415451050 CET	38726	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.420438051 CET	3778	38726	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:39.420546055 CET	38726	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.421572924 CET	38726	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.426379919 CET	3778	38726	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:39.426450968 CET	38726	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.431341887 CET	3778	38726	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:39.729633093 CET	3778	38724	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:39.729810953 CET	38724	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.729859114 CET	38724	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.730638027 CET	38728	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.735532999 CET	3778	38728	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:39.735651016 CET	38728	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.736748934 CET	38728	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.741554976 CET	3778	38728	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:39.741631985 CET	38728	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:39.746505022 CET	3778	38728	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:40.626359940 CET	3778	38728	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:40.626909018 CET	38728	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:40.626909018 CET	38728	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:40.627422094 CET	38730	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:40.632407904 CET	3778	38730	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:40.632494926 CET	38730	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:40.633524895 CET	38730	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:40.638499975 CET	3778	38730	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:40.638596058 CET	38730	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:40.643446922 CET	3778	38730	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:41.544035912 CET	3778	38730	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:41.544452906 CET	38730	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:41.544452906 CET	38730	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:41.545134068 CET	38732	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:41.550035000 CET	3778	38732	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:41.550163984 CET	38732	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:41.551245928 CET	38732	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:41.556082964 CET	3778	38732	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:41.556154966 CET	38732	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:41.561077118 CET	3778	38732	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:42.460037947 CET	3778	38732	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:42.460381031 CET	38732	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:42.460381985 CET	38732	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:42.461313009 CET	38734	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:42.466151953 CET	3778	38734	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:42.466258049 CET	38734	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:42.467395067 CET	38734	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:42.472223043 CET	3778	38734	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:42.472323895 CET	38734	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:42.477236986 CET	3778	38734	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:43.361679077 CET	3778	38734	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:43.361836910 CET	38734	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:43.361838102 CET	38734	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:43.362334967 CET	38736	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:43.367245913 CET	3778	38736	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:43.367372036 CET	38736	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:43.368130922 CET	38736	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:43.372961998 CET	3778	38736	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:43.373045921 CET	38736	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:43.377973080 CET	3778	38736	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:44.268403053 CET	3778	38736	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:44.268611908 CET	38736	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:44.268683910 CET	38736	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:44.269627094 CET	38738	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:44.274584055 CET	3778	38738	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:44.274692059 CET	38738	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:44.276169062 CET	38738	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:44.280996084 CET	3778	38738	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:44.281070948 CET	38738	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:44.286005974 CET	3778	38738	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:45.221720934 CET	3778	38738	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:45.222068071 CET	38738	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:45.222225904 CET	38738	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:45.223156929 CET	38740	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:45.228027105 CET	3778	38740	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:45.228102922 CET	38740	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:45.229479074 CET	38740	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:45.234324932 CET	3778	38740	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:45.234392881 CET	38740	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:45.239357948 CET	3778	38740	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:46.141432047 CET	3778	38740	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:46.141743898 CET	38740	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:46.141805887 CET	38740	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:46.142508984 CET	38742	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:46.147372961 CET	3778	38742	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:46.147483110 CET	38742	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:46.148485899 CET	38742	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:46.153387070 CET	3778	38742	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:46.153466940 CET	38742	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:46.158368111 CET	3778	38742	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:47.055108070 CET	3778	38742	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:47.055429935 CET	38742	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:47.055479050 CET	38742	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:47.056638002 CET	38744	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:47.061597109 CET	3778	38744	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:47.061723948 CET	38744	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:47.062906981 CET	38744	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:47.067761898 CET	3778	38744	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:47.067943096 CET	38744	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:47.072760105 CET	3778	38744	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:48.008110046 CET	3778	38744	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:48.008492947 CET	38744	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.008492947 CET	38744	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.009288073 CET	38746	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.014174938 CET	3778	38746	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:48.014283895 CET	38746	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.015635014 CET	38746	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.020515919 CET	3778	38746	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:48.020610094 CET	38746	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.025482893 CET	3778	38746	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:48.916300058 CET	3778	38746	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:48.916789055 CET	38746	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.916789055 CET	38746	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.917470932 CET	38748	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.922393084 CET	3778	38748	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:48.922493935 CET	38748	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.923851013 CET	38748	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.928685904 CET	3778	38748	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:48.928761005 CET	38748	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:48.933593988 CET	3778	38748	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:49.430985928 CET	38726	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:49.438425064 CET	3778	38726	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:49.751197100 CET	3778	38726	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:49.751463890 CET	38726	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:49.838763952 CET	3778	38748	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:49.839004040 CET	38748	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:49.839198112 CET	38748	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:49.840056896 CET	38750	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:49.844850063 CET	3778	38750	