Edit tour

Linux Analysis Report
spc.elf

Overview

General Information

Sample name:	spc.elf
Analysis ID:	1589165
MD5:	c2a7b6b3b54b1ff1fe27e8936d7c8d6b
SHA1:	e3001dda0aeef27bbc301cc9bc48f70d531a26fe
SHA256:	e608ec9c2521ec42ad12c10bd337611a2b826a764bc7ba08aa5ff66210fe6a31
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Moobot

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Yara detected Moobot

Sample deletes itself

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Sample has stripped symbol table

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589165
Start date and time:	2025-01-11 14:36:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	spc.elf
Detection:	MAL
Classification:	mal100.troj.evad.linELF@0/0@196/0

Runtime Messages

Command:	/tmp/spc.elf
PID:	6253
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	done.
Standard Error:

Process Tree

system is lnxubuntu20

spc.elf (PID: 6253, Parent: 6166, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/spc.elf

spc.elf New Fork (PID: 6255, Parent: 6253)

spc.elf New Fork (PID: 6257, Parent: 6255)

spc.elf New Fork (PID: 6259, Parent: 6255)

spc.elf New Fork (PID: 6261, Parent: 6259)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
MooBot		No Attribution	https://blog.netlab.360.com/ddos-botnet-moobot-en/ https://blog.netlab.360.com/moobot-0day-unixcctv-dvr-en/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/ https://media.defense.gov/2024/Feb/27/2003400753/-1/-1/0/CSA-RUSSIAN-ACTORS-USE-ROUTERS-FACILITATE-CYBER_OPERATIONS.PDF https://otx.alienvault.com/pulse/6075b645942d5adf9bb8949b	https://malpedia.caad.fkie.fraunhofer.de/details/elf.moobot

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
spc.elf	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
spc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
spc.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xcf90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcfa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcfb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcfcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcfe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd01c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd06c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd10c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6253.1.00007f335c011000.00007f335c020000.r-x.sdmp	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
6253.1.00007f335c011000.00007f335c020000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6253.1.00007f335c011000.00007f335c020000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xcf90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcfa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcfb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcfcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcfe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd01c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd06c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd10c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: spc.elf PID: 6253	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
Process Memory Space: spc.elf PID: 6253	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: spc.elf PID: 6253	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3d8b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d9f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3db3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dc7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ddb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3def:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e03:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e17:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e2b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e3f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e53:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e67:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e7b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e8f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ea3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3eb7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ecb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3edf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ef3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3f07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3f1b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 1 entries

Suricata Signatures

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T14:37:20.901502+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49674	154.213.187.118	1314	TCP
2025-01-11T14:37:21.795256+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49676	154.213.187.118	1314	TCP
2025-01-11T14:37:22.589722+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49678	154.213.187.118	1314	TCP
2025-01-11T14:37:23.232470+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49680	154.213.187.118	1314	TCP
2025-01-11T14:37:23.871417+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49682	154.213.187.118	1314	TCP
2025-01-11T14:37:24.501352+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49684	154.213.187.118	1314	TCP
2025-01-11T14:37:25.155080+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49686	154.213.187.118	1314	TCP
2025-01-11T14:37:25.767415+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49688	154.213.187.118	1314	TCP
2025-01-11T14:37:26.418053+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49690	154.213.187.118	1314	TCP
2025-01-11T14:37:27.519417+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49692	154.213.187.118	1314	TCP
2025-01-11T14:37:27.934182+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49694	154.213.187.118	1314	TCP
2025-01-11T14:37:28.989781+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49696	154.213.187.118	1314	TCP
2025-01-11T14:37:29.622326+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49698	154.213.187.118	1314	TCP
2025-01-11T14:37:30.260806+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49700	154.213.187.118	1314	TCP
2025-01-11T14:37:31.208975+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49702	154.213.187.118	1314	TCP
2025-01-11T14:37:31.667669+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49704	154.213.187.118	1314	TCP
2025-01-11T14:37:32.295131+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49706	154.213.187.118	1314	TCP
2025-01-11T14:37:33.239965+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49708	154.213.187.118	1314	TCP
2025-01-11T14:37:33.733088+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49710	154.213.187.118	1314	TCP
2025-01-11T14:37:34.365878+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49712	154.213.187.118	1314	TCP
2025-01-11T14:37:35.307609+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49714	154.213.187.118	1314	TCP
2025-01-11T14:37:35.763338+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49716	154.213.187.118	1314	TCP
2025-01-11T14:37:36.372256+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49718	154.213.187.118	1314	TCP
2025-01-11T14:37:37.091400+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49720	154.213.187.118	1314	TCP
2025-01-11T14:37:37.651290+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49722	154.213.187.118	1314	TCP
2025-01-11T14:37:38.278138+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49724	154.213.187.118	1314	TCP
2025-01-11T14:37:38.884873+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49726	154.213.187.118	1314	TCP
2025-01-11T14:37:39.523995+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49728	154.213.187.118	1314	TCP
2025-01-11T14:37:40.131909+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49730	154.213.187.118	1314	TCP
2025-01-11T14:37:40.748293+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49732	154.213.187.118	1314	TCP
2025-01-11T14:37:41.396307+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49734	154.213.187.118	1314	TCP
2025-01-11T14:37:42.052494+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49736	154.213.187.118	1314	TCP
2025-01-11T14:37:42.690266+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49738	154.213.187.118	1314	TCP
2025-01-11T14:37:43.898923+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49740	154.213.187.118	1314	TCP
2025-01-11T14:37:44.544728+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49742	154.213.187.118	1314	TCP
2025-01-11T14:37:45.160717+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49744	154.213.187.118	1314	TCP
2025-01-11T14:37:45.793363+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49746	154.213.187.118	1314	TCP
2025-01-11T14:37:46.417908+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49748	154.213.187.118	1314	TCP
2025-01-11T14:37:47.137808+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49750	154.213.187.118	1314	TCP
2025-01-11T14:37:47.762536+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49752	154.213.187.118	1314	TCP
2025-01-11T14:37:48.379203+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49754	154.213.187.118	1314	TCP
2025-01-11T14:37:48.988392+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49756	154.213.187.118	1314	TCP
2025-01-11T14:37:49.621144+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49758	154.213.187.118	1314	TCP
2025-01-11T14:37:50.256530+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49760	154.213.187.118	1314	TCP
2025-01-11T14:37:50.893260+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49762	154.213.187.118	1314	TCP
2025-01-11T14:37:51.537437+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49764	154.213.187.118	1314	TCP
2025-01-11T14:37:52.169494+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49766	154.213.187.118	1314	TCP
2025-01-11T14:37:52.786776+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49768	154.213.187.118	1314	TCP
2025-01-11T14:37:53.414280+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49770	154.213.187.118	1314	TCP
2025-01-11T14:37:54.031425+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49772	154.213.187.118	1314	TCP
2025-01-11T14:37:54.668046+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49774	154.213.187.118	1314	TCP
2025-01-11T14:37:55.284370+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49776	154.213.187.118	1314	TCP
2025-01-11T14:37:55.900760+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49778	154.213.187.118	1314	TCP
2025-01-11T14:37:56.511555+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49780	154.213.187.118	1314	TCP
2025-01-11T14:37:57.193235+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49782	154.213.187.118	1314	TCP
2025-01-11T14:37:57.828771+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49784	154.213.187.118	1314	TCP
2025-01-11T14:37:58.464669+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49786	154.213.187.118	1314	TCP
2025-01-11T14:37:59.097315+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49788	154.213.187.118	1314	TCP
2025-01-11T14:37:59.703399+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49790	154.213.187.118	1314	TCP
2025-01-11T14:38:00.320677+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49792	154.213.187.118	1314	TCP
2025-01-11T14:38:00.955707+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49794	154.213.187.118	1314	TCP
2025-01-11T14:38:01.591015+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49796	154.213.187.118	1314	TCP
2025-01-11T14:38:02.218221+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49798	154.213.187.118	1314	TCP
2025-01-11T14:38:02.846061+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49800	154.213.187.118	1314	TCP
2025-01-11T14:38:03.475429+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49802	154.213.187.118	1314	TCP
2025-01-11T14:38:04.130864+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49804	154.213.187.118	1314	TCP
2025-01-11T14:38:04.755856+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49806	154.213.187.118	1314	TCP
2025-01-11T14:38:05.369362+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49808	154.213.187.118	1314	TCP
2025-01-11T14:38:05.977794+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49810	154.213.187.118	1314	TCP
2025-01-11T14:38:06.593807+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49812	154.213.187.118	1314	TCP
2025-01-11T14:38:07.199601+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49814	154.213.187.118	1314	TCP
2025-01-11T14:38:07.824000+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49816	154.213.187.118	1314	TCP
2025-01-11T14:38:08.455009+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49818	154.213.187.118	1314	TCP
2025-01-11T14:38:09.091092+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49820	154.213.187.118	1314	TCP
2025-01-11T14:38:09.698297+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49822	154.213.187.118	1314	TCP
2025-01-11T14:38:10.325821+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49824	154.213.187.118	1314	TCP
2025-01-11T14:38:10.969539+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49826	154.213.187.118	1314	TCP
2025-01-11T14:38:11.585674+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49828	154.213.187.118	1314	TCP
2025-01-11T14:38:12.227589+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49830	154.213.187.118	1314	TCP
2025-01-11T14:38:12.843593+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49832	154.213.187.118	1314	TCP
2025-01-11T14:38:13.476094+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49834	154.213.187.118	1314	TCP
2025-01-11T14:38:14.096311+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49836	154.213.187.118	1314	TCP
2025-01-11T14:38:14.741204+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49838	154.213.187.118	1314	TCP
2025-01-11T14:38:15.357967+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49840	154.213.187.118	1314	TCP
2025-01-11T14:38:15.974291+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49842	154.213.187.118	1314	TCP
2025-01-11T14:38:16.601540+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49844	154.213.187.118	1314	TCP
2025-01-11T14:38:17.244945+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49846	154.213.187.118	1314	TCP
2025-01-11T14:38:17.861595+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49848	154.213.187.118	1314	TCP
2025-01-11T14:38:18.504843+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49850	154.213.187.118	1314	TCP
2025-01-11T14:38:19.135089+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49852	154.213.187.118	1314	TCP
2025-01-11T14:38:19.762068+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49854	154.213.187.118	1314	TCP
2025-01-11T14:38:20.378647+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49856	154.213.187.118	1314	TCP
2025-01-11T14:38:20.991368+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49858	154.213.187.118	1314	TCP
2025-01-11T14:38:21.629476+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49860	154.213.187.118	1314	TCP
2025-01-11T14:38:22.247293+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49862	154.213.187.118	1314	TCP
2025-01-11T14:38:22.888317+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49864	154.213.187.118	1314	TCP
2025-01-11T14:38:23.530571+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49866	154.213.187.118	1314	TCP
2025-01-11T14:38:24.140673+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49868	154.213.187.118	1314	TCP
2025-01-11T14:38:24.777762+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49870	154.213.187.118	1314	TCP
2025-01-11T14:38:25.398946+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49872	154.213.187.118	1314	TCP
2025-01-11T14:38:26.009687+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49874	154.213.187.118	1314	TCP
2025-01-11T14:38:26.645464+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49876	154.213.187.118	1314	TCP
2025-01-11T14:38:27.280298+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49878	154.213.187.118	1314	TCP
2025-01-11T14:38:27.929988+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49880	154.213.187.118	1314	TCP
2025-01-11T14:38:28.546215+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49882	154.213.187.118	1314	TCP
2025-01-11T14:38:29.186184+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49884	154.213.187.118	1314	TCP
2025-01-11T14:38:29.838778+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49886	154.213.187.118	1314	TCP
2025-01-11T14:38:30.475351+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49888	154.213.187.118	1314	TCP
2025-01-11T14:38:31.113544+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49890	154.213.187.118	1314	TCP
2025-01-11T14:38:31.726564+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49892	154.213.187.118	1314	TCP
2025-01-11T14:38:32.358490+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49894	154.213.187.118	1314	TCP
2025-01-11T14:38:32.994065+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49896	154.213.187.118	1314	TCP
2025-01-11T14:38:33.622826+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49898	154.213.187.118	1314	TCP
2025-01-11T14:38:34.248101+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49900	154.213.187.118	1314	TCP
2025-01-11T14:38:34.856394+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49902	154.213.187.118	1314	TCP
2025-01-11T14:38:35.474818+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49904	154.213.187.118	1314	TCP
2025-01-11T14:38:36.097801+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49906	154.213.187.118	1314	TCP
2025-01-11T14:38:36.722519+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49908	154.213.187.118	1314	TCP
2025-01-11T14:38:37.354046+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49910	154.213.187.118	1314	TCP
2025-01-11T14:38:37.991593+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49912	154.213.187.118	1314	TCP
2025-01-11T14:38:38.622291+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49914	154.213.187.118	1314	TCP
2025-01-11T14:38:39.256182+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49916	154.213.187.118	1314	TCP
2025-01-11T14:38:39.897677+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49918	154.213.187.118	1314	TCP
2025-01-11T14:38:40.510442+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49920	154.213.187.118	1314	TCP
2025-01-11T14:38:41.127620+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49922	154.213.187.118	1314	TCP
2025-01-11T14:38:41.747080+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49924	154.213.187.118	1314	TCP
2025-01-11T14:38:42.383916+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49926	154.213.187.118	1314	TCP
2025-01-11T14:38:43.020087+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49928	154.213.187.118	1314	TCP
2025-01-11T14:38:43.655167+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49930	154.213.187.118	1314	TCP
2025-01-11T14:38:44.266389+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49932	154.213.187.118	1314	TCP
2025-01-11T14:38:44.907569+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49934	154.213.187.118	1314	TCP
2025-01-11T14:38:45.531395+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49936	154.213.187.118	1314	TCP
2025-01-11T14:38:46.174998+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49938	154.213.187.118	1314	TCP
2025-01-11T14:38:46.810661+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49940	154.213.187.118	1314	TCP
2025-01-11T14:38:47.453689+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49942	154.213.187.118	1314	TCP
2025-01-11T14:38:48.098819+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49944	154.213.187.118	1314	TCP
2025-01-11T14:38:48.718983+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49946	154.213.187.118	1314	TCP
2025-01-11T14:38:49.334647+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49948	154.213.187.118	1314	TCP
2025-01-11T14:38:49.952358+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49950	154.213.187.118	1314	TCP
2025-01-11T14:38:50.569624+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49952	154.213.187.118	1314	TCP
2025-01-11T14:38:51.185786+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49954	154.213.187.118	1314	TCP
2025-01-11T14:38:51.811414+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49956	154.213.187.118	1314	TCP
2025-01-11T14:38:52.454397+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49958	154.213.187.118	1314	TCP
2025-01-11T14:38:53.089343+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49960	154.213.187.118	1314	TCP
2025-01-11T14:38:53.745211+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49962	154.213.187.118	1314	TCP
2025-01-11T14:38:54.380318+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49964	154.213.187.118	1314	TCP
2025-01-11T14:38:54.993029+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49966	154.213.187.118	1314	TCP
2025-01-11T14:38:55.629554+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49968	154.213.187.118	1314	TCP
2025-01-11T14:38:56.268320+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49970	154.213.187.118	1314	TCP
2025-01-11T14:38:56.892309+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49972	154.213.187.118	1314	TCP
2025-01-11T14:38:57.501937+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49974	154.213.187.118	1314	TCP
2025-01-11T14:38:58.116561+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49976	154.213.187.118	1314	TCP
2025-01-11T14:38:58.744658+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49978	154.213.187.118	1314	TCP
2025-01-11T14:38:59.379700+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49980	154.213.187.118	1314	TCP
2025-01-11T14:38:59.997464+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49982	154.213.187.118	1314	TCP
2025-01-11T14:39:00.603434+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49984	154.213.187.118	1314	TCP
2025-01-11T14:39:01.218434+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49986	154.213.187.118	1314	TCP
2025-01-11T14:39:01.852203+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49988	154.213.187.118	1314	TCP
2025-01-11T14:39:02.496732+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49990	154.213.187.118	1314	TCP
2025-01-11T14:39:03.132328+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49992	154.213.187.118	1314	TCP
2025-01-11T14:39:03.748588+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49994	154.213.187.118	1314	TCP
2025-01-11T14:39:04.372809+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49996	154.213.187.118	1314	TCP
2025-01-11T14:39:05.025160+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	49998	154.213.187.118	1314	TCP
2025-01-11T14:39:05.643065+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50000	154.213.187.118	1314	TCP
2025-01-11T14:39:06.268499+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50002	154.213.187.118	1314	TCP
2025-01-11T14:39:06.907861+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50004	154.213.187.118	1314	TCP
2025-01-11T14:39:07.525534+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50006	154.213.187.118	1314	TCP
2025-01-11T14:39:08.160974+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50008	154.213.187.118	1314	TCP
2025-01-11T14:39:08.778760+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50010	154.213.187.118	1314	TCP
2025-01-11T14:39:09.396118+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50012	154.213.187.118	1314	TCP
2025-01-11T14:39:10.012373+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50014	154.213.187.118	1314	TCP
2025-01-11T14:39:10.620667+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50016	154.213.187.118	1314	TCP
2025-01-11T14:39:11.247639+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50018	154.213.187.118	1314	TCP
2025-01-11T14:39:11.879035+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50020	154.213.187.118	1314	TCP
2025-01-11T14:39:12.504662+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50022	154.213.187.118	1314	TCP
2025-01-11T14:39:13.121022+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50024	154.213.187.118	1314	TCP
2025-01-11T14:39:13.730001+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50026	154.213.187.118	1314	TCP
2025-01-11T14:39:14.344549+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50028	154.213.187.118	1314	TCP
2025-01-11T14:39:14.986187+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50030	154.213.187.118	1314	TCP
2025-01-11T14:39:15.599538+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50032	154.213.187.118	1314	TCP
2025-01-11T14:39:16.227710+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50034	154.213.187.118	1314	TCP
2025-01-11T14:39:16.845515+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50036	154.213.187.118	1314	TCP
2025-01-11T14:39:17.480919+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50038	154.213.187.118	1314	TCP
2025-01-11T14:39:18.097512+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50040	154.213.187.118	1314	TCP
2025-01-11T14:39:18.712923+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50042	154.213.187.118	1314	TCP
2025-01-11T14:39:19.329466+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50044	154.213.187.118	1314	TCP
2025-01-11T14:39:19.964594+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50046	154.213.187.118	1314	TCP
2025-01-11T14:39:20.572813+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50048	154.213.187.118	1314	TCP
2025-01-11T14:39:21.186660+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50050	154.213.187.118	1314	TCP
2025-01-11T14:39:21.794500+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50052	154.213.187.118	1314	TCP
2025-01-11T14:39:22.430289+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50054	154.213.187.118	1314	TCP
2025-01-11T14:39:23.076638+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50056	154.213.187.118	1314	TCP
2025-01-11T14:39:23.711210+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50058	154.213.187.118	1314	TCP
2025-01-11T14:39:24.347398+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50060	154.213.187.118	1314	TCP
2025-01-11T14:39:24.969691+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50062	154.213.187.118	1314	TCP
2025-01-11T14:39:25.596967+0100	2030491	1	Malware Command and Control Activity Detected	192.168.2.23	50064	154.213.187.118	1314	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: spc.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: spc.elf	Virustotal: Detection: 59%			Perma Link
Source: spc.elf	ReversingLabs: Detection: 60%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49690 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49674 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49686 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49716 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49732 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49728 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49714 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49712 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49678 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49688 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49720 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49726 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49676 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49794 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49810 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49784 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49704 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49694 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49878 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49700 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49788 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49692 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49806 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49826 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49866 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49684 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49738 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49916 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49730 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49736 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49698 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49770 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49680 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49814 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49710 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49906 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49706 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49754 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49908 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49748 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49724 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49792 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49734 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49790 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49708 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49836 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49756 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49752 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49696 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49946 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49864 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49718 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49982 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49884 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49904 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49936 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49702 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49930 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50040 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49798 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49740 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49742 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49746 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49870 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49818 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49872 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49744 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49984 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49780 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49760 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49992 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49796 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50016 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49850 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49838 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49822 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49778 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49844 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49964 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49800 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49858 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49862 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49758 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49762 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49986 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49840 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49768 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49980 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49842 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49808 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50048 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49846 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49942 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49924 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49764 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49856 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49782 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49816 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49682 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49722 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49880 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49824 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49802 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49952 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49812 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49874 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50012 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49852 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49804 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50004 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49772 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50064 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49774 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49898 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49922 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49948 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49956 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49902 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49900 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50060 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49960 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49854 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49940 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49830 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50018 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50026 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49934 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50056 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49938 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49970 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50002 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50028 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50032 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49928 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49978 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49834 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49766 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49962 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50036 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49882 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49820 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49888 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49994 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49920 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50000 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49776 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50054 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49976 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50046 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49868 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49750 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49886 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49990 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49912 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49894 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49944 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49972 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49968 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49914 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49828 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49998 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49832 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50038 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49974 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49848 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50020 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50030 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49950 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49988 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50022 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50034 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50050 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49890 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50058 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50062 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50010 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50042 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49910 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49786 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49896 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49958 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49918 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49860 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49926 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50024 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49876 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50014 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49932 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49954 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49892 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50006 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50044 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49996 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50052 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:50008 -> 154.213.187.118:1314
Source: Network traffic	Suricata IDS: 2030491 - Severity 1 - ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+) : 192.168.2.23:49966 -> 154.213.187.118:1314