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:49.844943047 CET	38750	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:49.846332073 CET	38750	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:49.851129055 CET	3778	38750	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:49.851205111 CET	38750	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:49.855977058 CET	3778	38750	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:50.736951113 CET	3778	38750	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:50.737277985 CET	38750	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:50.737356901 CET	38750	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:50.738142014 CET	38752	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:50.743065119 CET	3778	38752	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:50.743175983 CET	38752	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:50.744232893 CET	38752	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:50.749080896 CET	3778	38752	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:50.749166012 CET	38752	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:50.753973961 CET	3778	38752	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:51.643244982 CET	3778	38752	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:51.643716097 CET	38752	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:51.643717051 CET	38752	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:51.644464016 CET	38754	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:51.649300098 CET	3778	38754	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:51.649369001 CET	38754	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:51.650477886 CET	38754	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:51.655338049 CET	3778	38754	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:51.655414104 CET	38754	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:51.660239935 CET	3778	38754	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:52.362390041 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 10:30:52.545670986 CET	3778	38754	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:52.545902014 CET	38754	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:52.545948029 CET	38754	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:52.546766996 CET	38756	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:52.551620007 CET	3778	38756	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:52.551704884 CET	38756	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:52.553076029 CET	38756	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:52.557940006 CET	3778	38756	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:52.558027983 CET	38756	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:52.562890053 CET	3778	38756	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:53.449115992 CET	3778	38756	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:53.449580908 CET	38756	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:53.449660063 CET	38756	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:53.450606108 CET	38758	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:53.455435991 CET	3778	38758	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:53.455521107 CET	38758	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:53.456806898 CET	38758	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:53.461596012 CET	3778	38758	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:53.461663008 CET	38758	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:53.466523886 CET	3778	38758	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:54.354374886 CET	3778	38758	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:54.354588985 CET	38758	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:54.354645967 CET	38758	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:54.355561972 CET	38760	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:54.360560894 CET	3778	38760	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:54.360662937 CET	38760	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:54.362040997 CET	38760	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:54.366919994 CET	3778	38760	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:54.366993904 CET	38760	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:54.371896982 CET	3778	38760	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:55.305300951 CET	3778	38760	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:55.305825949 CET	38760	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:55.305825949 CET	38760	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:55.306760073 CET	38762	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:55.311727047 CET	3778	38762	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:55.311810017 CET	38762	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:55.313204050 CET	38762	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:55.318095922 CET	3778	38762	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:55.318171024 CET	38762	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:55.322999954 CET	3778	38762	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:56.213573933 CET	3778	38762	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:56.214042902 CET	38762	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:56.214044094 CET	38762	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:56.214834929 CET	38764	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:56.219763994 CET	3778	38764	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:56.219852924 CET	38764	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:56.221100092 CET	38764	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:56.225987911 CET	3778	38764	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:56.226066113 CET	38764	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:56.230963945 CET	3778	38764	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:57.114891052 CET	3778	38764	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:57.115434885 CET	38764	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:57.115434885 CET	38764	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:57.116164923 CET	38766	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:57.121028900 CET	3778	38766	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:57.121117115 CET	38766	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:57.122437954 CET	38766	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:57.127307892 CET	3778	38766	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:57.127469063 CET	38766	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:57.132297993 CET	3778	38766	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:58.028270960 CET	3778	38766	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:58.028487921 CET	38766	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.028553009 CET	38766	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.029347897 CET	38768	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.034204006 CET	3778	38768	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:58.034343004 CET	38768	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.035640001 CET	38768	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.040510893 CET	3778	38768	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:58.040632963 CET	38768	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.045521021 CET	3778	38768	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:58.928498983 CET	3778	38768	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:58.928765059 CET	38768	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.928765059 CET	38768	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.929613113 CET	38770	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.934442997 CET	3778	38770	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:58.934513092 CET	38770	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.935839891 CET	38770	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.940613985 CET	3778	38770	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:58.940665960 CET	38770	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:58.945451975 CET	3778	38770	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:59.857757092 CET	3778	38770	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:59.858134031 CET	38770	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:59.858176947 CET	38770	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:59.859015942 CET	38772	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:59.863987923 CET	3778	38772	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:59.864089012 CET	38772	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:59.865430117 CET	38772	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:59.870349884 CET	3778	38772	212.81.47.243	192.168.2.23
Jan 11, 2025 10:30:59.870454073 CET	38772	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:30:59.875297070 CET	3778	38772	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:00.805246115 CET	3778	38772	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:00.805660009 CET	38772	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:00.805738926 CET	38772	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:00.806682110 CET	38774	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:00.811563969 CET	3778	38774	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:00.811671019 CET	38774	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:00.812974930 CET	38774	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:00.817787886 CET	3778	38774	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:00.817910910 CET	38774	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:00.822763920 CET	3778	38774	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:01.714303017 CET	3778	38774	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:01.714878082 CET	38774	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:01.714878082 CET	38774	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:01.716275930 CET	38776	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:01.721149921 CET	3778	38776	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:01.721266031 CET	38776	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:01.723140001 CET	38776	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:01.728005886 CET	3778	38776	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:01.728216887 CET	38776	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:01.733038902 CET	3778	38776	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:02.622406960 CET	3778	38776	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:02.622898102 CET	38776	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:02.622899055 CET	38776	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:02.623708010 CET	38778	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:02.628686905 CET	3778	38778	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:02.628792048 CET	38778	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:02.630111933 CET	38778	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:02.634979963 CET	3778	38778	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:02.635062933 CET	38778	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:02.639952898 CET	3778	38778	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:03.520154953 CET	3778	38778	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:03.520570993 CET	38778	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:03.520678997 CET	38778	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:03.521522045 CET	38780	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:03.526791096 CET	3778	38780	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:03.526896954 CET	38780	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:03.528292894 CET	38780	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:03.533977032 CET	3778	38780	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:03.534056902 CET	38780	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:03.538980961 CET	3778	38780	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:04.441862106 CET	3778	38780	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:04.442210913 CET	38780	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:04.442286968 CET	38780	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:04.443090916 CET	38782	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:04.447954893 CET	3778	38782	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:04.448055029 CET	38782	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:04.449373007 CET	38782	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:04.454217911 CET	3778	38782	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:04.454346895 CET	38782	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:04.459280968 CET	3778	38782	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:05.339378119 CET	3778	38782	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:05.339787006 CET	38782	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:05.339787006 CET	38782	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:05.340560913 CET	38784	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:05.345407009 CET	3778	38784	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:05.345510006 CET	38784	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:05.346800089 CET	38784	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:05.351594925 CET	3778	38784	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:05.351670027 CET	38784	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:05.356554031 CET	3778	38784	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:06.247848034 CET	3778	38784	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:06.248155117 CET	38784	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:06.248204947 CET	38784	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:06.249042034 CET	38786	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:06.253968954 CET	3778	38786	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:06.254087925 CET	38786	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:06.255376101 CET	38786	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:06.260186911 CET	3778	38786	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:06.260344982 CET	38786	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:06.265204906 CET	3778	38786	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:07.147929907 CET	3778	38786	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:07.148205996 CET	38786	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:07.148267031 CET	38786	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:07.149286032 CET	38788	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:07.154267073 CET	3778	38788	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:07.154371977 CET	38788	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:07.155705929 CET	38788	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:07.160572052 CET	3778	38788	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:07.160670042 CET	38788	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:07.165551901 CET	3778	38788	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:08.046293020 CET	3778	38788	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:08.046700001 CET	38788	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.046700001 CET	38788	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.047252893 CET	38790	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.052150965 CET	3778	38790	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:08.052253008 CET	38790	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.053555012 CET	38790	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.058446884 CET	3778	38790	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:08.058530092 CET	38790	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.063371897 CET	3778	38790	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:08.953557968 CET	3778	38790	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:08.953850985 CET	38790	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.953943968 CET	38790	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.954792023 CET	38792	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.959681988 CET	3778	38792	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:08.959794044 CET	38792	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.961108923 CET	38792	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.965949059 CET	3778	38792	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:08.966026068 CET	38792	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:08.970948935 CET	3778	38792	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:09.871859074 CET	3778	38792	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:09.872139931 CET	38792	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:09.872215033 CET	38792	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:09.873039007 CET	38794	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:09.877871990 CET	3778	38794	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:09.877968073 CET	38794	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:09.879281998 CET	38794	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:09.884116888 CET	3778	38794	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:09.884192944 CET	38794	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:09.889070988 CET	3778	38794	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:10.826190948 CET	3778	38794	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:10.826432943 CET	38794	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:10.826555967 CET	38794	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:10.827604055 CET	38796	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:10.832535982 CET	3778	38796	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:10.832684994 CET	38796	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:10.833993912 CET	38796	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:10.838814020 CET	3778	38796	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:10.838901997 CET	38796	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:10.843776941 CET	3778	38796	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:11.727618933 CET	3778	38796	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:11.728027105 CET	38796	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:11.728104115 CET	38796	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:11.728935003 CET	38798	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:11.733886957 CET	3778	38798	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:11.734002113 CET	38798	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:11.735407114 CET	38798	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:11.740283966 CET	3778	38798	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:11.740387917 CET	38798	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:11.745265007 CET	3778	38798	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:12.628587961 CET	3778	38798	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:12.628854036 CET	38798	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:12.629137993 CET	38798	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:12.630132914 CET	38800	