Source: global traffic

TCP traffic: 192.168.2.23:49674 -> 154.213.187.118:1314

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42

Source: global traffic

DNS traffic detected: DNS query: webhorizon.icu

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6253.1.00007f335c011000.00007f335c020000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: spc.elf PID: 6253, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: ELF static info symbol of initial sample

.symtab present: no

Source: spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6253.1.00007f335c011000.00007f335c020000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: spc.elf PID: 6253, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.evad.linELF@0/0@196/0

Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/6236/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/6235/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/237/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/912/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/918/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1344/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1465/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1586/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1463/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1900/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/5840/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/491/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1477/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/379/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1476/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/4501/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/2208/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/35/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1809/cmdline	Jump to behavior
Source: /tmp/spc.elf (PID: 6257)	File opened: /proc/1494/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/spc.elf (PID: 6253)

File: /tmp/spc.elf

Jump to behavior

Source: /tmp/spc.elf (PID: 6253)

Queries kernel information via 'uname':

Jump to behavior

Source: spc.elf, 6253.1.000056276a34e000.000056276a3d3000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: spc.elf, 6253.1.000056276a34e000.000056276a3d3000.rw-.sdmp	Binary or memory string: 4j'V!/etc/qemu-binfmt/sparc
Source: spc.elf, 6253.1.00007ffd02d83000.00007ffd02da4000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc
Source: spc.elf, 6253.1.00007ffd02d83000.00007ffd02da4000.rw-.sdmp	Binary or memory string: Dx86_64/usr/bin/qemu-sparc/tmp/spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/spc.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: spc.elf, type: SAMPLE
Source: Yara match	File source: 6253.1.00007f335c011000.00007f335c020000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: spc.elf PID: 6253, type: MEMORYSTR

Yara detected Moobot

Source: Yara match	File source: spc.elf, type: SAMPLE
Source: Yara match	File source: 6253.1.00007f335c011000.00007f335c020000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: spc.elf PID: 6253, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)
Source: Traffic	Suricata IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)

Yara detected Mirai

Source: Yara match	File source: spc.elf, type: SAMPLE
Source: Yara match	File source: 6253.1.00007f335c011000.00007f335c020000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: spc.elf PID: 6253, type: MEMORYSTR