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:12.635107040 CET	3778	38800	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:12.635209084 CET	38800	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:12.636590004 CET	38800	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:12.641496897 CET	3778	38800	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:12.641568899 CET	38800	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:12.646461964 CET	3778	38800	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:13.659441948 CET	3778	38800	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:13.659883976 CET	38800	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:13.659884930 CET	38800	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:13.660681963 CET	38802	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:13.665599108 CET	3778	38802	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:13.665704012 CET	38802	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:13.667099953 CET	38802	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:13.671941996 CET	3778	38802	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:13.672009945 CET	38802	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:13.676856041 CET	3778	38802	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:14.606966019 CET	3778	38802	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:14.607297897 CET	38802	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:14.607299089 CET	38802	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:14.608196974 CET	38804	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:14.613235950 CET	3778	38804	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:14.613388062 CET	38804	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:14.614769936 CET	38804	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:14.619635105 CET	3778	38804	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:14.619708061 CET	38804	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:14.624581099 CET	3778	38804	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:15.517889977 CET	3778	38804	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:15.518215895 CET	38804	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:15.518215895 CET	38804	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:15.519073009 CET	38806	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:15.524008989 CET	3778	38806	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:15.524100065 CET	38806	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:15.525557041 CET	38806	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:15.530401945 CET	3778	38806	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:15.530479908 CET	38806	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:15.535334110 CET	3778	38806	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:16.424945116 CET	3778	38806	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:16.425271034 CET	38806	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:16.425271988 CET	38806	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:16.426259995 CET	38808	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:16.431169033 CET	3778	38808	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:16.431277990 CET	38808	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:16.432647943 CET	38808	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:16.437491894 CET	3778	38808	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:16.437570095 CET	38808	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:16.442394972 CET	3778	38808	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:17.329792976 CET	3778	38808	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:17.330264091 CET	38808	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:17.330264091 CET	38808	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:17.331018925 CET	38810	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:17.335859060 CET	3778	38810	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:17.335944891 CET	38810	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:17.337301970 CET	38810	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:17.342124939 CET	3778	38810	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:17.342200994 CET	38810	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:17.347018003 CET	3778	38810	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:18.228437901 CET	3778	38810	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:18.228787899 CET	38810	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:18.228787899 CET	38810	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:18.229548931 CET	38812	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:18.234536886 CET	3778	38812	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:18.234620094 CET	38812	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:18.236033916 CET	38812	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:18.240863085 CET	3778	38812	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:18.240948915 CET	38812	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:18.245861053 CET	3778	38812	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:19.145467043 CET	3778	38812	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:19.145786047 CET	38812	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:19.145848989 CET	38812	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:19.146672010 CET	38814	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:19.151551962 CET	3778	38814	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:19.151638985 CET	38814	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:19.153076887 CET	38814	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:19.157947063 CET	3778	38814	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:19.158020973 CET	38814	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:19.162952900 CET	3778	38814	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:20.047903061 CET	3778	38814	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:20.048199892 CET	38814	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.048199892 CET	38814	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.048903942 CET	38816	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.053977013 CET	3778	38816	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:20.054070950 CET	38816	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.055154085 CET	38816	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.059977055 CET	3778	38816	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:20.060036898 CET	38816	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.064901114 CET	3778	38816	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:20.955070019 CET	3778	38816	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:20.955626011 CET	38816	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.955626011 CET	38816	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.956037998 CET	38818	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.961035013 CET	3778	38818	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:20.961152077 CET	38818	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.961873055 CET	38818	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.966797113 CET	3778	38818	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:20.966875076 CET	38818	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:20.971771002 CET	3778	38818	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:21.858567953 CET	3778	38818	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:21.859062910 CET	38818	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:21.859062910 CET	38818	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:21.859937906 CET	38820	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:21.865916014 CET	3778	38820	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:21.865994930 CET	38820	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:21.867347002 CET	38820	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:21.873266935 CET	3778	38820	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:21.873325109 CET	38820	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:21.879342079 CET	3778	38820	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:22.806180000 CET	3778	38820	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:22.806437016 CET	38820	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:22.806492090 CET	38820	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:22.807512999 CET	38822	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:22.812375069 CET	3778	38822	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:22.812453985 CET	38822	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:22.813855886 CET	38822	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:22.818737984 CET	3778	38822	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:22.818811893 CET	38822	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:22.823693991 CET	3778	38822	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:23.719418049 CET	3778	38822	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:23.719728947 CET	38822	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:23.719815969 CET	38822	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:23.720988989 CET	38824	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:23.725868940 CET	3778	38824	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:23.725959063 CET	38824	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:23.727539062 CET	38824	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:23.732451916 CET	3778	38824	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:23.732530117 CET	38824	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:23.737380028 CET	3778	38824	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:24.620815039 CET	3778	38824	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:24.621238947 CET	38824	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:24.621239901 CET	38824	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:24.622387886 CET	38826	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:24.627264977 CET	3778	38826	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:24.627353907 CET	38826	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:24.628861904 CET	38826	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:24.633872032 CET	3778	38826	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:24.633945942 CET	38826	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:24.638818979 CET	3778	38826	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:25.548146963 CET	3778	38826	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:25.548410892 CET	38826	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:25.548410892 CET	38826	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:25.549365997 CET	38828	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:25.554267883 CET	3778	38828	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:25.554337978 CET	38828	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:25.555814028 CET	38828	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:25.560647964 CET	3778	38828	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:25.560703993 CET	38828	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:25.565584898 CET	3778	38828	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:26.469475985 CET	3778	38828	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:26.469697952 CET	38828	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:26.469760895 CET	38828	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:26.470447063 CET	38830	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:26.475383043 CET	3778	38830	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:26.475485086 CET	38830	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:26.476805925 CET	38830	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:26.481719971 CET	3778	38830	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:26.481796026 CET	38830	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:26.486685991 CET	3778	38830	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:27.428261995 CET	3778	38830	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:27.428595066 CET	38830	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:27.428738117 CET	38830	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:27.429713964 CET	38832	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:27.434626102 CET	3778	38832	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:27.434743881 CET	38832	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:27.436186075 CET	38832	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:27.441783905 CET	3778	38832	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:27.441860914 CET	38832	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:27.446693897 CET	3778	38832	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:28.334578037 CET	3778	38832	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:28.334992886 CET	38832	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:28.334992886 CET	38832	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:28.335932970 CET	38834	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:28.341054916 CET	3778	38834	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:28.341247082 CET	38834	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:28.342942953 CET	38834	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:28.347764969 CET	3778	38834	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:28.347910881 CET	38834	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:28.352760077 CET	3778	38834	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:29.253175020 CET	3778	38834	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:29.253407001 CET	38834	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:29.253561974 CET	38834	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:29.253938913 CET	38836	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:29.258887053 CET	3778	38836	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:29.259002924 CET	38836	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:29.260169983 CET	38836	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:29.265957117 CET	3778	38836	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:29.266102076 CET	38836	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:29.271049976 CET	3778	38836	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:30.207007885 CET	3778	38836	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:30.207353115 CET	38836	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:30.207528114 CET	38836	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:30.208307028 CET	38838	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:30.213166952 CET	3778	38838	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:30.213270903 CET	38838	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:30.214603901 CET	38838	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:30.219484091 CET	3778	38838	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:30.219613075 CET	38838	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:30.224456072 CET	3778	38838	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:31.116054058 CET	3778	38838	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:31.116241932 CET	38838	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:31.116317034 CET	38838	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:31.116954088 CET	38840	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:31.121944904 CET	3778	38840	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:31.122031927 CET	38840	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:31.123279095 CET	38840	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:31.128128052 CET	3778	38840	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:31.128201008 CET	38840	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:31.133024931 CET	3778	38840	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:32.019660950 CET	3778	38840	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:32.019903898 CET	38840	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.019989014 CET	38840	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.020713091 CET	38842	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.025577068 CET	3778	38842	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:32.025671959 CET	38842	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.026798964 CET	38842	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.031709909 CET	3778	38842	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:32.031788111 CET	38842	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.036650896 CET	3778	38842	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:32.936748028 CET	3778	38842	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:32.937074900 CET	38842	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.937074900 CET	38842	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.938113928 CET	38844	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.943010092 CET	3778	38844	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:32.943090916 CET	38844	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.944578886 CET	38844	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.949357986 CET	3778	38844	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:32.949424982 CET	38844	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:32.954281092 CET	3778	38844	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:33.862791061 CET	3778	38844	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:33.863365889 CET	38844	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:33.863365889 CET	38844	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:33.864763021 CET	38846	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:33.869700909 CET	3778	38846	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:33.870048046 CET	38846	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:33.871814966 CET	38846	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:33.876724005 CET	3778	38846	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:33.877082109 CET	38846	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:33.882075071 CET	3778	38846	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:34.806399107 CET	3778	38846	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:34.806704998 CET	38846	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:34.806791067 CET	38846	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:34.807766914 CET	38848	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:34.812614918 CET	3778	38848	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:34.812707901 CET	38848	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:34.814085007 CET	38848	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:34.818958044 CET	3778	38848	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:34.819036007 CET	38848	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:34.823843002 CET	3778	38848	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:35.718643904 CET	3778	38848	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:35.718919039 CET	38848	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:35.718964100 CET	38848	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:35.720479965 CET	38850	