Yara detected Moobot

Source: Yara match	File source: spc.elf, type: SAMPLE
Source: Yara match	File source: 6253.1.00007f335c011000.00007f335c020000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: spc.elf PID: 6253, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
spc.elf	60%	Virustotal		Browse
spc.elf	61%	ReversingLabs	Linux.Trojan.Mirai
spc.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
webhorizon.icu	154.213.187.118	true	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
154.213.187.118	webhorizon.icu	Seychelles	22769	DDOSING-BGP-NETWORKUS	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
154.213.187.118	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86.elf	Get hash	malicious	Mirai, Moobot	Browse
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	arm5.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse
	ARMV6L.elf	Get hash	malicious	Unknown	Browse
	I586.elf	Get hash	malicious	Unknown	Browse
	POWERPC.elf	Get hash	malicious	Unknown	Browse
	SH4.elf	Get hash	malicious	Unknown	Browse
	sss.elf	Get hash	malicious	Gafgyt	Browse
	ARMV5L.elf	Get hash	malicious	Unknown	Browse
	SPARC.elf	Get hash	malicious	Unknown	Browse
	M68K.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	arm5.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse
	ARMV6L.elf	Get hash	malicious	Unknown	Browse
	I586.elf	Get hash	malicious	Unknown	Browse
	POWERPC.elf	Get hash	malicious	Unknown	Browse
	SH4.elf	Get hash	malicious	Unknown	Browse
	sss.elf	Get hash	malicious	Gafgyt	Browse
	ARMV5L.elf	Get hash	malicious	Unknown	Browse
	SPARC.elf	Get hash	malicious	Unknown	Browse
	M68K.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
webhorizon.icu	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	x86.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	38.55.246.3
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	38.55.246.3
	ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	38.55.246.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	91.189.91.42
	ARMV6L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	I586.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	POWERPC.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	SH4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	sst.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	sss.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ARMV5L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	SPARC.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
CANONICAL-ASGB	arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	91.189.91.42
	ARMV6L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	I586.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	POWERPC.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	SH4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	sst.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	sss.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ARMV5L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	SPARC.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
DDOSING-BGP-NETWORKUS	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	x86.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	154.213.187.118
	4.elf	Get hash	malicious	Unknown	Browse	41.93.138.131
	armv5l.elf	Get hash	malicious	Unknown	Browse	41.93.222.47
	gmpsl.elf	Get hash	malicious	Unknown	Browse	154.213.187.125
INIT7CH	arm5.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	109.202.202.202
	ARMV6L.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	I586.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	POWERPC.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	SH4.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	sss.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	ARMV5L.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	SPARC.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	M68K.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.169670313680471
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	spc.elf
File size:	61'072 bytes
MD5:	c2a7b6b3b54b1ff1fe27e8936d7c8d6b
SHA1:	e3001dda0aeef27bbc301cc9bc48f70d531a26fe
SHA256:	e608ec9c2521ec42ad12c10bd337611a2b826a764bc7ba08aa5ff66210fe6a31
SHA512:	7b74b400f9df3b2a6c66eed876a5bf6d41d55be738f91ff3f633434b14f4581c14a70bc05029a68fe6719c05e320a16a8d9f6b2694f4923cfff488046e664245
SSDEEP:	1536:agv01e+xFEXuIjtcurl/C8QZX75ZGtdANcZ:XhwsiXVrNcZ
TLSH:	CB533A31BA761E17C4D1A4B621F74B25B2B547CE22E8C60B3DB10E9EBF61A406513EF4
File Content Preview:	.ELF...........................4.........4. ...(.......................P...P...............T...T...T...l..%L........dt.Q................................@..(....@.3h................#.....`...`.....!.....!l..@.....".........`......$!l..!l..@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	60672
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0xcdd8	0x0	0x6	AX	4
.fini	PROGBITS	0x1ce88	0xce88	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x1cea0	0xcea0	0x1ab0	0x0	0x2	A	8
.ctors	PROGBITS	0x2e954	0xe954	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x2e95c	0xe95c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x2e968	0xe968	0x358	0x0	0x3	WA	8
.bss	NOBITS	0x2ecc0	0xecc0	0x21e0	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0xecc0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0xe950	0xe950	6.2095	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0xe954	0x2e954	0x2e954	0x36c	0x254c	2.6880	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-11T14:37:20.901502+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49674	154.213.187.118	1314	TCP
2025-01-11T14:37:21.795256+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49676	154.213.187.118	1314	TCP
2025-01-11T14:37:22.589722+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49678	154.213.187.118	1314	TCP
2025-01-11T14:37:23.232470+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49680	154.213.187.118	1314	TCP
2025-01-11T14:37:23.871417+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49682	154.213.187.118	1314	TCP
2025-01-11T14:37:24.501352+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49684	154.213.187.118	1314	TCP
2025-01-11T14:37:25.155080+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49686	154.213.187.118	1314	TCP
2025-01-11T14:37:25.767415+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49688	154.213.187.118	1314	TCP
2025-01-11T14:37:26.418053+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49690	154.213.187.118	1314	TCP
2025-01-11T14:37:27.519417+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49692	154.213.187.118	1314	TCP
2025-01-11T14:37:27.934182+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49694	154.213.187.118	1314	TCP
2025-01-11T14:37:28.989781+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49696	154.213.187.118	1314	TCP
2025-01-11T14:37:29.622326+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49698	154.213.187.118	1314	TCP
2025-01-11T14:37:30.260806+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49700	154.213.187.118	1314	TCP
2025-01-11T14:37:31.208975+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49702	154.213.187.118	1314	TCP
2025-01-11T14:37:31.667669+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49704	154.213.187.118	1314	TCP
2025-01-11T14:37:32.295131+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49706	154.213.187.118	1314	TCP
2025-01-11T14:37:33.239965+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49708	154.213.187.118	1314	TCP
2025-01-11T14:37:33.733088+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49710	154.213.187.118	1314	TCP
2025-01-11T14:37:34.365878+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49712	154.213.187.118	1314	TCP
2025-01-11T14:37:35.307609+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49714	154.213.187.118	1314	TCP
2025-01-11T14:37:35.763338+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49716	154.213.187.118	1314	TCP
2025-01-11T14:37:36.372256+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49718	154.213.187.118	1314	TCP
2025-01-11T14:37:37.091400+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49720	154.213.187.118	1314	TCP
2025-01-11T14:37:37.651290+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49722	154.213.187.118	1314	TCP
2025-01-11T14:37:38.278138+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49724	154.213.187.118	1314	TCP
2025-01-11T14:37:38.884873+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49726	154.213.187.118	1314	TCP
2025-01-11T14:37:39.523995+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49728	154.213.187.118	1314	TCP
2025-01-11T14:37:40.131909+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49730	154.213.187.118	1314	TCP
2025-01-11T14:37:40.748293+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49732	154.213.187.118	1314	TCP
2025-01-11T14:37:41.396307+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49734	154.213.187.118	1314	TCP
2025-01-11T14:37:42.052494+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49736	154.213.187.118	1314	TCP
2025-01-11T14:37:42.690266+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49738	154.213.187.118	1314	TCP
2025-01-11T14:37:43.898923+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49740	154.213.187.118	1314	TCP
2025-01-11T14:37:44.544728+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49742	154.213.187.118	1314	TCP
2025-01-11T14:37:45.160717+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49744	154.213.187.118	1314	TCP
2025-01-11T14:37:45.793363+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49746	154.213.187.118	1314	TCP
2025-01-11T14:37:46.417908+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49748	154.213.187.118	1314	TCP
2025-01-11T14:37:47.137808+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49750	154.213.187.118	1314	TCP
2025-01-11T14:37:47.762536+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49752	154.213.187.118	1314	TCP
2025-01-11T14:37:48.379203+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49754	154.213.187.118	1314	TCP
2025-01-11T14:37:48.988392+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49756	154.213.187.118	1314	TCP
2025-01-11T14:37:49.621144+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49758	154.213.187.118	1314	TCP
2025-01-11T14:37:50.256530+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49760	154.213.187.118	1314	TCP
2025-01-11T14:37:50.893260+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49762	154.213.187.118	1314	TCP
2025-01-11T14:37:51.537437+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49764	154.213.187.118	1314	TCP
2025-01-11T14:37:52.169494+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49766	154.213.187.118	1314	TCP
2025-01-11T14:37:52.786776+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49768	154.213.187.118	1314	TCP
2025-01-11T14:37:53.414280+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49770	154.213.187.118	1314	TCP
2025-01-11T14:37:54.031425+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49772	154.213.187.118	1314	TCP
2025-01-11T14:37:54.668046+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49774	154.213.187.118	1314	TCP
2025-01-11T14:37:55.284370+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49776	154.213.187.118	1314	TCP
2025-01-11T14:37:55.900760+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49778	154.213.187.118	1314	TCP
2025-01-11T14:37:56.511555+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49780	154.213.187.118	1314	TCP
2025-01-11T14:37:57.193235+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49782	154.213.187.118	1314	TCP
2025-01-11T14:37:57.828771+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49784	154.213.187.118	1314	TCP
2025-01-11T14:37:58.464669+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49786	154.213.187.118	1314	TCP
2025-01-11T14:37:59.097315+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49788	154.213.187.118	1314	TCP
2025-01-11T14:37:59.703399+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49790	154.213.187.118	1314	TCP
2025-01-11T14:38:00.320677+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49792	154.213.187.118	1314	TCP
2025-01-11T14:38:00.955707+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49794	154.213.187.118	1314	TCP
2025-01-11T14:38:01.591015+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49796	154.213.187.118	1314	TCP
2025-01-11T14:38:02.218221+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49798	154.213.187.118	1314	TCP
2025-01-11T14:38:02.846061+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49800	154.213.187.118	1314	TCP
2025-01-11T14:38:03.475429+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49802	154.213.187.118	1314	TCP
2025-01-11T14:38:04.130864+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49804	154.213.187.118	1314	TCP
2025-01-11T14:38:04.755856+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49806	154.213.187.118	1314	TCP
2025-01-11T14:38:05.369362+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49808	154.213.187.118	1314	TCP
2025-01-11T14:38:05.977794+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49810	154.213.187.118	1314	TCP
2025-01-11T14:38:06.593807+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49812	154.213.187.118	1314	TCP
2025-01-11T14:38:07.199601+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49814	154.213.187.118	1314	TCP
2025-01-11T14:38:07.824000+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49816	154.213.187.118	1314	TCP
2025-01-11T14:38:08.455009+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49818	154.213.187.118	1314	TCP
2025-01-11T14:38:09.091092+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49820	154.213.187.118	1314	TCP
2025-01-11T14:38:09.698297+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49822	154.213.187.118	1314	TCP
2025-01-11T14:38:10.325821+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49824	154.213.187.118	1314	TCP
2025-01-11T14:38:10.969539+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49826	154.213.187.118	1314	TCP
2025-01-11T14:38:11.585674+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49828	154.213.187.118	1314	TCP
2025-01-11T14:38:12.227589+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49830	154.213.187.118	1314	TCP
2025-01-11T14:38:12.843593+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49832	154.213.187.118	1314	TCP
2025-01-11T14:38:13.476094+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49834	154.213.187.118	1314	TCP
2025-01-11T14:38:14.096311+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49836	154.213.187.118	1314	TCP
2025-01-11T14:38:14.741204+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49838	154.213.187.118	1314	TCP
2025-01-11T14:38:15.357967+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49840	154.213.187.118	1314	TCP
2025-01-11T14:38:15.974291+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49842	154.213.187.118	1314	TCP
2025-01-11T14:38:16.601540+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49844	154.213.187.118	1314	TCP
2025-01-11T14:38:17.244945+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49846	154.213.187.118	1314	TCP
2025-01-11T14:38:17.861595+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49848	154.213.187.118	1314	TCP
2025-01-11T14:38:18.504843+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49850	154.213.187.118	1314	TCP
2025-01-11T14:38:19.135089+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49852	154.213.187.118	1314	TCP
2025-01-11T14:38:19.762068+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49854	154.213.187.118	1314	TCP
2025-01-11T14:38:20.378647+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49856	154.213.187.118	1314	TCP
2025-01-11T14:38:20.991368+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49858	154.213.187.118	1314	TCP
2025-01-11T14:38:21.629476+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49860	154.213.187.118	1314	TCP
2025-01-11T14:38:22.247293+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49862	154.213.187.118	1314	TCP
2025-01-11T14:38:22.888317+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49864	154.213.187.118	1314	TCP
2025-01-11T14:38:23.530571+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49866	154.213.187.118	1314	TCP
2025-01-11T14:38:24.140673+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49868	154.213.187.118	1314	TCP
2025-01-11T14:38:24.777762+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49870	154.213.187.118	1314	TCP
2025-01-11T14:38:25.398946+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49872	154.213.187.118	1314	TCP
2025-01-11T14:38:26.009687+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49874	154.213.187.118	1314	TCP
2025-01-11T14:38:26.645464+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49876	154.213.187.118	1314	TCP
2025-01-11T14:38:27.280298+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49878	154.213.187.118	1314	TCP
2025-01-11T14:38:27.929988+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49880	154.213.187.118	1314	TCP
2025-01-11T14:38:28.546215+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49882	154.213.187.118	1314	TCP
2025-01-11T14:38:29.186184+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49884	154.213.187.118	1314	TCP
2025-01-11T14:38:29.838778+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49886	154.213.187.118	1314	TCP
2025-01-11T14:38:30.475351+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49888	154.213.187.118	1314	TCP
2025-01-11T14:38:31.113544+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49890	154.213.187.118	1314	TCP
2025-01-11T14:38:31.726564+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49892	154.213.187.118	1314	TCP
2025-01-11T14:38:32.358490+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49894	154.213.187.118	1314	TCP
2025-01-11T14:38:32.994065+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49896	154.213.187.118	1314	TCP
2025-01-11T14:38:33.622826+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49898	154.213.187.118	1314	TCP
2025-01-11T14:38:34.248101+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49900	154.213.187.118	1314	TCP
2025-01-11T14:38:34.856394+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49902	154.213.187.118	1314	TCP
2025-01-11T14:38:35.474818+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49904	154.213.187.118	1314	TCP
2025-01-11T14:38:36.097801+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49906	154.213.187.118	1314	TCP
2025-01-11T14:38:36.722519+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49908	154.213.187.118	1314	TCP
2025-01-11T14:38:37.354046+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49910	154.213.187.118	1314	TCP
2025-01-11T14:38:37.991593+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49912	154.213.187.118	1314	TCP
2025-01-11T14:38:38.622291+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49914	154.213.187.118	1314	TCP
2025-01-11T14:38:39.256182+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49916	154.213.187.118	1314	TCP
2025-01-11T14:38:39.897677+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49918	154.213.187.118	1314	TCP
2025-01-11T14:38:40.510442+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49920	154.213.187.118	1314	TCP
2025-01-11T14:38:41.127620+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49922	154.213.187.118	1314	TCP
2025-01-11T14:38:41.747080+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49924	154.213.187.118	1314	TCP
2025-01-11T14:38:42.383916+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49926	154.213.187.118	1314	TCP
2025-01-11T14:38:43.020087+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49928	154.213.187.118	1314	TCP
2025-01-11T14:38:43.655167+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49930	154.213.187.118	1314	TCP
2025-01-11T14:38:44.266389+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49932	154.213.187.118	1314	TCP
2025-01-11T14:38:44.907569+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49934	154.213.187.118	1314	TCP
2025-01-11T14:38:45.531395+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49936	154.213.187.118	1314	TCP
2025-01-11T14:38:46.174998+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49938	154.213.187.118	1314	TCP
2025-01-11T14:38:46.810661+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49940	154.213.187.118	1314	TCP
2025-01-11T14:38:47.453689+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49942	154.213.187.118	1314	TCP
2025-01-11T14:38:48.098819+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49944	154.213.187.118	1314	TCP
2025-01-11T14:38:48.718983+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49946	154.213.187.118	1314	TCP
2025-01-11T14:38:49.334647+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49948	154.213.187.118	1314	TCP
2025-01-11T14:38:49.952358+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49950	154.213.187.118	1314	TCP
2025-01-11T14:38:50.569624+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49952	154.213.187.118	1314	TCP
2025-01-11T14:38:51.185786+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49954	154.213.187.118	1314	TCP
2025-01-11T14:38:51.811414+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49956	154.213.187.118	1314	TCP
2025-01-11T14:38:52.454397+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49958	154.213.187.118	1314	TCP
2025-01-11T14:38:53.089343+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49960	154.213.187.118	1314	TCP
2025-01-11T14:38:53.745211+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49962	154.213.187.118	1314	TCP
2025-01-11T14:38:54.380318+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49964	154.213.187.118	1314	TCP
2025-01-11T14:38:54.993029+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49966	154.213.187.118	1314	TCP
2025-01-11T14:38:55.629554+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49968	154.213.187.118	1314	TCP
2025-01-11T14:38:56.268320+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49970	154.213.187.118	1314	TCP
2025-01-11T14:38:56.892309+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49972	154.213.187.118	1314	TCP
2025-01-11T14:38:57.501937+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49974	154.213.187.118	1314	TCP
2025-01-11T14:38:58.116561+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49976	154.213.187.118	1314	TCP
2025-01-11T14:38:58.744658+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49978	154.213.187.118	1314	TCP
2025-01-11T14:38:59.379700+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49980	154.213.187.118	1314	TCP
2025-01-11T14:38:59.997464+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49982	154.213.187.118	1314	TCP
2025-01-11T14:39:00.603434+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49984	154.213.187.118	1314	TCP
2025-01-11T14:39:01.218434+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49986	154.213.187.118	1314	TCP
2025-01-11T14:39:01.852203+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49988	154.213.187.118	1314	TCP
2025-01-11T14:39:02.496732+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49990	154.213.187.118	1314	TCP
2025-01-11T14:39:03.132328+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49992	154.213.187.118	1314	TCP
2025-01-11T14:39:03.748588+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49994	154.213.187.118	1314	TCP
2025-01-11T14:39:04.372809+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49996	154.213.187.118	1314	TCP
2025-01-11T14:39:05.025160+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	49998	154.213.187.118	1314	TCP
2025-01-11T14:39:05.643065+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50000	154.213.187.118	1314	TCP
2025-01-11T14:39:06.268499+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50002	154.213.187.118	1314	TCP
2025-01-11T14:39:06.907861+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50004	154.213.187.118	1314	TCP
2025-01-11T14:39:07.525534+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50006	154.213.187.118	1314	TCP
2025-01-11T14:39:08.160974+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50008	154.213.187.118	1314	TCP
2025-01-11T14:39:08.778760+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50010	154.213.187.118	1314	TCP
2025-01-11T14:39:09.396118+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50012	154.213.187.118	1314	TCP
2025-01-11T14:39:10.012373+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50014	154.213.187.118	1314	TCP
2025-01-11T14:39:10.620667+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50016	154.213.187.118	1314	TCP
2025-01-11T14:39:11.247639+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50018	154.213.187.118	1314	TCP
2025-01-11T14:39:11.879035+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50020	154.213.187.118	1314	TCP
2025-01-11T14:39:12.504662+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50022	154.213.187.118	1314	TCP
2025-01-11T14:39:13.121022+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50024	154.213.187.118	1314	TCP
2025-01-11T14:39:13.730001+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50026	154.213.187.118	1314	TCP
2025-01-11T14:39:14.344549+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50028	154.213.187.118	1314	TCP
2025-01-11T14:39:14.986187+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50030	154.213.187.118	1314	TCP
2025-01-11T14:39:15.599538+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50032	154.213.187.118	1314	TCP
2025-01-11T14:39:16.227710+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50034	154.213.187.118	1314	TCP
2025-01-11T14:39:16.845515+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50036	154.213.187.118	1314	TCP
2025-01-11T14:39:17.480919+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50038	154.213.187.118	1314	TCP
2025-01-11T14:39:18.097512+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50040	154.213.187.118	1314	TCP
2025-01-11T14:39:18.712923+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50042	154.213.187.118	1314	TCP
2025-01-11T14:39:19.329466+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50044	154.213.187.118	1314	TCP
2025-01-11T14:39:19.964594+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50046	154.213.187.118	1314	TCP
2025-01-11T14:39:20.572813+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50048	154.213.187.118	1314	TCP
2025-01-11T14:39:21.186660+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50050	154.213.187.118	1314	TCP
2025-01-11T14:39:21.794500+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50052	154.213.187.118	1314	TCP
2025-01-11T14:39:22.430289+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50054	154.213.187.118	1314	TCP
2025-01-11T14:39:23.076638+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50056	154.213.187.118	1314	TCP
2025-01-11T14:39:23.711210+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50058	154.213.187.118	1314	TCP
2025-01-11T14:39:24.347398+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50060	154.213.187.118	1314	TCP
2025-01-11T14:39:24.969691+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50062	154.213.187.118	1314	TCP
2025-01-11T14:39:25.596967+0100	2030491	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M2 (Group String Len 2+)	1	192.168.2.23	50064	154.213.187.118	1314	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 14:37:19.047055006 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 14:37:20.880140066 CET	49674	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:20.885010004 CET	1314	49674	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:20.885088921 CET	49674	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:20.901501894 CET	49674	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:20.906372070 CET	1314	49674	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:21.488236904 CET	1314	49674	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:21.488559008 CET	49674	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:21.493541002 CET	1314	49674	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:21.768179893 CET	49676	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:21.773133039 CET	1314	49676	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:21.773190022 CET	49676	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:21.795255899 CET	49676	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:21.800348997 CET	1314	49676	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:22.557368040 CET	1314	49676	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:22.557461023 CET	49676	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:22.562401056 CET	1314	49676	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:22.575690031 CET	49678	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:22.582403898 CET	1314	49678	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:22.582457066 CET	49678	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:22.589721918 CET	49678	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:22.596231937 CET	1314	49678	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:23.214612961 CET	1314	49678	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:23.214704037 CET	49678	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:23.219501019 CET	1314	49678	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:23.225253105 CET	49680	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:23.230074883 CET	1314	49680	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:23.230130911 CET	49680	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:23.232470036 CET	49680	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:23.237287045 CET	1314	49680	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:23.853730917 CET	1314	49680	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:23.853816986 CET	49680	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:23.858763933 CET	1314	49680	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:23.864254951 CET	49682	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:23.869193077 CET	1314	49682	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:23.869247913 CET	49682	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:23.871417046 CET	49682	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:23.876211882 CET	1314	49682	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:24.422207117 CET	42836	443	192.168.2.23	91.189.91.43
Jan 11, 2025 14:37:24.473139048 CET	1314	49682	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:24.473303080 CET	49682	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:24.478228092 CET	1314	49682	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:24.488980055 CET	49684	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:24.493848085 CET	1314	49684	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:24.493958950 CET	49684	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:24.501352072 CET	49684	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:24.506174088 CET	1314	49684	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:25.136960030 CET	1314	49684	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:25.137188911 CET	49684	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:25.142107964 CET	1314	49684	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:25.147819996 CET	49686	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:25.152681112 CET	1314	49686	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:25.152759075 CET	49686	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:25.155080080 CET	49686	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:25.159929991 CET	1314	49686	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:25.190057039 CET	42516	80	192.168.2.23	109.202.202.202
Jan 11, 2025 14:37:25.748575926 CET	1314	49686	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:25.748831034 CET	49686	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:25.753747940 CET	1314	49686	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:25.760247946 CET	49688	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:25.765160084 CET	1314	49688	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:25.765249014 CET	49688	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:25.767415047 CET	49688	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:25.772294998 CET	1314	49688	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:26.383285999 CET	1314	49688	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:26.383457899 CET	49688	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:26.388406992 CET	1314	49688	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:26.407501936 CET	49690	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:26.412369967 CET	1314	49690	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:26.412460089 CET	49690	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:26.418052912 CET	49690	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:26.422971964 CET	1314	49690	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:27.014967918 CET	1314	49690	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:27.019360065 CET	49690	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:27.024338961 CET	1314	49690	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:27.283410072 CET	49692	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:27.288630009 CET	1314	49692	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:27.291169882 CET	49692	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:27.519417048 CET	49692	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:27.524441957 CET	1314	49692	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:27.917470932 CET	1314	49692	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:27.917556047 CET	49692	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:27.922386885 CET	1314	49692	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:27.927484035 CET	49694	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:27.932426929 CET	1314	49694	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:27.932487011 CET	49694	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:27.934181929 CET	49694	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:27.939002037 CET	1314	49694	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:28.639446020 CET	1314	49694	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:28.643420935 CET	49694	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:28.648288965 CET	1314	49694	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:28.823344946 CET	49696	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:28.828352928 CET	1314	49696	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:28.828411102 CET	49696	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:28.989780903 CET	49696	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:28.994694948 CET	1314	49696	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:29.516006947 CET	1314	49696	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:29.516092062 CET	49696	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:29.521111965 CET	1314	49696	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:29.615626097 CET	49698	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:29.620548964 CET	1314	49698	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:29.620599031 CET	49698	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:29.622325897 CET	49698	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:29.627197981 CET	1314	49698	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:30.243000984 CET	1314	49698	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:30.243154049 CET	49698	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:30.248116970 CET	1314	49698	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:30.253602982 CET	49700	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:30.258456945 CET	1314	49700	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:30.258495092 CET	49700	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:30.260806084 CET	49700	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:30.265666962 CET	1314	49700	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:30.861350060 CET	1314	49700	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:30.864940882 CET	49700	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:30.869853973 CET	1314	49700	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:31.043484926 CET	49702	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:31.048504114 CET	1314	49702	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:31.048563004 CET	49702	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:31.208975077 CET	49702	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:31.213905096 CET	1314	49702	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:31.652556896 CET	1314	49702	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:31.652657032 CET	49702	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:31.657599926 CET	1314	49702	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:31.661530972 CET	49704	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:31.666477919 CET	1314	49704	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:31.666543007 CET	49704	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:31.667669058 CET	49704	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:31.672557116 CET	1314	49704	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:32.271388054 CET	1314	49704	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:32.271629095 CET	49704	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:32.276521921 CET	1314	49704	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:32.285758972 CET	49706	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:32.290878057 CET	1314	49706	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:32.290946960 CET	49706	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:32.295130968 CET	49706	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:32.299964905 CET	1314	49706	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:32.893816948 CET	1314	49706	