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:35.725303888 CET	3778	38850	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:35.725378036 CET	38850	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:35.727046013 CET	38850	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:35.731862068 CET	3778	38850	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:35.731930971 CET	38850	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:35.736793041 CET	3778	38850	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:36.643986940 CET	3778	38850	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:36.644309998 CET	38850	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:36.644309998 CET	38850	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:36.645155907 CET	38852	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:36.650121927 CET	3778	38852	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:36.650221109 CET	38852	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:36.651272058 CET	38852	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:36.656128883 CET	3778	38852	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:36.656205893 CET	38852	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:36.661067009 CET	3778	38852	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:37.550015926 CET	3778	38852	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:37.550230980 CET	38852	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:37.550319910 CET	38852	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:37.551007986 CET	38854	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:37.555933952 CET	3778	38854	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:37.556031942 CET	38854	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:37.557065010 CET	38854	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:37.561893940 CET	3778	38854	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:37.562014103 CET	38854	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:37.566896915 CET	3778	38854	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:38.451828003 CET	3778	38854	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:38.452105045 CET	38854	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:38.452188969 CET	38854	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:38.453072071 CET	38856	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:38.458534002 CET	3778	38856	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:38.458606958 CET	38856	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:38.459985018 CET	38856	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:38.465255976 CET	3778	38856	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:38.465315104 CET	38856	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:38.470671892 CET	3778	38856	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:39.358603001 CET	3778	38856	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:39.358968019 CET	38856	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:39.359035969 CET	38856	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:39.359862089 CET	38858	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:39.365077019 CET	3778	38858	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:39.365196943 CET	38858	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:39.366591930 CET	38858	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:39.371567011 CET	3778	38858	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:39.371629000 CET	38858	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:39.376612902 CET	3778	38858	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:40.258337021 CET	3778	38858	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:40.258732080 CET	38858	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:40.258795023 CET	38858	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:40.259639025 CET	38860	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:40.264874935 CET	3778	38860	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:40.265153885 CET	38860	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:40.266509056 CET	38860	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:40.271444082 CET	3778	38860	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:40.271528959 CET	38860	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:40.276863098 CET	3778	38860	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:41.165268898 CET	3778	38860	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:41.165541887 CET	38860	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:41.165543079 CET	38860	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:41.166527987 CET	38862	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:41.171382904 CET	3778	38862	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:41.171485901 CET	38862	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:41.173032999 CET	38862	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:41.177881956 CET	3778	38862	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:41.177943945 CET	38862	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:41.182744026 CET	3778	38862	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:42.105684996 CET	3778	38862	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:42.106096029 CET	38862	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:42.106096983 CET	38862	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:42.107019901 CET	38864	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:42.111896992 CET	3778	38864	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:42.111968040 CET	38864	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:42.113481998 CET	38864	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:42.118325949 CET	3778	38864	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:42.118390083 CET	38864	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:42.123183012 CET	3778	38864	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:43.024199963 CET	3778	38864	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:43.024470091 CET	38864	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.024470091 CET	38864	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.025149107 CET	38866	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.030030966 CET	3778	38866	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:43.030111074 CET	38866	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.031147003 CET	38866	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.036058903 CET	3778	38866	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:43.036137104 CET	38866	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.041023016 CET	3778	38866	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:43.932190895 CET	3778	38866	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:43.932399988 CET	38866	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.932496071 CET	38866	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.933340073 CET	38868	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.938183069 CET	3778	38868	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:43.938265085 CET	38868	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.939599037 CET	38868	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.944427967 CET	3778	38868	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:43.944506884 CET	38868	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:43.949325085 CET	3778	38868	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:44.831296921 CET	3778	38868	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:44.831628084 CET	38868	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:44.831721067 CET	38868	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:44.832556009 CET	38870	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:44.837450027 CET	3778	38870	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:44.837567091 CET	38870	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:44.838946104 CET	38870	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:44.843823910 CET	3778	38870	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:44.843894005 CET	38870	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:44.848706961 CET	3778	38870	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:45.748929977 CET	3778	38870	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:45.749366045 CET	38870	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:45.749366045 CET	38870	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:45.750348091 CET	38872	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:45.755372047 CET	3778	38872	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:45.755458117 CET	38872	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:45.756773949 CET	38872	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:45.761627913 CET	3778	38872	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:45.761703014 CET	38872	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:45.766545057 CET	3778	38872	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:46.647936106 CET	3778	38872	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:46.648363113 CET	38872	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:46.648363113 CET	38872	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:46.649163008 CET	38874	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:46.654156923 CET	3778	38874	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:46.654244900 CET	38874	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:46.655596018 CET	38874	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:46.660465002 CET	3778	38874	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:46.660536051 CET	38874	