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:32.895003080 CET	49706	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:32.899889946 CET	1314	49706	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:33.075970888 CET	49708	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:33.080988884 CET	1314	49708	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:33.082052946 CET	49708	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:33.239964962 CET	49708	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:33.245140076 CET	1314	49708	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:33.718409061 CET	1314	49708	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:33.718517065 CET	49708	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:33.723450899 CET	1314	49708	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:33.727047920 CET	49710	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:33.731863976 CET	1314	49710	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:33.731910944 CET	49710	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:33.733088017 CET	49710	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:33.737899065 CET	1314	49710	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:34.346728086 CET	1314	49710	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:34.346923113 CET	49710	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:34.351854086 CET	1314	49710	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:34.358647108 CET	49712	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:34.363590002 CET	1314	49712	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:34.363701105 CET	49712	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:34.365878105 CET	49712	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:34.370780945 CET	1314	49712	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:34.958673954 CET	1314	49712	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:34.961002111 CET	49712	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:34.965926886 CET	1314	49712	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:35.140918970 CET	49714	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:35.146011114 CET	1314	49714	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:35.148967981 CET	49714	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:35.307609081 CET	49714	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:35.312711954 CET	1314	49714	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:35.748281956 CET	1314	49714	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:35.748393059 CET	49714	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:35.753294945 CET	1314	49714	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:35.757148981 CET	49716	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:35.762119055 CET	1314	49716	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:35.762159109 CET	49716	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:35.763338089 CET	49716	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:35.768181086 CET	1314	49716	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:36.357445002 CET	1314	49716	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:36.357697010 CET	49716	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:36.362659931 CET	1314	49716	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:36.366482973 CET	49718	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:36.371387005 CET	1314	49718	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:36.371458054 CET	49718	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:36.372256041 CET	49718	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:36.377038956 CET	1314	49718	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:36.974354982 CET	1314	49718	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:36.975276947 CET	49718	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:36.980201006 CET	1314	49718	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:37.007136106 CET	49720	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:37.012062073 CET	1314	49720	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:37.012151957 CET	49720	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:37.091399908 CET	49720	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:37.096543074 CET	1314	49720	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:37.637969017 CET	1314	49720	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:37.638151884 CET	49720	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:37.643084049 CET	1314	49720	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:37.645757914 CET	49722	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:37.650600910 CET	1314	49722	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:37.650705099 CET	49722	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:37.651289940 CET	49722	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:37.656188011 CET	1314	49722	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:38.264178991 CET	1314	49722	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:38.264425039 CET	49722	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:38.269356966 CET	1314	49722	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:38.272519112 CET	49724	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:38.277426004 CET	1314	49724	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:38.277471066 CET	49724	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:38.278137922 CET	49724	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:38.282975912 CET	1314	49724	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:38.870614052 CET	1314	49724	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:38.870805979 CET	49724	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:38.875679970 CET	1314	49724	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:38.879188061 CET	49726	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:38.884114027 CET	1314	49726	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:38.884171009 CET	49726	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:38.884872913 CET	49726	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:38.889736891 CET	1314	49726	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:39.509747982 CET	1314	49726	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:39.509896994 CET	49726	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:39.514736891 CET	1314	49726	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:39.518496037 CET	49728	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:39.523303032 CET	1314	49728	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:39.523391008 CET	49728	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:39.523994923 CET	49728	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:39.528784990 CET	1314	49728	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:40.117849112 CET	1314	49728	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:40.118222952 CET	49728	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:40.123188019 CET	1314	49728	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:40.126349926 CET	49730	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:40.131223917 CET	1314	49730	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:40.131290913 CET	49730	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:40.131908894 CET	49730	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:40.136727095 CET	1314	49730	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:40.733730078 CET	1314	49730	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:40.734139919 CET	49730	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:40.739381075 CET	1314	49730	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:40.742597103 CET	49732	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:40.747559071 CET	1314	49732	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:40.747615099 CET	49732	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:40.748292923 CET	49732	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:40.753160954 CET	1314	49732	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:40.807908058 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 14:37:41.381850958 CET	1314	49732	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:41.382004976 CET	49732	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:41.386941910 CET	1314	49732	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:41.390749931 CET	49734	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:41.395704031 CET	1314	49734	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:41.395750999 CET	49734	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:41.396306992 CET	49734	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:41.401148081 CET	1314	49734	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:42.037410975 CET	1314	49734	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:42.037512064 CET	49734	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:42.042500019 CET	1314	49734	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:42.046511889 CET	49736	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:42.051736116 CET	1314	49736	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:42.051803112 CET	49736	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:42.052494049 CET	49736	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:42.057368040 CET	1314	49736	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:42.673106909 CET	1314	49736	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:42.673432112 CET	49736	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:42.678360939 CET	1314	49736	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:42.684005022 CET	49738	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:42.688940048 CET	1314	49738	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:42.688999891 CET	49738	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:42.690265894 CET	49738	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:42.695161104 CET	1314	49738	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:43.884593964 CET	1314	49738	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:43.884645939 CET	1314	49738	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:43.884680033 CET	1314	49738	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:43.884886026 CET	49738	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:43.884886980 CET	49738	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:43.884886980 CET	49738	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:43.889930964 CET	1314	49738	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:43.893296003 CET	49740	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:43.898171902 CET	1314	49740	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:43.898236036 CET	49740	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:43.898922920 CET	49740	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:43.903779984 CET	1314	49740	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:44.530606031 CET	1314	49740	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:44.530792952 CET	49740	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:44.535692930 CET	1314	49740	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:44.539134026 CET	49742	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:44.544015884 CET	1314	49742	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:44.544075966 CET	49742	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:44.544728041 CET	49742	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:44.549557924 CET	1314	49742	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:45.146588087 CET	1314	49742	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:45.146754026 CET	49742	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:45.151782990 CET	1314	49742	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:45.155092001 CET	49744	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:45.160012007 CET	1314	49744	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:45.160057068 CET	49744	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:45.160717010 CET	49744	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:45.165601015 CET	1314	49744	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:45.779443026 CET	1314	49744	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:45.779573917 CET	49744	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:45.784528017 CET	1314	49744	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:45.787914038 CET	49746	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:45.792766094 CET	1314	49746	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:45.792809010 CET	49746	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:45.793363094 CET	49746	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:45.798252106 CET	1314	49746	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:46.403502941 CET	1314	49746	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:46.403794050 CET	49746	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:46.408605099 CET	1314	49746	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:46.412355900 CET	49748	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:46.417301893 CET	1314	49748	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:46.417359114 CET	49748	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:46.417907953 CET	49748	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:46.422766924 CET	1314	49748	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:47.123686075 CET	1314	49748	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:47.123956919 CET	49748	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:47.128793955 CET	1314	49748	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:47.132349968 CET	49750	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:47.137181044 CET	1314	49750	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:47.137234926 CET	49750	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:47.137808084 CET	49750	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:47.142596006 CET	1314	49750	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:47.747320890 CET	1314	49750	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:47.747605085 CET	49750	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:47.752461910 CET	1314	49750	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:47.756710052 CET	49752	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:47.761605978 CET	1314	49752	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:47.761646986 CET	49752	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:47.762536049 CET	49752	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:47.767370939 CET	1314	49752	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:48.365209103 CET	1314	49752	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:48.365494013 CET	49752	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:48.370305061 CET	1314	49752	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:48.373629093 CET	49754	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:48.378470898 CET	1314	49754	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:48.378516912 CET	49754	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:48.379203081 CET	49754	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:48.384087086 CET	1314	49754	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:48.974307060 CET	1314	49754	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:48.974555969 CET	49754	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:48.979392052 CET	1314	49754	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:48.982839108 CET	49756	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:48.987730980 CET	1314	49756	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:48.987790108 CET	49756	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:48.988392115 CET	49756	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:48.993241072 CET	1314	49756	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:49.606709003 CET	1314	49756	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:49.607032061 CET	49756	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:49.611993074 CET	1314	49756	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:49.615452051 CET	49758	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:49.620363951 CET	1314	49758	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:49.620419979 CET	49758	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:49.621144056 CET	49758	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:49.625978947 CET	1314	49758	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:50.242561102 CET	1314	49758	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:50.242849112 CET	49758	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:50.247833967 CET	1314	49758	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:50.250860929 CET	49760	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:50.255841970 CET	1314	49760	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:50.255902052 CET	49760	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:50.256530046 CET	49760	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:50.261364937 CET	1314	49760	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:50.878020048 CET	1314	49760	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:50.878225088 CET	49760	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:50.883215904 CET	1314	49760	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:50.887202024 CET	49762	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:50.892564058 CET	1314	49762	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:50.892626047 CET	49762	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:50.893260002 CET	49762	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:50.898166895 CET	1314	49762	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:51.042496920 CET	42836	443	192.168.2.23	91.189.91.43
Jan 11, 2025 14:37:51.520313025 CET	1314	49762	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:51.520616055 CET	49762	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:51.525684118 CET	1314	49762	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:51.531910896 CET	49764	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:51.536766052 CET	1314	49764	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:51.536822081 CET	49764	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:51.537436962 CET	49764	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:51.542335987 CET	1314	49764	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:52.154882908 CET	1314	49764	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:52.155081987 CET	49764	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:52.160290003 CET	1314	49764	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:52.163505077 CET	49766	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:52.168797970 CET	1314	49766	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:52.168840885 CET	49766	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:52.169493914 CET	49766	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:52.174674034 CET	1314	49766	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:52.772253036 CET	1314	49766	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:52.772473097 CET	49766	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:52.777401924 CET	1314	49766	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:52.780498028 CET	49768	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:52.786037922 CET	1314	49768	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:52.786092043 CET	49768	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:52.786776066 CET	49768	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:52.792268991 CET	1314	49768	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:53.398624897 CET	1314	49768	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:53.398860931 CET	49768	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:53.403743029 CET	1314	49768	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:53.408457994 CET	49770	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:53.413356066 CET	1314	49770	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:53.413410902 CET	49770	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:53.414279938 CET	49770	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:53.419266939 CET	1314	49770	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:54.013535976 CET	1314	49770	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:54.013770103 CET	49770	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:54.018747091 CET	1314	49770	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:54.025067091 CET	49772	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:54.029988050 CET	1314	49772	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:54.030087948 CET	49772	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:54.031424999 CET	49772	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:54.036314011 CET	1314	49772	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:54.653495073 CET	1314	49772	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:54.653816938 CET	49772	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:54.658754110 CET	1314	49772	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:54.662220955 CET	49774	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:54.667097092 CET	1314	49774	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:54.667193890 CET	49774	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:54.668045998 CET	49774	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:54.672899008 CET	1314	49774	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:55.137986898 CET	42516	80	192.168.2.23	109.202.202.202
Jan 11, 2025 14:37:55.269700050 CET	1314	49774	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:55.269917965 CET	49774	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:55.274779081 CET	1314	49774	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:55.278575897 CET	49776	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:55.283472061 CET	1314	49776	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:55.283521891 CET	49776	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:55.284369946 CET	49776	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:55.289285898 CET	1314	49776	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:55.886044025 CET	1314	49776	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:55.886256933 CET	49776	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:55.891185999 CET	1314	49776	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:55.894928932 CET	49778	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:55.899856091 CET	1314	49778	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:55.899914026 CET	49778	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:55.900759935 CET	49778	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:55.905606985 CET	1314	49778	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:56.496803999 CET	1314	49778	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:56.497148991 CET	49778	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:56.502099037 CET	1314	49778	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:56.505732059 CET	49780	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:56.510601997 CET	1314	49780	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:56.510644913 CET	49780	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:56.511554956 CET	49780	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:56.516381025 CET	1314	49780	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:57.178713083 CET	1314	49780	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:57.179023981 CET	49780	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:57.183998108 CET	1314	49780	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:57.187504053 CET	49782	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:57.192363977 CET	1314	49782	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:57.192414045 CET	49782	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:57.193234921 CET	49782	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:57.198105097 CET	1314	49782	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:57.814336061 CET	1314	49782	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:57.814575911 CET	49782	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:57.819542885 CET	1314	49782	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:57.822849989 CET	49784	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:57.827847958 CET	1314	49784	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:57.827903032 CET	49784	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:57.828771114 CET	49784	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:57.833650112 CET	1314	49784	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:58.449790001 CET	1314	49784	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:58.450153112 CET	49784	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:58.455183029 CET	1314	49784	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:58.458863974 CET	49786	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:58.463752985 CET	1314	49786	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:58.463812113 CET	49786	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:58.464668989 CET	49786	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:58.469569921 CET	1314	49786	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:59.083295107 CET	1314	49786	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:59.083689928 CET	49786	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:59.088723898 CET	1314	49786	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:59.091901064 CET	49788	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:59.096755981 CET	1314	49788	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:59.096801043 CET	49788	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:59.097315073 CET	49788	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:59.102108955 CET	1314	49788	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:59.689461946 CET	1314	49788	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:59.689613104 CET	49788	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:59.694551945 CET	1314	49788	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:59.697643995 CET	49790	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:59.702507019 CET	1314	49790	154.213.187.118	192.168.2.23
Jan 11, 2025 14:37:59.702553034 CET	49790	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:59.703398943 CET	49790	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:37:59.708214998 CET	1314	49790	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:00.304817915 CET	1314	49790	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:00.305000067 CET	49790	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:00.310151100 CET	1314	49790	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:00.314368010 CET	49792	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:00.319715977 CET	1314	49792	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:00.319775105 CET	49792	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:00.320677042 CET	49792	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:00.325905085 CET	1314	49792	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:00.940967083 CET	1314	49792	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:00.941155910 CET	49792	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:00.941155910 CET	49792	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:00.946121931 CET	1314	49792	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:00.949757099 CET	49794	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:00.954657078 CET	1314	49794	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:00.954796076 CET	49794	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:00.955707073 CET	49794	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:00.960525036 CET	1314	49794	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:01.576369047 CET	1314	49794	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:01.576538086 CET	49794	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:01.581485033 CET	1314	49794	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:01.585241079 CET	49796	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:01.590125084 CET	1314	49796	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:01.590168953 CET	49796	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:01.591015100 CET	49796	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:01.595895052 CET	1314	49796	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:02.204346895 CET	1314	49796	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:02.204566956 CET	49796	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:02.209440947 CET	1314	49796	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:02.212876081 CET	49798	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:02.217626095 CET	1314	49798	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:02.217664957 CET	49798	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:02.218220949 CET	49798	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:02.222985983 CET	1314	49798	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:02.832084894 CET	1314	49798	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:02.832220078 CET	49798	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:02.837107897 CET	1314	49798	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:02.840348005 CET	49800	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:02.845211029 CET	1314	49800	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:02.845266104 CET	49800	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:02.846060991 CET	49800	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:02.850918055 CET	1314	49800	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:03.460710049 CET	1314	49800	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:03.460916042 CET	49800	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:03.465858936 CET	1314	49800	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:03.469530106 CET	49802	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:03.474445105 CET	1314	49802	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:03.474498034 CET	49802	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:03.475429058 CET	49802	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:03.480364084 CET	1314	49802	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:04.116374969 CET	1314	49802	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:04.116503000 CET	49802	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:04.121340990 CET	1314	49802	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:04.125143051 CET	49804	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:04.130012989 CET	1314	49804	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:04.130053997 CET	49804	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:04.130863905 CET	49804	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:04.135631084 CET	1314	49804	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:04.741336107 CET	1314	49804	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:04.741491079 CET	49804	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:04.746474981 CET	1314	49804	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:04.750066996 CET	49806	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:04.755055904 CET	1314	49806	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:04.755115032 CET	49806	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:04.755856037 CET	49806	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:04.760708094 CET	1314	49806	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:05.355580091 CET	1314	49806	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:05.355802059 CET	49806	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:05.360778093 CET	1314	49806	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:05.363823891 CET	49808	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:05.368818045 CET	1314	49808	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:05.368875027 CET	49808	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:05.369362116 CET	49808	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:05.374205112 CET	1314	49808	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:05.963918924 CET	1314	49808	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:05.964051962 CET	49808	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:05.968964100 CET	1314	49808	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:05.972430944 CET	49810	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:05.977267027 CET	1314	49810	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:05.977319956 CET	49810	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:05.977793932 CET	49810	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:05.982584000 CET	1314	49810	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:06.580236912 CET	1314	49810	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:06.580358028 CET	49810	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:06.585165977 CET	1314	49810	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:06.588278055 CET	49812	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:06.593202114 CET	1314	49812	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:06.593255997 CET	49812	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:06.593806982 CET	49812	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:06.598560095 CET	1314	49812	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:07.185748100 CET	1314	49812	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:07.185936928 CET	49812	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:07.190857887 CET	1314	49812	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:07.194042921 CET	49814	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:07.199011087 CET	1314	49814	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:07.199068069 CET	49814	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:07.199600935 CET	49814	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:07.204451084 CET	1314	49814	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:07.810282946 CET	1314	49814	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:07.810530901 CET	49814	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:07.815490007 CET	1314	49814	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:07.818551064 CET	49816	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:07.823457003 CET	1314	49816	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:07.823509932 CET	49816	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:07.823999882 CET	49816	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:07.828849077 CET	1314	49816	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:08.441515923 CET	1314	49816	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:08.441695929 CET	49816	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:08.446688890 CET	1314	49816	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:08.449589014 CET	49818	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:08.454478025 CET	1314	49818	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:08.454535961 CET	49818	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:08.455008984 CET	49818	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:08.459844112 CET	1314	49818	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:09.077855110 CET	1314	49818	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:09.078145027 CET	49818	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:09.083061934 CET	1314	49818	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:09.085737944 CET	49820	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:09.090573072 CET	1314	49820	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:09.090620041 CET	49820	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:09.091092110 CET	49820	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:09.095906973 CET	1314	49820	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:09.685548067 CET	1314	49820	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:09.685703039 CET	49820	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:09.690555096 CET	1314	49820	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:09.692955017 CET	49822	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:09.697805882 CET	1314	49822	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:09.697853088 CET	49822	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:09.698297024 CET	49822	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:09.703138113 CET	1314	49822	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:10.311723948 CET	1314	49822	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:10.311877012 CET	49822	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:10.316906929 CET	1314	49822	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:10.320228100 CET	49824	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:10.325196028 CET	1314	49824	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:10.325254917 CET	49824	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:10.325820923 CET	49824	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:10.330714941 CET	1314	49824	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:10.955899000 CET	1314	49824	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:10.956276894 CET	49824	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:10.961119890 CET	1314	49824	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:10.964056969 CET	49826	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:10.968905926 CET	1314	49826	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:10.968983889 CET	49826	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:10.969538927 CET	49826	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:10.974296093 CET	1314	49826	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:11.571542025 CET	1314	49826	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:11.571834087 CET	49826	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:11.576921940 CET	1314	49826	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:11.580190897 CET	49828	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:11.585066080 CET	1314	49828	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:11.585133076 CET	49828	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:11.585674047 CET	49828	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:11.590485096 CET	1314	49828	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:12.213882923 CET	1314	49828	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:12.214054108 CET	49828	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:12.219033957 CET	1314	49828	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:12.222122908 CET	49830	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:12.226982117 CET	1314	49830	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:12.227044106 CET	49830	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:12.227588892 CET	49830	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:12.232486963 CET	1314	49830	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:12.829777956 CET	1314	49830	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:12.830045938 CET	49830	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:12.835002899 CET	1314	49830	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:12.838071108 CET	49832	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:12.842993975 CET	1314	49832	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:12.843055964 CET	49832	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:12.843592882 CET	49832	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:12.848458052 CET	1314	49832	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:13.462191105 CET	1314	49832	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:13.462384939 CET	49832	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:13.467242956 CET	1314	49832	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:13.470664978 CET	49834	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:13.475526094 CET	1314	49834	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:13.475600958 CET	49834	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:13.476094007 CET	49834	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:13.480916023 CET	1314	49834	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:14.082000971 CET	1314	49834	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:14.082130909 CET	49834	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:14.087021112 CET	1314	49834	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:14.090919018 CET	49836	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:14.095721006 CET	1314	49836	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:14.095762968 CET	49836	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:14.096311092 CET	49836	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:14.101090908 CET	1314	49836	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:14.726634026 CET	1314	49836	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:14.726803064 CET	49836	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:14.731803894 CET	1314	49836	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:14.735410929 CET	49838	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:14.740312099 CET	1314	49838	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:14.740364075 CET	49838	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:14.741204023 CET	49838	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:14.746001005 CET	1314	49838	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:15.344191074 CET	1314	49838	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:15.344343901 CET	49838	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:15.349339008 CET	1314	49838	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:15.352469921 CET	49840	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:15.357389927 CET	1314	49840	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:15.357467890 CET	49840	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:15.357966900 CET	49840	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:15.362812042 CET	1314	49840	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:15.961129904 CET	1314	49840	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:15.961400032 CET	49840	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:15.966321945 CET	1314	49840	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:15.968774080 CET	49842	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:15.973711014 CET	1314	49842	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:15.973777056 CET	49842	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:15.974291086 CET	49842	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:15.979146004 CET	1314	49842	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:16.587449074 CET	1314	49842	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:16.587723017 CET	49842	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:16.592679024 CET	1314	49842	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:16.596046925 CET	49844	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:16.601020098 CET	1314	49844	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:16.601083040 CET	49844	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:16.601540089 CET	49844	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:16.606415033 CET	1314	49844	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:17.231147051 CET	1314	49844	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:17.231332064 CET	49844	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:17.236316919 CET	1314	49844	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:17.239525080 CET	49846	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:17.244389057 CET	1314	49846	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:17.244448900 CET	49846	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:17.244945049 CET	49846	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:17.249880075 CET	1314	49846	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:17.847670078 CET	1314	49846	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:17.847971916 CET	49846	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:17.852914095 CET	1314	49846	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:17.856096029 CET	49848	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:17.860997915 CET	1314	49848	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:17.861054897 CET	49848	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:17.861594915 CET	49848	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:17.866456032 CET	1314	49848	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:18.491283894 CET	1314	49848	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:18.491430998 CET	49848	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:18.496364117 CET	1314	49848	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:18.499419928 CET	49850	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:18.504271030 CET	1314	49850	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:18.504344940 CET	49850	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:18.504842997 CET	49850	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:18.509738922 CET	1314	49850	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:19.120763063 CET	1314	49850	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:19.120908976 CET	49850	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:19.125829935 CET	1314	49850	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:19.129066944 CET	49852	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:19.134485006 CET	1314	49852	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:19.134547949 CET	49852	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:19.135088921 CET	49852	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:19.140568972 CET	1314	49852	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:19.746337891 CET	1314	49852	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:19.746551991 CET	49852	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:19.751537085 CET	1314	49852	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:19.755341053 CET	49854	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:19.761009932 CET	1314	49854	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:19.761068106 CET	49854	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:19.762068033 CET	49854	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:19.766973019 CET	1314	49854	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:20.363467932 CET	1314	49854	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:20.363771915 CET	49854	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:20.369016886 CET	1314	49854	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:20.372515917 CET	49856	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:20.377676964 CET	1314	49856	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:20.377737045 CET	49856	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:20.378647089 CET	49856	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:20.384319067 CET	1314	49856	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:20.976408005 CET	1314	49856	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:20.976640940 CET	49856	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:20.981607914 CET	1314	49856	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:20.985357046 CET	49858	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:20.990295887 CET	1314	49858	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:20.990360975 CET	49858	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:20.991368055 CET	49858	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:20.996289968 CET	1314	49858	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:21.611306906 CET	1314	49858	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:21.611509085 CET	49858	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:21.617990971 CET	1314	49858	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:21.621870995 CET	49860	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:21.628525019 CET	1314	49860	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:21.628583908 CET	49860	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:21.629476070 CET	49860	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:21.636161089 CET	1314	49860	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:21.758208990 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 14:38:22.233172894 CET	1314	49860	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:22.233392000 CET	49860	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:22.238339901 CET	1314	49860	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:22.241410971 CET	49862	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:22.246342897 CET	1314	49862	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:22.246403933 CET	49862	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:22.247292995 CET	49862	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:22.252156019 CET	1314	49862	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:22.873357058 CET	1314	49862	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:22.873682976 CET	49862	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:22.878684044 CET	1314	49862	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:22.882448912 CET	49864	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:22.887377977 CET	1314	49864	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:22.887438059 CET	49864	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:22.888317108 CET	49864	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:22.893142939 CET	1314	49864	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:23.515925884 CET	1314	49864	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:23.516164064 CET	49864	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:23.521081924 CET	1314	49864	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:23.524730921 CET	49866	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:23.529577971 CET	1314	49866	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:23.529632092 CET	49866	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:23.530570984 CET	49866	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:23.536510944 CET	1314	49866	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:24.125648975 CET	1314	49866	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:24.125813007 CET	49866	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:24.130789995 CET	1314	49866	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:24.134671926 CET	49868	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:24.139648914 CET	1314	49868	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:24.139703035 CET	49868	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:24.140672922 CET	49868	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:24.145539045 CET	1314	49868	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:24.762656927 CET	1314	49868	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:24.762972116 CET	49868	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:24.767924070 CET	1314	49868	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:24.771651030 CET	49870	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:24.776729107 CET	1314	49870	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:24.776824951 CET	49870	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:24.777761936 CET	49870	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:24.783056974 CET	1314	49870	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:25.383945942 CET	1314	49870	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:25.384099007 CET	49870	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:25.389388084 CET	1314	49870	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:25.393296957 CET	49872	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:25.398334026 CET	1314	49872	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:25.398391962 CET	49872	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:25.398946047 CET	49872	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:25.404306889 CET	1314	49872	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:25.994950056 CET	1314	49872	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:25.995213032 CET	49872	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:26.000644922 CET	1314	49872	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:26.003607988 CET	49874	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:26.008563995 CET	1314	49874	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:26.008676052 CET	49874	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:26.009686947 CET	49874	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:26.014525890 CET	1314	49874	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:26.630500078 CET	1314	49874	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:26.630768061 CET	49874	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:26.635754108 CET	1314	49874	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:26.639564991 CET	49876	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:26.644531012 CET	1314	49876	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:26.644589901 CET	49876	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:26.645463943 CET	49876	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:26.650269985 CET	1314	49876	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:27.266202927 CET	1314	49876	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:27.266328096 CET	49876	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:27.271284103 CET	1314	49876	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:27.274398088 CET	49878	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:27.279350042 CET	1314	49878	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:27.279400110 CET	49878	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:27.280297995 CET	49878	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:27.285141945 CET	1314	49878	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:27.915946007 CET	1314	49878	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:27.916088104 CET	49878	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:27.921061039 CET	1314	49878	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:27.924109936 CET	49880	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:27.929022074 CET	1314	49880	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:27.929083109 CET	49880	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:27.929987907 CET	49880	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:27.934797049 CET	1314	49880	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:28.531255960 CET	1314	49880	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:28.531413078 CET	49880	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:28.536463022 CET	1314	49880	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:28.540301085 CET	49882	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:28.545160055 CET	1314	49882	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:28.545212984 CET	49882	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:28.546215057 CET	49882	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:28.551084042 CET	1314	49882	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:29.171341896 CET	1314	49882	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:29.171475887 CET	49882	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:29.176453114 CET	1314	49882	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:29.180337906 CET	49884	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:29.185194016 CET	1314	49884	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:29.185250998 CET	49884	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:29.186183929 CET	49884	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:29.191198111 CET	1314	49884	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:29.823740005 CET	1314	49884	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:29.823991060 CET	49884	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:29.828903913 CET	1314	49884	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:29.832935095 CET	49886	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:29.837790012 CET	1314	49886	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:29.837850094 CET	49886	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:29.838778019 CET	49886	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:29.843602896 CET	1314	49886	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:30.458905935 CET	1314	49886	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:30.459177971 CET	49886	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:30.464680910 CET	1314	49886	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:30.469468117 CET	49888	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:30.474399090 CET	1314	49888	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:30.474509001 CET	49888	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:30.475351095 CET	49888	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:30.480206966 CET	1314	49888	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:31.100018024 CET	1314	49888	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:31.100203991 CET	49888	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:31.105119944 CET	1314	49888	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:31.108129025 CET	49890	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:31.113013983 CET	1314	49890	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:31.113061905 CET	49890	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:31.113543987 CET	49890	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:31.118333101 CET	1314	49890	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:31.712986946 CET	1314	49890	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:31.713186979 CET	49890	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:31.718079090 CET	1314	49890	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:31.721143961 CET	49892	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:31.725975037 CET	1314	49892	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:31.726023912 CET	49892	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:31.726563931 CET	49892	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:31.731396914 CET	1314	49892	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:32.345285892 CET	1314	49892	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:32.345417023 CET	49892	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:32.350337982 CET	1314	49892	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:32.353009939 CET	49894	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:32.357896090 CET	1314	49894	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:32.357944965 CET	49894	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:32.358489990 CET	49894	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:32.363301992 CET	1314	49894	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:32.979298115 CET	1314	49894	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:32.979542017 CET	49894	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:32.984544039 CET	1314	49894	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:32.988260031 CET	49896	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:32.993117094 CET	1314	49896	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:32.993164062 CET	49896	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:32.994065046 CET	49896	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:32.998878002 CET	1314	49896	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:33.608489037 CET	1314	49896	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:33.608663082 CET	49896	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:33.613683939 CET	1314	49896	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:33.617213011 CET	49898	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:33.622117996 CET	1314	49898	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:33.622176886 CET	49898	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:33.622826099 CET	49898	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:33.627666950 CET	1314	49898	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:34.233480930 CET	1314	49898	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:34.233611107 CET	49898	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:34.238569021 CET	1314	49898	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:34.242203951 CET	49900	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:34.247117996 CET	1314	49900	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:34.247174025 CET	49900	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:34.248100996 CET	49900	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:34.252969027 CET	1314	49900	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:34.842644930 CET	1314	49900	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:34.842770100 CET	49900	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:34.847771883 CET	1314	49900	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:34.850960016 CET	49902	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:34.855859995 CET	1314	49902	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:34.855901003 CET	49902	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:34.856394053 CET	49902	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:34.861233950 CET	1314	49902	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:35.460293055 CET	1314	49902	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:35.460454941 CET	49902	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:35.465380907 CET	1314	49902	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:35.468816996 CET	49904	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:35.473813057 CET	1314	49904	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:35.473882914 CET	49904	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:35.474817991 CET	49904	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:35.479639053 CET	1314	49904	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:36.082705975 CET	1314	49904	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:36.082834959 CET	49904	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:36.087697983 CET	1314	49904	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:36.091938019 CET	49906	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:36.096844912 CET	1314	49906	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:36.096904039 CET	49906	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:36.097800970 CET	49906	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:36.102649927 CET	1314	49906	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:36.707869053 CET	1314	49906	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:36.708276987 CET	49906	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:36.713210106 CET	1314	49906	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:36.716590881 CET	49908	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:36.721549988 CET	1314	49908	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:36.721606970 CET	49908	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:36.722518921 CET	49908	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:36.727358103 CET	1314	49908	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:37.337161064 CET	1314	49908	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:37.337342978 CET	49908	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:37.345531940 CET	1314	49908	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:37.348201036 CET	49910	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:37.353121042 CET	1314	49910	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:37.353179932 CET	49910	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:37.354046106 CET	49910	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:37.358936071 CET	1314	49910	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:37.977125883 CET	1314	49910	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:37.977310896 CET	49910	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:37.982201099 CET	1314	49910	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:37.985668898 CET	49912	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:37.990648985 CET	1314	49912	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:37.990709066 CET	49912	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:37.991592884 CET	49912	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:37.996428013 CET	1314	49912	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:38.607395887 CET	1314	49912	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:38.607541084 CET	49912	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:38.612425089 CET	1314	49912	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:38.616430044 CET	49914	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:38.621273041 CET	1314	49914	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:38.621339083 CET	49914	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:38.622291088 CET	49914	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:38.627079964 CET	1314	49914	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:39.242492914 CET	1314	49914	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:39.242609978 CET	49914	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:39.247409105 CET	1314	49914	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:39.250767946 CET	49916	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:39.255610943 CET	1314	49916	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:39.255647898 CET	49916	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:39.256181955 CET	49916	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:39.260901928 CET	1314	49916	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:39.882419109 CET	1314	49916	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:39.882561922 CET	49916	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:39.888202906 CET	1314	49916	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:39.891232014 CET	49918	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:39.897144079 CET	1314	49918	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:39.897196054 CET	49918	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:39.897676945 CET	49918	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:39.902401924 CET	1314	49918	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:40.496078968 CET	1314	49918	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:40.496330976 CET	49918	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:40.501523972 CET	1314	49918	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:40.505073071 CET	49920	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:40.509880066 CET	1314	49920	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:40.509927034 CET	49920	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:40.510442019 CET	49920	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:40.515240908 CET	1314	49920	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:41.111608982 CET	1314	49920	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:41.111836910 CET	49920	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:41.116728067 CET	1314	49920	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:41.121995926 CET	49922	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:41.126784086 CET	1314	49922	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:41.126835108 CET	49922	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:41.127619982 CET	49922	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:41.132411957 CET	1314	49922	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:41.732458115 CET	1314	49922	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:41.732789040 CET	49922	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:41.737646103 CET	1314	49922	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:41.741307020 CET	49924	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:41.746139050 CET	1314	49924	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:41.746201038 CET	49924	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:41.747080088 CET	49924	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:41.751817942 CET	1314	49924	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:42.369482994 CET	1314	49924	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:42.369744062 CET	49924	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:42.374620914 CET	1314	49924	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:42.378015041 CET	49926	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:42.382812023 CET	1314	49926	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:42.382855892 CET	49926	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:42.383915901 CET	49926	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:42.388721943 CET	1314	49926	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:43.005232096 CET	1314	49926	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:43.005611897 CET	49926	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:43.010447025 CET	1314	49926	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:43.014219999 CET	49928	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:43.019083977 CET	1314	49928	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:43.019144058 CET	49928	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:43.020087004 CET	49928	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:43.024854898 CET	1314	49928	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:43.640557051 CET	1314	49928	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:43.640741110 CET	49928	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:43.645659924 CET	1314	49928	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:43.649281025 CET	49930	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:43.654196978 CET	1314	49930	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:43.654304981 CET	49930	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:43.655167103 CET	49930	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:43.660020113 CET	1314	49930	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:44.252171040 CET	1314	49930	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:44.252512932 CET	49930	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:44.257442951 CET	1314	49930	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:44.261064053 CET	49932	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:44.265866041 CET	1314	49932	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:44.265906096 CET	49932	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:44.266388893 CET	49932	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:44.271178007 CET	1314	49932	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:44.893999100 CET	1314	49932	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:44.894288063 CET	49932	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:44.899152994 CET	1314	49932	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:44.902226925 CET	49934	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:44.907037020 CET	1314	49934	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:44.907073975 CET	49934	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:44.907568932 CET	49934	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:44.912313938 CET	1314	49934	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:45.517643929 CET	1314	49934	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:45.517920971 CET	49934	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:45.522773027 CET	1314	49934	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:45.525866032 CET	49936	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:45.530731916 CET	1314	49936	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:45.530813932 CET	49936	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:45.531394958 CET	49936	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:45.536139011 CET	1314	49936	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:46.161642075 CET	1314	49936	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:46.161839008 CET	49936	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:46.166716099 CET	1314	49936	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:46.169415951 CET	49938	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:46.174405098 CET	1314	49938	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:46.174460888 CET	49938	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:46.174998045 CET	49938	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:46.179786921 CET	1314	49938	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:46.795528889 CET	1314	49938	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:46.795978069 CET	49938	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:46.800893068 CET	1314	49938	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:46.804884911 CET	49940	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:46.809726000 CET	1314	49940	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:46.809782982 CET	49940	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:46.810661077 CET	49940	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:46.815453053 CET	1314	49940	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:47.439914942 CET	1314	49940	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:47.440079927 CET	49940	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:47.445151091 CET	1314	49940	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:47.448179960 CET	49942	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:47.453109026 CET	1314	49942	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:47.453205109 CET	49942	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:47.453689098 CET	49942	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:47.458578110 CET	1314	49942	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:48.084547997 CET	1314	49942	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:48.084779978 CET	49942	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:48.089778900 CET	1314	49942	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:48.093252897 CET	49944	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:48.098196983 CET	1314	49944	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:48.098254919 CET	49944	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:48.098819017 CET	49944	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:48.103696108 CET	1314	49944	