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:46.665446043 CET	3778	38874	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:47.549432993 CET	3778	38874	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:47.549664974 CET	38874	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:47.549664974 CET	38874	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:47.550338030 CET	38876	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:47.556149006 CET	3778	38876	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:47.556214094 CET	38876	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:47.557255983 CET	38876	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:47.562125921 CET	3778	38876	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:47.562172890 CET	38876	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:47.567032099 CET	3778	38876	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:48.508240938 CET	3778	38876	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:48.508603096 CET	38876	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:48.508677006 CET	38876	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:48.509495020 CET	38878	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:48.514357090 CET	3778	38878	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:48.514440060 CET	38878	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:48.515736103 CET	38878	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:48.520601034 CET	3778	38878	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:48.520720005 CET	38878	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:48.525578022 CET	3778	38878	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:49.414119005 CET	3778	38878	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:49.414454937 CET	38878	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:49.414515018 CET	38878	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:49.415524960 CET	38880	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:49.420448065 CET	3778	38880	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:49.420548916 CET	38880	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:49.421881914 CET	38880	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:49.426783085 CET	3778	38880	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:49.426888943 CET	38880	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:49.431777000 CET	3778	38880	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:49.790440083 CET	38726	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:49.795463085 CET	3778	38726	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:50.108474970 CET	3778	38726	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:50.108720064 CET	38726	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:50.314137936 CET	3778	38880	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:50.314452887 CET	38880	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:50.314452887 CET	38880	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:50.315233946 CET	38882	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:50.320092916 CET	3778	38882	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:50.320183992 CET	38882	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:50.321729898 CET	38882	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:50.326594114 CET	3778	38882	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:50.326670885 CET	38882	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:50.331540108 CET	3778	38882	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:51.214232922 CET	3778	38882	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:51.214550972 CET	38882	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:51.214639902 CET	38882	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:51.215696096 CET	38884	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:51.220789909 CET	3778	38884	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:51.220882893 CET	38884	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:51.222337961 CET	38884	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:51.227293015 CET	3778	38884	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:51.227370977 CET	38884	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:51.232306004 CET	3778	38884	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:52.142333984 CET	3778	38884	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:52.142661095 CET	38884	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:52.142661095 CET	38884	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:52.143562078 CET	38886	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:52.148405075 CET	3778	38886	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:52.148488045 CET	38886	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:52.149805069 CET	38886	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:52.154634953 CET	3778	38886	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:52.154746056 CET	38886	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:52.159706116 CET	3778	38886	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:53.054986954 CET	3778	38886	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:53.055382967 CET	38886	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.055383921 CET	38886	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.056349993 CET	38888	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.061588049 CET	3778	38888	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:53.061685085 CET	38888	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.063105106 CET	38888	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.068339109 CET	3778	38888	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:53.068411112 CET	38888	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.073312044 CET	3778	38888	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:53.954514980 CET	3778	38888	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:53.954756975 CET	38888	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.954842091 CET	38888	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.955698967 CET	38890	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.960586071 CET	3778	38890	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:53.960668087 CET	38890	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.962032080 CET	38890	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.966924906 CET	3778	38890	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:53.966996908 CET	38890	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:53.971918106 CET	3778	38890	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:54.872626066 CET	3778	38890	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:54.872956038 CET	38890	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:54.873023987 CET	38890	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:54.874144077 CET	38892	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:54.879101992 CET	3778	38892	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:54.879188061 CET	38892	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:54.880656958 CET	38892	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:54.885507107 CET	3778	38892	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:54.885579109 CET	38892	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:54.890404940 CET	3778	38892	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:55.803947926 CET	3778	38892	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:55.804241896 CET	38892	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:55.804330111 CET	38892	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:55.805296898 CET	38894	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:55.810138941 CET	3778	38894	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:55.810220957 CET	38894	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:55.811727047 CET	38894	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:55.816540003 CET	3778	38894	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:55.816611052 CET	38894	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:55.821481943 CET	3778	38894	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:56.716715097 CET	3778	38894	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:56.716991901 CET	38894	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:56.716991901 CET	38894	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:56.718204975 CET	38896	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:56.723102093 CET	3778	38896	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:56.723172903 CET	38896	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:56.724630117 CET	38896	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:56.729412079 CET	3778	38896	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:56.729470968 CET	38896	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:56.734271049 CET	3778	38896	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:57.641513109 CET	3778	38896	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:57.641717911 CET	38896	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:57.641803026 CET	38896	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:57.642613888 CET	38898	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:57.647490978 CET	3778	38898	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:57.647581100 CET	38898	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:57.648961067 CET	38898	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:57.653819084 CET	3778	38898	212.81.47.243	192.168.2.23
Jan 11, 2025 10:31:57.653896093 CET	38898	3778	192.168.2.23	212.81.47.243
Jan 11, 2025 10:31:57.660171986 CET	3778	38898	212.81.47.243	192.168.2.23