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:48.703576088 CET	1314	49944	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:48.703711033 CET	49944	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:48.708658934 CET	1314	49944	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:48.712833881 CET	49946	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:48.718039989 CET	1314	49946	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:48.718084097 CET	49946	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:48.718982935 CET	49946	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:48.723865986 CET	1314	49946	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:49.320298910 CET	1314	49946	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:49.320486069 CET	49946	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:49.325485945 CET	1314	49946	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:49.329211950 CET	49948	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:49.334152937 CET	1314	49948	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:49.334198952 CET	49948	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:49.334646940 CET	49948	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:49.339385986 CET	1314	49948	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:49.938358068 CET	1314	49948	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:49.938522100 CET	49948	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:49.943475008 CET	1314	49948	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:49.946871996 CET	49950	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:49.951781988 CET	1314	49950	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:49.951842070 CET	49950	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:49.952358007 CET	49950	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:49.957283974 CET	1314	49950	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:50.555469990 CET	1314	49950	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:50.555649042 CET	49950	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:50.560566902 CET	1314	49950	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:50.563646078 CET	49952	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:50.568558931 CET	1314	49952	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:50.568620920 CET	49952	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:50.569623947 CET	49952	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:50.574506998 CET	1314	49952	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:51.171303988 CET	1314	49952	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:51.171500921 CET	49952	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:51.176476002 CET	1314	49952	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:51.179951906 CET	49954	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:51.184850931 CET	1314	49954	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:51.184904099 CET	49954	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:51.185786009 CET	49954	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:51.190748930 CET	1314	49954	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:51.795717955 CET	1314	49954	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:51.795959949 CET	49954	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:51.800877094 CET	1314	49954	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:51.804502964 CET	49956	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:51.810417891 CET	1314	49956	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:51.810530901 CET	49956	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:51.811414003 CET	49956	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:51.816288948 CET	1314	49956	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:52.440459967 CET	1314	49956	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:52.440609932 CET	49956	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:52.445544004 CET	1314	49956	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:52.448801994 CET	49958	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:52.453712940 CET	1314	49958	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:52.453799963 CET	49958	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:52.454396963 CET	49958	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:52.459162951 CET	1314	49958	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:53.075491905 CET	1314	49958	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:53.075666904 CET	49958	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:53.080622911 CET	1314	49958	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:53.083964109 CET	49960	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:53.088793993 CET	1314	49960	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:53.088848114 CET	49960	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:53.089343071 CET	49960	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:53.094120979 CET	1314	49960	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:53.730812073 CET	1314	49960	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:53.730959892 CET	49960	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:53.735794067 CET	1314	49960	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:53.739706039 CET	49962	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:53.744529963 CET	1314	49962	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:53.744580030 CET	49962	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:53.745210886 CET	49962	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:53.750155926 CET	1314	49962	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:54.367005110 CET	1314	49962	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:54.367201090 CET	49962	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:54.372101068 CET	1314	49962	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:54.374831915 CET	49964	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:54.379695892 CET	1314	49964	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:54.379771948 CET	49964	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:54.380317926 CET	49964	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:54.385128021 CET	1314	49964	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:54.979140043 CET	1314	49964	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:54.979289055 CET	49964	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:54.984349012 CET	1314	49964	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:54.987517118 CET	49966	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:54.992418051 CET	1314	49966	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:54.992476940 CET	49966	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:54.993029118 CET	49966	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:54.997883081 CET	1314	49966	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:55.614640951 CET	1314	49966	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:55.614811897 CET	49966	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:55.619734049 CET	1314	49966	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:55.623573065 CET	49968	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:55.628535032 CET	1314	49968	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:55.628616095 CET	49968	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:55.629554033 CET	49968	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:55.634325981 CET	1314	49968	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:56.255033016 CET	1314	49968	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:56.255166054 CET	49968	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:56.259979010 CET	1314	49968	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:56.263012886 CET	49970	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:56.267832041 CET	1314	49970	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:56.267877102 CET	49970	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:56.268320084 CET	49970	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:56.273041964 CET	1314	49970	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:56.878730059 CET	1314	49970	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:56.879040956 CET	49970	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:56.883959055 CET	1314	49970	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:56.886900902 CET	49972	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:56.891782999 CET	1314	49972	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:56.891839027 CET	49972	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:56.892308950 CET	49972	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:56.897170067 CET	1314	49972	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:57.486568928 CET	1314	49972	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:57.486741066 CET	49972	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:57.492749929 CET	1314	49972	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:57.495336056 CET	49974	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:57.501348019 CET	1314	49974	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:57.501502991 CET	49974	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:57.501936913 CET	49974	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:57.506834030 CET	1314	49974	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:58.103209019 CET	1314	49974	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:58.103370905 CET	49974	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:58.108273029 CET	1314	49974	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:58.111157894 CET	49976	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:58.116023064 CET	1314	49976	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:58.116079092 CET	49976	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:58.116560936 CET	49976	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:58.121385098 CET	1314	49976	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:58.729873896 CET	1314	49976	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:58.730218887 CET	49976	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:58.735146046 CET	1314	49976	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:58.738859892 CET	49978	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:58.743716002 CET	1314	49978	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:58.743769884 CET	49978	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:58.744657993 CET	49978	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:58.749480963 CET	1314	49978	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:59.365628004 CET	1314	49978	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:59.365798950 CET	49978	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:59.370654106 CET	1314	49978	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:59.373873949 CET	49980	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:59.378729105 CET	1314	49980	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:59.378779888 CET	49980	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:59.379699945 CET	49980	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:59.384572983 CET	1314	49980	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:59.982151031 CET	1314	49980	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:59.982291937 CET	49980	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:59.987173080 CET	1314	49980	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:59.991633892 CET	49982	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:59.996512890 CET	1314	49982	154.213.187.118	192.168.2.23
Jan 11, 2025 14:38:59.996560097 CET	49982	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:38:59.997463942 CET	49982	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:00.002289057 CET	1314	49982	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:00.588458061 CET	1314	49982	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:00.588664055 CET	49982	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:00.593563080 CET	1314	49982	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:00.597315073 CET	49984	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:00.602256060 CET	1314	49984	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:00.602305889 CET	49984	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:00.603434086 CET	49984	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:00.608275890 CET	1314	49984	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:01.201390028 CET	1314	49984	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:01.201524019 CET	49984	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:01.207503080 CET	1314	49984	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:01.210026979 CET	49986	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:01.217351913 CET	1314	49986	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:01.217421055 CET	49986	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:01.218434095 CET	49986	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:01.223264933 CET	1314	49986	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:01.837594986 CET	1314	49986	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:01.837728977 CET	49986	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:01.842694044 CET	1314	49986	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:01.846287012 CET	49988	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:01.851239920 CET	1314	49988	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:01.851289988 CET	49988	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:01.852202892 CET	49988	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:01.857101917 CET	1314	49988	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:02.481966019 CET	1314	49988	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:02.482105970 CET	49988	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:02.487179041 CET	1314	49988	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:02.490917921 CET	49990	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:02.495800972 CET	1314	49990	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:02.495858908 CET	49990	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:02.496731997 CET	49990	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:02.501595974 CET	1314	49990	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:03.117618084 CET	1314	49990	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:03.117768049 CET	49990	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:03.122755051 CET	1314	49990	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:03.126543045 CET	49992	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:03.131386995 CET	1314	49992	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:03.131443024 CET	49992	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:03.132328033 CET	49992	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:03.137176037 CET	1314	49992	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:03.733870029 CET	1314	49992	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:03.734013081 CET	49992	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:03.739782095 CET	1314	49992	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:03.742763996 CET	49994	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:03.747663021 CET	1314	49994	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:03.747720003 CET	49994	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:03.748588085 CET	49994	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:03.753488064 CET	1314	49994	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:04.359361887 CET	1314	49994	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:04.359505892 CET	49994	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:04.364515066 CET	1314	49994	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:04.367119074 CET	49996	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:04.372085094 CET	1314	49996	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:04.372131109 CET	49996	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:04.372808933 CET	49996	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:04.377640963 CET	1314	49996	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:05.009761095 CET	1314	49996	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:05.009927988 CET	49996	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:05.014805079 CET	1314	49996	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:05.019329071 CET	49998	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:05.024231911 CET	1314	49998	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:05.024291039 CET	49998	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:05.025160074 CET	49998	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:05.029994965 CET	1314	49998	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:05.627460957 CET	1314	49998	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:05.627619028 CET	49998	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:05.633485079 CET	1314	49998	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:05.637224913 CET	50000	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:05.642106056 CET	1314	50000	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:05.642159939 CET	50000	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:05.643064976 CET	50000	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:05.647857904 CET	1314	50000	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:06.253957033 CET	1314	50000	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:06.254105091 CET	50000	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:06.259048939 CET	1314	50000	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:06.262717009 CET	50002	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:06.267545938 CET	1314	50002	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:06.267597914 CET	50002	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:06.268498898 CET	50002	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:06.273279905 CET	1314	50002	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:06.893985033 CET	1314	50002	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:06.894109011 CET	50002	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:06.899022102 CET	1314	50002	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:06.902249098 CET	50004	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:06.907125950 CET	1314	50004	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:06.907179117 CET	50004	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:06.907860994 CET	50004	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:06.912662983 CET	1314	50004	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:07.511311054 CET	1314	50004	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:07.511462927 CET	50004	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:07.516379118 CET	1314	50004	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:07.519697905 CET	50006	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:07.524631977 CET	1314	50006	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:07.524686098 CET	50006	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:07.525533915 CET	50006	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:07.530380964 CET	1314	50006	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:08.146426916 CET	1314	50006	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:08.146831036 CET	50006	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:08.151772022 CET	1314	50006	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:08.155050993 CET	50008	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:08.159965992 CET	1314	50008	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:08.160058022 CET	50008	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:08.160974026 CET	50008	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:08.165832043 CET	1314	50008	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:08.764651060 CET	1314	50008	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:08.764806986 CET	50008	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:08.769763947 CET	1314	50008	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:08.772866011 CET	50010	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:08.777796984 CET	1314	50010	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:08.777874947 CET	50010	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:08.778759956 CET	50010	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:08.783592939 CET	1314	50010	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:09.381508112 CET	1314	50010	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:09.381817102 CET	50010	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:09.386770964 CET	1314	50010	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:09.390089035 CET	50012	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:09.395054102 CET	1314	50012	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:09.395116091 CET	50012	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:09.396117926 CET	50012	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:09.400995016 CET	1314	50012	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:09.998117924 CET	1314	50012	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:09.998270035 CET	50012	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:10.003218889 CET	1314	50012	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:10.006465912 CET	50014	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:10.011431932 CET	1314	50014	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:10.011496067 CET	50014	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:10.012372971 CET	50014	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:10.017211914 CET	1314	50014	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:10.607790947 CET	1314	50014	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:10.607975960 CET	50014	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:10.612816095 CET	1314	50014	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:10.615367889 CET	50016	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:10.620146036 CET	1314	50016	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:10.620199919 CET	50016	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:10.620666981 CET	50016	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:10.625411987 CET	1314	50016	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:11.234131098 CET	1314	50016	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:11.234303951 CET	50016	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:11.239293098 CET	1314	50016	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:11.242194891 CET	50018	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:11.247087002 CET	1314	50018	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:11.247140884 CET	50018	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:11.247638941 CET	50018	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:11.252490997 CET	1314	50018	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:11.865102053 CET	1314	50018	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:11.865240097 CET	50018	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:11.870229006 CET	1314	50018	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:11.873253107 CET	50020	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:11.878268003 CET	1314	50020	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:11.878326893 CET	50020	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:11.879034996 CET	50020	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:11.883912086 CET	1314	50020	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:12.489681005 CET	1314	50020	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:12.489895105 CET	50020	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:12.494949102 CET	1314	50020	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:12.498802900 CET	50022	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:12.503695965 CET	1314	50022	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:12.503751040 CET	50022	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:12.504662037 CET	50022	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:12.509497881 CET	1314	50022	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:13.106704950 CET	1314	50022	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:13.106950998 CET	50022	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:13.111859083 CET	1314	50022	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:13.115252972 CET	50024	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:13.120095015 CET	1314	50024	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:13.120168924 CET	50024	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:13.121021986 CET	50024	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:13.125792027 CET	1314	50024	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:13.715089083 CET	1314	50024	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:13.715286016 CET	50024	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:13.720279932 CET	1314	50024	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:13.724175930 CET	50026	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:13.729038000 CET	1314	50026	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:13.729094982 CET	50026	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:13.730000973 CET	50026	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:13.734786987 CET	1314	50026	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:14.331034899 CET	1314	50026	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:14.331206083 CET	50026	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:14.336091995 CET	1314	50026	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:14.339099884 CET	50028	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:14.343981981 CET	1314	50028	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:14.344033957 CET	50028	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:14.344548941 CET	50028	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:14.349322081 CET	1314	50028	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:14.972532988 CET	1314	50028	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:14.972690105 CET	50028	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:14.977607965 CET	1314	50028	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:14.980727911 CET	50030	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:14.985594988 CET	1314	50030	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:14.985651970 CET	50030	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:14.986186981 CET	50030	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:14.991044998 CET	1314	50030	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:15.585534096 CET	1314	50030	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:15.585794926 CET	50030	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:15.590784073 CET	1314	50030	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:15.593960047 CET	50032	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:15.598900080 CET	1314	50032	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:15.598958969 CET	50032	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:15.599538088 CET	50032	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:15.604445934 CET	1314	50032	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:16.213002920 CET	1314	50032	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:16.213165998 CET	50032	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:16.218144894 CET	1314	50032	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:16.221878052 CET	50034	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:16.226794958 CET	1314	50034	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:16.226845980 CET	50034	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:16.227710009 CET	50034	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:16.232593060 CET	1314	50034	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:16.830195904 CET	1314	50034	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:16.830362082 CET	50034	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:16.835299015 CET	1314	50034	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:16.839664936 CET	50036	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:16.844546080 CET	1314	50036	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:16.844605923 CET	50036	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:16.845515013 CET	50036	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:16.850398064 CET	1314	50036	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:17.466392994 CET	1314	50036	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:17.466547966 CET	50036	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:17.471540928 CET	1314	50036	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:17.475056887 CET	50038	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:17.479975939 CET	1314	50038	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:17.480041981 CET	50038	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:17.480918884 CET	50038	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:17.485744953 CET	1314	50038	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:18.083183050 CET	1314	50038	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:18.083380938 CET	50038	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:18.088418961 CET	1314	50038	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:18.091716051 CET	50040	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:18.096606016 CET	1314	50040	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:18.096640110 CET	50040	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:18.097512007 CET	50040	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:18.102416992 CET	1314	50040	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:18.698975086 CET	1314	50040	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:18.699127913 CET	50040	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:18.704024076 CET	1314	50040	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:18.707107067 CET	50042	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:18.711978912 CET	1314	50042	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:18.712028027 CET	50042	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:18.712923050 CET	50042	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:18.717724085 CET	1314	50042	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:19.314821005 CET	1314	50042	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:19.315102100 CET	50042	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:19.320065975 CET	1314	50042	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:19.323715925 CET	50044	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:19.328598022 CET	1314	50044	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:19.328639984 CET	50044	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:19.329466105 CET	50044	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:19.334285021 CET	1314	50044	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:19.950274944 CET	1314	50044	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:19.950436115 CET	50044	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:19.955528021 CET	1314	50044	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:19.958651066 CET	50046	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:19.963557959 CET	1314	50046	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:19.963607073 CET	50046	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:19.964593887 CET	50046	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:19.969348907 CET	1314	50046	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:20.558950901 CET	1314	50046	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:20.559058905 CET	50046	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:20.563977957 CET	1314	50046	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:20.567142963 CET	50048	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:20.571939945 CET	1314	50048	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:20.571993113 CET	50048	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:20.572813034 CET	50048	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:20.578103065 CET	1314	50048	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:21.172858953 CET	1314	50048	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:21.173026085 CET	50048	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:21.178031921 CET	1314	50048	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:21.180953026 CET	50050	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:21.185765982 CET	1314	50050	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:21.185817003 CET	50050	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:21.186660051 CET	50050	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:21.191422939 CET	1314	50050	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:21.780352116 CET	1314	50050	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:21.780617952 CET	50050	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:21.785501957 CET	1314	50050	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:21.788707972 CET	50052	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:21.793550014 CET	1314	50052	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:21.793639898 CET	50052	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:21.794500113 CET	50052	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:21.799298048 CET	1314	50052	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:22.414817095 CET	1314	50052	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:22.414968967 CET	50052	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:22.420351028 CET	1314	50052	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:22.424535036 CET	50054	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:22.429373980 CET	1314	50054	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:22.429420948 CET	50054	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:22.430289030 CET	50054	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:22.435066938 CET	1314	50054	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:23.062010050 CET	1314	50054	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:23.062149048 CET	50054	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:23.067121983 CET	1314	50054	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:23.070653915 CET	50056	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:23.075556040 CET	1314	50056	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:23.075686932 CET	50056	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:23.076637983 CET	50056	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:23.081526041 CET	1314	50056	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:23.697061062 CET	1314	50056	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:23.697196960 CET	50056	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:23.702177048 CET	1314	50056	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:23.705364943 CET	50058	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:23.710303068 CET	1314	50058	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:23.710350037 CET	50058	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:23.711210012 CET	50058	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:23.715992928 CET	1314	50058	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:24.333463907 CET	1314	50058	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:24.333607912 CET	50058	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:24.338511944 CET	1314	50058	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:24.341526031 CET	50060	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:24.346371889 CET	1314	50060	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:24.346415997 CET	50060	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:24.347398043 CET	50060	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:24.352184057 CET	1314	50060	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:24.954701900 CET	1314	50060	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:24.954817057 CET	50060	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:24.959669113 CET	1314	50060	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:24.963937044 CET	50062	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:24.968740940 CET	1314	50062	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:24.968786001 CET	50062	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:24.969691038 CET	50062	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:24.974483013 CET	1314	50062	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:25.583098888 CET	1314	50062	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:25.583249092 CET	50062	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:25.588179111 CET	1314	50062	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:25.591130972 CET	50064	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:25.596019030 CET	1314	50064	154.213.187.118	192.168.2.23
Jan 11, 2025 14:39:25.596085072 CET	50064	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:25.596966982 CET	50064	1314	192.168.2.23	154.213.187.118
Jan 11, 2025 14:39:25.601804018 CET	1314	50064	154.213.187.118	192.168.2.23

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 14:37:20.869690895 CET	35346	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:20.876885891 CET	53	35346	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:21.757550001 CET	54050	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:21.764957905 CET	53	54050	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:22.565380096 CET	48186	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:22.574120045 CET	53	48186	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:23.217108965 CET	40225	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:23.224193096 CET	53	40225	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:23.856199980 CET	60147	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:23.863239050 CET	53	60147	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:24.478749990 CET	50214	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:24.486148119 CET	53	50214	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:25.139317036 CET	39039	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:25.146677971 CET	53	39039	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:25.751431942 CET	44554	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:25.759074926 CET	53	44554	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:26.396547079 CET	49766	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:26.404616117 CET	53	49766	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:27.195400000 CET	59214	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:27.202909946 CET	53	59214	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:27.919312954 CET	39650	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:27.926691055 CET	53	39650	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:28.756978989 CET	50554	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:28.763350010 CET	53	50554	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:29.607703924 CET	58575	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:29.614835024 CET	53	58575	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:30.245043039 CET	43423	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:30.252474070 CET	53	43423	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:30.976975918 CET	47666	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:30.983462095 CET	53	47666	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:31.653786898 CET	49835	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:31.660787106 CET	53	49835	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:32.276592016 CET	41334	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:32.283492088 CET	53	41334	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:33.006997108 CET	43475	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:33.014965057 CET	53	43475	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:33.720139027 CET	39365	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:33.726470947 CET	53	39365	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:34.350471973 CET	51869	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:34.357592106 CET	53	51869	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:35.073000908 CET	39912	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:35.080168009 CET	53	39912	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:35.749274015 CET	58176	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:35.756447077 CET	53	58176	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:36.358952045 CET	56094	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:36.365948915 CET	53	56094	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:36.981153011 CET	58541	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:36.988159895 CET	53	58541	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:37.639024019 CET	40530	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:37.645422935 CET	53	40530	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:38.265222073 CET	45588	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:38.272128105 CET	53	45588	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:38.871728897 CET	51249	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:38.878814936 CET	53	51249	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:39.510993958 CET	45131	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:39.518122911 CET	53	45131	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:40.118871927 CET	45028	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:40.125921011 CET	53	45028	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:40.734823942 CET	52418	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:40.742247105 CET	53	52418	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:41.382808924 CET	34375	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:41.390417099 CET	53	34375	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:42.038492918 CET	44028	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:42.046003103 CET	53	44028	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:42.676107883 CET	44483	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:42.683372974 CET	53	44483	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:43.885777950 CET	34139	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:43.892891884 CET	53	34139	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:44.531831026 CET	43821	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:44.538754940 CET	53	43821	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:45.147589922 CET	34730	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:45.154689074 CET	53	34730	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:45.780386925 CET	46791	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:45.787604094 CET	53	46791	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:46.404552937 CET	45912	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:46.412024975 CET	53	45912	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:47.124691963 CET	35224	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:47.132002115 CET	53	35224	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:47.748651028 CET	46015	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:47.756247997 CET	53	46015	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:48.366456985 CET	44304	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:48.373267889 CET	53	44304	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:48.975388050 CET	55249	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:48.982454062 CET	53	55249	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:49.607775927 CET	42609	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:49.615032911 CET	53	42609	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:50.243572950 CET	49409	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:50.250435114 CET	53	49409	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:50.879131079 CET	47051	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:50.886737108 CET	53	47051	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:51.521464109 CET	39218	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:51.531446934 CET	53	39218	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:52.156014919 CET	60268	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:52.163109064 CET	53	60268	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:52.773320913 CET	43773	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:52.780108929 CET	53	43773	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:53.400774002 CET	36372	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:53.407780886 CET	53	36372	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:54.017215014 CET	58291	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:54.024477959 CET	53	58291	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:54.654911995 CET	47948	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:54.661741018 CET	53	47948	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:55.271028996 CET	33570	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:55.278131962 CET	53	33570	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:55.887257099 CET	60198	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:55.894475937 CET	53	60198	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:56.498001099 CET	42467	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:56.505264997 CET	53	42467	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:57.180351019 CET	38875	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:57.186969995 CET	53	38875	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:57.815776110 CET	53459	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:57.822221994 CET	53	53459	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:58.451245070 CET	37372	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:58.458390951 CET	53	37372	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:59.084496021 CET	42562	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:59.091578007 CET	53	42562	8.8.8.8	192.168.2.23
Jan 11, 2025 14:37:59.690817118 CET	33151	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:37:59.697201967 CET	53	33151	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:00.306108952 CET	33718	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:00.313838959 CET	53	33718	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:00.942332983 CET	60914	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:00.949254036 CET	53	60914	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:01.577886105 CET	37929	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:01.584798098 CET	53	37929	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:02.205262899 CET	48419	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:02.212516069 CET	53	48419	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:02.833352089 CET	50793	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:02.839919090 CET	53	50793	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:03.462007046 CET	48649	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:03.469036102 CET	53	48649	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:04.117224932 CET	59801	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:04.124383926 CET	53	59801	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:04.742600918 CET	50209	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:04.749413967 CET	53	50209	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:05.356544018 CET	40594	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:05.363502026 CET	53	40594	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:05.964783907 CET	33831	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:05.972151041 CET	53	33831	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:06.581032038 CET	35520	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:06.587999105 CET	53	35520	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:07.186685085 CET	37566	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:07.193718910 CET	53	37566	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:07.811017990 CET	40208	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:07.818253994 CET	53	40208	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:08.442437887 CET	39812	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:08.449289083 CET	53	39812	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:09.078752041 CET	35927	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:09.085166931 CET	53	35927	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:09.686364889 CET	47897	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:09.692687988 CET	53	47897	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:10.312897921 CET	37478	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:10.319806099 CET	53	37478	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:10.956871033 CET	33461	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:10.963721991 CET	53	33461	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:11.572565079 CET	35142	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:11.579777002 CET	53	35142	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:12.214673042 CET	36226	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:12.221801996 CET	53	36226	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:12.830745935 CET	41851	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:12.837779045 CET	53	41851	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:13.463058949 CET	57449	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:13.470365047 CET	53	57449	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:14.082823038 CET	44284	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:14.090511084 CET	53	44284	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:14.727822065 CET	43820	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:14.734746933 CET	53	43820	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:15.345083952 CET	42632	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:15.352060080 CET	53	42632	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:15.962009907 CET	42732	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:15.968466043 CET	53	42732	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:16.588233948 CET	42909	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:16.595707893 CET	53	42909	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:17.231981039 CET	48296	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:17.239209890 CET	53	48296	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:17.848501921 CET	52101	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:17.855772018 CET	53	52101	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:18.492196083 CET	50033	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:18.499080896 CET	53	50033	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:19.121572971 CET	46427	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:19.128684044 CET	53	46427	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:19.747809887 CET	41896	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:19.754828930 CET	53	41896	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:20.364787102 CET	38718	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:20.372024059 CET	53	38718	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:20.977830887 CET	41485	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:20.984863043 CET	53	41485	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:21.612726927 CET	36522	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:21.621289015 CET	53	36522	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:22.234415054 CET	47648	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:22.240797043 CET	53	47648	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:22.874881029 CET	34760	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:22.881994009 CET	53	34760	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:23.517283916 CET	43140	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:23.524271011 CET	53	43140	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:24.127026081 CET	52304	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:24.134196997 CET	53	52304	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:24.764143944 CET	57484	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:24.771142006 CET	53	57484	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:25.385029078 CET	37154	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:25.392946005 CET	53	37154	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:25.996203899 CET	59641	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:26.003073931 CET	53	59641	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:26.631936073 CET	55694	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:26.639034986 CET	53	55694	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:27.267574072 CET	55024	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:27.273936033 CET	53	55024	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:27.917205095 CET	59093	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:27.923644066 CET	53	59093	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:28.532815933 CET	36343	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:28.539773941 CET	53	36343	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:29.172667980 CET	43802	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:29.179850101 CET	53	43802	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:29.825041056 CET	39740	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:29.832204103 CET	53	39740	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:30.460439920 CET	55298	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:30.468925953 CET	53	55298	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:31.100971937 CET	44249	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:31.107851028 CET	53	44249	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:31.713923931 CET	37390	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:31.720849037 CET	53	37390	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:32.346208096 CET	34373	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:32.352638960 CET	53	34373	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:32.980690002 CET	53721	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:32.987787962 CET	53	53721	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:33.609577894 CET	47240	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:33.616720915 CET	53	47240	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:34.234807968 CET	53642	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:34.241734028 CET	53	53642	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:34.843525887 CET	46643	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:34.850694895 CET	53	46643	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:35.461833954 CET	35750	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:35.468229055 CET	53	35750	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:36.084125042 CET	40508	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:36.091264009 CET	53	40508	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:36.709285021 CET	49065	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:36.716135025 CET	53	49065	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:37.338507891 CET	38533	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:37.347755909 CET	53	38533	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:37.978570938 CET	38816	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:37.985178947 CET	53	38816	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:38.608897924 CET	40253	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:38.615951061 CET	53	40253	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:39.243330956 CET	37899	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:39.250488997 CET	53	37899	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:39.883236885 CET	39648	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:39.890853882 CET	53	39648	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:40.497600079 CET	50085	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:40.504702091 CET	53	50085	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:41.112552881 CET	45953	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:41.119705915 CET	53	45953	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:41.733973980 CET	60852	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:41.740859032 CET	53	60852	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:42.371063948 CET	56415	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:42.377481937 CET	53	56415	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:43.006479025 CET	50882	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:43.013607025 CET	53	50882	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:43.642153025 CET	35220	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:43.648806095 CET	53	35220	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:44.253676891 CET	46757	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:44.260730028 CET	53	46757	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:44.895117044 CET	60567	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:44.901947021 CET	53	60567	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:45.518655062 CET	39411	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:45.525486946 CET	53	39411	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:46.162576914 CET	45253	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:46.169059038 CET	53	45253	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:46.796999931 CET	57144	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:46.804389954 CET	53	57144	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:47.440829992 CET	51000	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:47.447853088 CET	53	51000	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:48.085832119 CET	60869	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:48.092926979 CET	53	60869	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:48.705027103 CET	46683	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:48.712357044 CET	53	46683	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:49.321768045 CET	57469	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:49.328907013 CET	53	57469	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:49.939834118 CET	40080	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:49.946525097 CET	53	40080	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:50.556674957 CET	53747	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:50.563050032 CET	53	53747	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:51.172446012 CET	41878	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:51.179439068 CET	53	41878	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:51.797386885 CET	58706	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:51.804006100 CET	53	58706	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:52.441422939 CET	40778	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:52.448386908 CET	53	40778	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:53.076473951 CET	57711	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:53.083589077 CET	53	57711	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:53.731765985 CET	48878	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:53.739253044 CET	53	48878	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:54.367990971 CET	52340	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:54.374505043 CET	53	52340	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:54.980227947 CET	60000	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:54.987200975 CET	53	60000	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:55.616274118 CET	60163	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:55.623032093 CET	53	60163	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:56.255825996 CET	58930	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:56.262717962 CET	53	58930	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:56.879586935 CET	34308	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:56.886612892 CET	53	34308	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:57.487481117 CET	51614	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:57.495018005 CET	53	51614	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:58.103965998 CET	56181	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:58.110860109 CET	53	56181	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:58.731350899 CET	34373	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:58.738373995 CET	53	34373	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:59.367002964 CET	46958	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:59.373398066 CET	53	46958	8.8.8.8	192.168.2.23
Jan 11, 2025 14:38:59.983561039 CET	37905	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:38:59.991112947 CET	53	37905	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:00.589642048 CET	36808	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:00.596786022 CET	53	36808	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:01.202699900 CET	32950	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:01.209418058 CET	53	32950	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:01.839114904 CET	39987	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:01.845820904 CET	53	39987	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:02.482893944 CET	58881	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:02.490441084 CET	53	58881	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:03.118890047 CET	47400	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:03.126049042 CET	53	47400	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:03.735229969 CET	46972	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:03.742283106 CET	53	46972	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:04.360348940 CET	59045	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:04.366741896 CET	53	59045	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:05.011147022 CET	46216	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:05.018811941 CET	53	46216	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:05.628813028 CET	60348	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:05.636748075 CET	53	60348	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:06.255305052 CET	57348	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:06.262218952 CET	53	57348	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:06.894905090 CET	46650	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:06.901871920 CET	53	46650	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:07.512767076 CET	55277	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:07.519215107 CET	53	55277	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:08.148066044 CET	42907	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:08.154582024 CET	53	42907	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:08.765950918 CET	55237	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:08.772425890 CET	53	55237	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:09.382920027 CET	55749	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:09.389589071 CET	53	55749	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:09.999361038 CET	38264	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:10.006021023 CET	53	38264	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:10.608712912 CET	48297	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:10.615073919 CET	53	48297	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:11.235165119 CET	47441	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:11.241887093 CET	53	47441	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:11.866132975 CET	41948	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:11.872936964 CET	53	41948	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:12.491059065 CET	54507	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:12.498254061 CET	53	54507	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:13.108179092 CET	40367	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:13.114804983 CET	53	40367	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:13.716558933 CET	54358	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:13.723685026 CET	53	54358	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:14.331942081 CET	42461	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:14.338759899 CET	53	42461	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:14.973447084 CET	33801	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:14.980390072 CET	53	33801	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:15.586426973 CET	57107	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:15.593487978 CET	53	57107	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:16.214458942 CET	44363	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:16.221405029 CET	53	44363	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:16.831547976 CET	48650	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:16.839162111 CET	53	48650	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:17.467348099 CET	32993	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:17.474493980 CET	53	32993	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:18.084534883 CET	36000	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:18.091253996 CET	53	36000	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:18.700268030 CET	52404	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:18.706626892 CET	53	52404	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:19.316206932 CET	56897	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:19.323231936 CET	53	56897	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:19.951721907 CET	33307	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:19.958137989 CET	53	33307	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:20.559737921 CET	38474	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:20.566672087 CET	53	38474	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:21.174103975 CET	50793	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:21.180517912 CET	53	50793	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:21.781570911 CET	40592	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:21.788220882 CET	53	40592	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:22.416102886 CET	60417	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:22.424065113 CET	53	60417	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:23.063426018 CET	49246	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:23.070139885 CET	53	49246	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:23.698159933 CET	39277	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:23.704904079 CET	53	39277	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:24.334693909 CET	52932	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:24.341012001 CET	53	52932	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:24.956032991 CET	49986	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:24.963412046 CET	53	49986	8.8.8.8	192.168.2.23