System Behavior

Analysis Process: Space.arm7.elf PID: 6236, Parent PID: 6158

General

Start time (UTC):	09:29:49
Start date (UTC):	11/01/2025
Path:	/tmp/Space.arm7.elf
Arguments:	/tmp/Space.arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6238, Parent PID: 6236

General

Start time (UTC):	09:29:49
Start date (UTC):	11/01/2025
Path:	/tmp/Space.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6240, Parent PID: 6238

General

Start time (UTC):	09:29:49
Start date (UTC):	11/01/2025
Path:	/tmp/Space.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6242, Parent PID: 6238

General

Start time (UTC):	09:29:49
Start date (UTC):	11/01/2025
Path:	/tmp/Space.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6246, Parent PID: 6236

General

Start time (UTC):	09:29:56
Start date (UTC):	11/01/2025
Path:	/tmp/Space.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6248, Parent PID: 6236

General

Start time (UTC):	09:29:56
Start date (UTC):	11/01/2025
Path:	/tmp/Space.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Space.arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: Space.arm7.elf PID: 6236, Parent PID: 6158

General

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6238, Parent PID: 6236

General

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6240, Parent PID: 6238

General

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6242, Parent PID: 6238

General

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6246, Parent PID: 6236

General

Chronological Activities

Analysis Process: Space.arm7.elf PID: 6248, Parent PID: 6236

General

Chronological Activities

Linux Analysis Report
Space.arm7.elf