Jan 11, 2025 14:39:25.584382057 CET	58743	53	192.168.2.23	8.8.8.8
Jan 11, 2025 14:39:25.590637922 CET	53	58743	8.8.8.8	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 11, 2025 14:37:20.869690895 CET	192.168.2.23	8.8.8.8	0xd16	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:21.757550001 CET	192.168.2.23	8.8.8.8	0xad2	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:22.565380096 CET	192.168.2.23	8.8.8.8	0xcc69	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:23.217108965 CET	192.168.2.23	8.8.8.8	0xea1e	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:23.856199980 CET	192.168.2.23	8.8.8.8	0xfba7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:24.478749990 CET	192.168.2.23	8.8.8.8	0x755f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:25.139317036 CET	192.168.2.23	8.8.8.8	0xad63	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:25.751431942 CET	192.168.2.23	8.8.8.8	0x7d2c	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:26.396547079 CET	192.168.2.23	8.8.8.8	0x163a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:27.195400000 CET	192.168.2.23	8.8.8.8	0x9c1f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:27.919312954 CET	192.168.2.23	8.8.8.8	0xdd	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:28.756978989 CET	192.168.2.23	8.8.8.8	0x8c51	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:29.607703924 CET	192.168.2.23	8.8.8.8	0x92e0	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:30.245043039 CET	192.168.2.23	8.8.8.8	0xd590	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:30.976975918 CET	192.168.2.23	8.8.8.8	0xf95	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:31.653786898 CET	192.168.2.23	8.8.8.8	0xdfae	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:32.276592016 CET	192.168.2.23	8.8.8.8	0xc420	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:33.006997108 CET	192.168.2.23	8.8.8.8	0x6b84	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:33.720139027 CET	192.168.2.23	8.8.8.8	0x5141	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:34.350471973 CET	192.168.2.23	8.8.8.8	0x68a8	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:35.073000908 CET	192.168.2.23	8.8.8.8	0xf45	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:35.749274015 CET	192.168.2.23	8.8.8.8	0xdc09	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:36.358952045 CET	192.168.2.23	8.8.8.8	0x112b	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:36.981153011 CET	192.168.2.23	8.8.8.8	0x18d7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:37.639024019 CET	192.168.2.23	8.8.8.8	0xc72a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:38.265222073 CET	192.168.2.23	8.8.8.8	0x9d23	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:38.871728897 CET	192.168.2.23	8.8.8.8	0x6428	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:39.510993958 CET	192.168.2.23	8.8.8.8	0x60d6	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:40.118871927 CET	192.168.2.23	8.8.8.8	0xc5d3	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:40.734823942 CET	192.168.2.23	8.8.8.8	0xce43	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:41.382808924 CET	192.168.2.23	8.8.8.8	0xca10	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:42.038492918 CET	192.168.2.23	8.8.8.8	0x2a9d	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:42.676107883 CET	192.168.2.23	8.8.8.8	0x2464	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:43.885777950 CET	192.168.2.23	8.8.8.8	0x5b56	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:44.531831026 CET	192.168.2.23	8.8.8.8	0xc285	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:45.147589922 CET	192.168.2.23	8.8.8.8	0x1117	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:45.780386925 CET	192.168.2.23	8.8.8.8	0x1dc7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:46.404552937 CET	192.168.2.23	8.8.8.8	0x1bc8	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:47.124691963 CET	192.168.2.23	8.8.8.8	0xedf4	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:47.748651028 CET	192.168.2.23	8.8.8.8	0xc24f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:48.366456985 CET	192.168.2.23	8.8.8.8	0x9d4c	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:48.975388050 CET	192.168.2.23	8.8.8.8	0x2bbc	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:49.607775927 CET	192.168.2.23	8.8.8.8	0x4d8f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:50.243572950 CET	192.168.2.23	8.8.8.8	0xd37c	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:50.879131079 CET	192.168.2.23	8.8.8.8	0x2f0f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:51.521464109 CET	192.168.2.23	8.8.8.8	0xbcea	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:52.156014919 CET	192.168.2.23	8.8.8.8	0x286e	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:52.773320913 CET	192.168.2.23	8.8.8.8	0xba5b	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:53.400774002 CET	192.168.2.23	8.8.8.8	0xa11b	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:54.017215014 CET	192.168.2.23	8.8.8.8	0x4c26	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:54.654911995 CET	192.168.2.23	8.8.8.8	0x1e56	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:55.271028996 CET	192.168.2.23	8.8.8.8	0x53ac	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:55.887257099 CET	192.168.2.23	8.8.8.8	0x7819	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:56.498001099 CET	192.168.2.23	8.8.8.8	0x8667	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:57.180351019 CET	192.168.2.23	8.8.8.8	0xc93	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:57.815776110 CET	192.168.2.23	8.8.8.8	0xd40d	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:58.451245070 CET	192.168.2.23	8.8.8.8	0x1d9f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:59.084496021 CET	192.168.2.23	8.8.8.8	0x9d2	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:59.690817118 CET	192.168.2.23	8.8.8.8	0x3a30	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:00.306108952 CET	192.168.2.23	8.8.8.8	0xc4fb	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:00.942332983 CET	192.168.2.23	8.8.8.8	0x57a6	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:01.577886105 CET	192.168.2.23	8.8.8.8	0xcfb6	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:02.205262899 CET	192.168.2.23	8.8.8.8	0xa644	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:02.833352089 CET	192.168.2.23	8.8.8.8	0xbda7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:03.462007046 CET	192.168.2.23	8.8.8.8	0xabd7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:04.117224932 CET	192.168.2.23	8.8.8.8	0x495b	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:04.742600918 CET	192.168.2.23	8.8.8.8	0xebb4	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:05.356544018 CET	192.168.2.23	8.8.8.8	0x6c20	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:05.964783907 CET	192.168.2.23	8.8.8.8	0x5c5d	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:06.581032038 CET	192.168.2.23	8.8.8.8	0x89d8	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:07.186685085 CET	192.168.2.23	8.8.8.8	0x80d	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:07.811017990 CET	192.168.2.23	8.8.8.8	0x6642	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:08.442437887 CET	192.168.2.23	8.8.8.8	0x67e6	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:09.078752041 CET	192.168.2.23	8.8.8.8	0x6cbe	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:09.686364889 CET	192.168.2.23	8.8.8.8	0x5e5b	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:10.312897921 CET	192.168.2.23	8.8.8.8	0xab24	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:10.956871033 CET	192.168.2.23	8.8.8.8	0x29a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:11.572565079 CET	192.168.2.23	8.8.8.8	0xc048	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:12.214673042 CET	192.168.2.23	8.8.8.8	0xf3f7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:12.830745935 CET	192.168.2.23	8.8.8.8	0xcf56	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:13.463058949 CET	192.168.2.23	8.8.8.8	0x938f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:14.082823038 CET	192.168.2.23	8.8.8.8	0x7ed9	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:14.727822065 CET	192.168.2.23	8.8.8.8	0x5c7d	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:15.345083952 CET	192.168.2.23	8.8.8.8	0x1ae1	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:15.962009907 CET	192.168.2.23	8.8.8.8	0x6ca6	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:16.588233948 CET	192.168.2.23	8.8.8.8	0xd55c	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:17.231981039 CET	192.168.2.23	8.8.8.8	0x4ec6	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:17.848501921 CET	192.168.2.23	8.8.8.8	0xd17a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:18.492196083 CET	192.168.2.23	8.8.8.8	0x510f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:19.121572971 CET	192.168.2.23	8.8.8.8	0xd91a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:19.747809887 CET	192.168.2.23	8.8.8.8	0x5c01	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:20.364787102 CET	192.168.2.23	8.8.8.8	0xe014	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:20.977830887 CET	192.168.2.23	8.8.8.8	0x1448	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:21.612726927 CET	192.168.2.23	8.8.8.8	0x3499	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:22.234415054 CET	192.168.2.23	8.8.8.8	0x1c26	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:22.874881029 CET	192.168.2.23	8.8.8.8	0xb26e	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:23.517283916 CET	192.168.2.23	8.8.8.8	0xb464	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:24.127026081 CET	192.168.2.23	8.8.8.8	0x41cf	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:24.764143944 CET	192.168.2.23	8.8.8.8	0xe455	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:25.385029078 CET	192.168.2.23	8.8.8.8	0xa77f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:25.996203899 CET	192.168.2.23	8.8.8.8	0xacd2	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:26.631936073 CET	192.168.2.23	8.8.8.8	0x99d8	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:27.267574072 CET	192.168.2.23	8.8.8.8	0x1282	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:27.917205095 CET	192.168.2.23	8.8.8.8	0x88a4	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:28.532815933 CET	192.168.2.23	8.8.8.8	0x70bc	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:29.172667980 CET	192.168.2.23	8.8.8.8	0x77a1	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:29.825041056 CET	192.168.2.23	8.8.8.8	0x62dc	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:30.460439920 CET	192.168.2.23	8.8.8.8	0xa636	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:31.100971937 CET	192.168.2.23	8.8.8.8	0x7f8a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:31.713923931 CET	192.168.2.23	8.8.8.8	0xe729	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:32.346208096 CET	192.168.2.23	8.8.8.8	0x9ca7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:32.980690002 CET	192.168.2.23	8.8.8.8	0xcd02	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:33.609577894 CET	192.168.2.23	8.8.8.8	0x4132	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:34.234807968 CET	192.168.2.23	8.8.8.8	0x4b3a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:34.843525887 CET	192.168.2.23	8.8.8.8	0xc1e6	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:35.461833954 CET	192.168.2.23	8.8.8.8	0x4b4b	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:36.084125042 CET	192.168.2.23	8.8.8.8	0xa269	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:36.709285021 CET	192.168.2.23	8.8.8.8	0xc002	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:37.338507891 CET	192.168.2.23	8.8.8.8	0xe171	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:37.978570938 CET	192.168.2.23	8.8.8.8	0x8363	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:38.608897924 CET	192.168.2.23	8.8.8.8	0x66c0	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:39.243330956 CET	192.168.2.23	8.8.8.8	0xd8ac	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:39.883236885 CET	192.168.2.23	8.8.8.8	0xe030	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:40.497600079 CET	192.168.2.23	8.8.8.8	0xb436	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:41.112552881 CET	192.168.2.23	8.8.8.8	0x54d0	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:41.733973980 CET	192.168.2.23	8.8.8.8	0xf293	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:42.371063948 CET	192.168.2.23	8.8.8.8	0x14cd	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:43.006479025 CET	192.168.2.23	8.8.8.8	0xf42f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:43.642153025 CET	192.168.2.23	8.8.8.8	0xd701	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:44.253676891 CET	192.168.2.23	8.8.8.8	0xdf52	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:44.895117044 CET	192.168.2.23	8.8.8.8	0xf94b	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:45.518655062 CET	192.168.2.23	8.8.8.8	0x96a9	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:46.162576914 CET	192.168.2.23	8.8.8.8	0xf251	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:46.796999931 CET	192.168.2.23	8.8.8.8	0xeeb	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:47.440829992 CET	192.168.2.23	8.8.8.8	0xbc24	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:48.085832119 CET	192.168.2.23	8.8.8.8	0xf74f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:48.705027103 CET	192.168.2.23	8.8.8.8	0x5b13	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:49.321768045 CET	192.168.2.23	8.8.8.8	0x3ab7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:49.939834118 CET	192.168.2.23	8.8.8.8	0xcf4f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:50.556674957 CET	192.168.2.23	8.8.8.8	0x4ed1	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:51.172446012 CET	192.168.2.23	8.8.8.8	0xb56c	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:51.797386885 CET	192.168.2.23	8.8.8.8	0x6349	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:52.441422939 CET	192.168.2.23	8.8.8.8	0x3a8c	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:53.076473951 CET	192.168.2.23	8.8.8.8	0xe050	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:53.731765985 CET	192.168.2.23	8.8.8.8	0xab59	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:54.367990971 CET	192.168.2.23	8.8.8.8	0x8d3	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:54.980227947 CET	192.168.2.23	8.8.8.8	0xe37b	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:55.616274118 CET	192.168.2.23	8.8.8.8	0xc9fc	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:56.255825996 CET	192.168.2.23	8.8.8.8	0xbda0	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:56.879586935 CET	192.168.2.23	8.8.8.8	0xaa63	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:57.487481117 CET	192.168.2.23	8.8.8.8	0x7a92	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:58.103965998 CET	192.168.2.23	8.8.8.8	0x4dca	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:58.731350899 CET	192.168.2.23	8.8.8.8	0x8538	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:59.367002964 CET	192.168.2.23	8.8.8.8	0x76f8	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:59.983561039 CET	192.168.2.23	8.8.8.8	0xc0a7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:00.589642048 CET	192.168.2.23	8.8.8.8	0xb680	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:01.202699900 CET	192.168.2.23	8.8.8.8	0x928f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:01.839114904 CET	192.168.2.23	8.8.8.8	0x399f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:02.482893944 CET	192.168.2.23	8.8.8.8	0xe10c	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:03.118890047 CET	192.168.2.23	8.8.8.8	0x821a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:03.735229969 CET	192.168.2.23	8.8.8.8	0xf5aa	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:04.360348940 CET	192.168.2.23	8.8.8.8	0xd779	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:05.011147022 CET	192.168.2.23	8.8.8.8	0x7be3	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:05.628813028 CET	192.168.2.23	8.8.8.8	0x56e0	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:06.255305052 CET	192.168.2.23	8.8.8.8	0x81c6	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:06.894905090 CET	192.168.2.23	8.8.8.8	0x42cc	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:07.512767076 CET	192.168.2.23	8.8.8.8	0x80c0	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:08.148066044 CET	192.168.2.23	8.8.8.8	0xb196	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:08.765950918 CET	192.168.2.23	8.8.8.8	0xf67d	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:09.382920027 CET	192.168.2.23	8.8.8.8	0xdd3a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:09.999361038 CET	192.168.2.23	8.8.8.8	0xaaea	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:10.608712912 CET	192.168.2.23	8.8.8.8	0x6ff7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:11.235165119 CET	192.168.2.23	8.8.8.8	0xf3ed	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:11.866132975 CET	192.168.2.23	8.8.8.8	0xcd79	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:12.491059065 CET	192.168.2.23	8.8.8.8	0x166e	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:13.108179092 CET	192.168.2.23	8.8.8.8	0x9096	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:13.716558933 CET	192.168.2.23	8.8.8.8	0x4b04	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:14.331942081 CET	192.168.2.23	8.8.8.8	0x3bc4	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:14.973447084 CET	192.168.2.23	8.8.8.8	0x889a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:15.586426973 CET	192.168.2.23	8.8.8.8	0x3be7	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:16.214458942 CET	192.168.2.23	8.8.8.8	0xc805	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:16.831547976 CET	192.168.2.23	8.8.8.8	0x9cb	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:17.467348099 CET	192.168.2.23	8.8.8.8	0xea2a	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:18.084534883 CET	192.168.2.23	8.8.8.8	0x3f4e	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:18.700268030 CET	192.168.2.23	8.8.8.8	0x4b06	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:19.316206932 CET	192.168.2.23	8.8.8.8	0x823f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:19.951721907 CET	192.168.2.23	8.8.8.8	0x7e6f	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:20.559737921 CET	192.168.2.23	8.8.8.8	0x58d1	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:21.174103975 CET	192.168.2.23	8.8.8.8	0x2e94	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:21.781570911 CET	192.168.2.23	8.8.8.8	0x1cbc	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:22.416102886 CET	192.168.2.23	8.8.8.8	0x5064	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:23.063426018 CET	192.168.2.23	8.8.8.8	0x4254	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:23.698159933 CET	192.168.2.23	8.8.8.8	0xfb24	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:24.334693909 CET	192.168.2.23	8.8.8.8	0x5fea	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:24.956032991 CET	192.168.2.23	8.8.8.8	0xb784	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:25.584382057 CET	192.168.2.23	8.8.8.8	0x7cf5	Standard query (0)	webhorizon.icu	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 11, 2025 14:37:20.876885891 CET	8.8.8.8	192.168.2.23	0xd16	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:21.764957905 CET	8.8.8.8	192.168.2.23	0xad2	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:22.574120045 CET	8.8.8.8	192.168.2.23	0xcc69	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:23.224193096 CET	8.8.8.8	192.168.2.23	0xea1e	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:23.863239050 CET	8.8.8.8	192.168.2.23	0xfba7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:24.486148119 CET	8.8.8.8	192.168.2.23	0x755f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:25.146677971 CET	8.8.8.8	192.168.2.23	0xad63	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:25.759074926 CET	8.8.8.8	192.168.2.23	0x7d2c	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:26.404616117 CET	8.8.8.8	192.168.2.23	0x163a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:27.202909946 CET	8.8.8.8	192.168.2.23	0x9c1f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:27.926691055 CET	8.8.8.8	192.168.2.23	0xdd	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:28.763350010 CET	8.8.8.8	192.168.2.23	0x8c51	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:29.614835024 CET	8.8.8.8	192.168.2.23	0x92e0	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:30.252474070 CET	8.8.8.8	192.168.2.23	0xd590	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:30.983462095 CET	8.8.8.8	192.168.2.23	0xf95	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:31.660787106 CET	8.8.8.8	192.168.2.23	0xdfae	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:32.283492088 CET	8.8.8.8	192.168.2.23	0xc420	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:33.014965057 CET	8.8.8.8	192.168.2.23	0x6b84	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:33.726470947 CET	8.8.8.8	192.168.2.23	0x5141	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:34.357592106 CET	8.8.8.8	192.168.2.23	0x68a8	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:35.080168009 CET	8.8.8.8	192.168.2.23	0xf45	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:35.756447077 CET	8.8.8.8	192.168.2.23	0xdc09	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:36.365948915 CET	8.8.8.8	192.168.2.23	0x112b	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:36.988159895 CET	8.8.8.8	192.168.2.23	0x18d7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:37.645422935 CET	8.8.8.8	192.168.2.23	0xc72a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:38.272128105 CET	8.8.8.8	192.168.2.23	0x9d23	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:38.878814936 CET	8.8.8.8	192.168.2.23	0x6428	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:39.518122911 CET	8.8.8.8	192.168.2.23	0x60d6	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:40.125921011 CET	8.8.8.8	192.168.2.23	0xc5d3	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:40.742247105 CET	8.8.8.8	192.168.2.23	0xce43	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:41.390417099 CET	8.8.8.8	192.168.2.23	0xca10	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:42.046003103 CET	8.8.8.8	192.168.2.23	0x2a9d	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:42.683372974 CET	8.8.8.8	192.168.2.23	0x2464	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:43.892891884 CET	8.8.8.8	192.168.2.23	0x5b56	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:44.538754940 CET	8.8.8.8	192.168.2.23	0xc285	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:45.154689074 CET	8.8.8.8	192.168.2.23	0x1117	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:45.787604094 CET	8.8.8.8	192.168.2.23	0x1dc7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:46.412024975 CET	8.8.8.8	192.168.2.23	0x1bc8	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:47.132002115 CET	8.8.8.8	192.168.2.23	0xedf4	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:47.756247997 CET	8.8.8.8	192.168.2.23	0xc24f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:48.373267889 CET	8.8.8.8	192.168.2.23	0x9d4c	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:48.982454062 CET	8.8.8.8	192.168.2.23	0x2bbc	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:49.615032911 CET	8.8.8.8	192.168.2.23	0x4d8f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:50.250435114 CET	8.8.8.8	192.168.2.23	0xd37c	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:50.886737108 CET	8.8.8.8	192.168.2.23	0x2f0f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:51.531446934 CET	8.8.8.8	192.168.2.23	0xbcea	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:52.163109064 CET	8.8.8.8	192.168.2.23	0x286e	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:52.780108929 CET	8.8.8.8	192.168.2.23	0xba5b	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:53.407780886 CET	8.8.8.8	192.168.2.23	0xa11b	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:54.024477959 CET	8.8.8.8	192.168.2.23	0x4c26	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:54.661741018 CET	8.8.8.8	192.168.2.23	0x1e56	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:55.278131962 CET	8.8.8.8	192.168.2.23	0x53ac	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:55.894475937 CET	8.8.8.8	192.168.2.23	0x7819	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:56.505264997 CET	8.8.8.8	192.168.2.23	0x8667	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:57.186969995 CET	8.8.8.8	192.168.2.23	0xc93	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:57.822221994 CET	8.8.8.8	192.168.2.23	0xd40d	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:58.458390951 CET	8.8.8.8	192.168.2.23	0x1d9f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:59.091578007 CET	8.8.8.8	192.168.2.23	0x9d2	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:37:59.697201967 CET	8.8.8.8	192.168.2.23	0x3a30	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:00.313838959 CET	8.8.8.8	192.168.2.23	0xc4fb	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:00.949254036 CET	8.8.8.8	192.168.2.23	0x57a6	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:01.584798098 CET	8.8.8.8	192.168.2.23	0xcfb6	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:02.212516069 CET	8.8.8.8	192.168.2.23	0xa644	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:02.839919090 CET	8.8.8.8	192.168.2.23	0xbda7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:03.469036102 CET	8.8.8.8	192.168.2.23	0xabd7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:04.124383926 CET	8.8.8.8	192.168.2.23	0x495b	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:04.749413967 CET	8.8.8.8	192.168.2.23	0xebb4	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:05.363502026 CET	8.8.8.8	192.168.2.23	0x6c20	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:05.972151041 CET	8.8.8.8	192.168.2.23	0x5c5d	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:06.587999105 CET	8.8.8.8	192.168.2.23	0x89d8	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:07.193718910 CET	8.8.8.8	192.168.2.23	0x80d	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:07.818253994 CET	8.8.8.8	192.168.2.23	0x6642	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:08.449289083 CET	8.8.8.8	192.168.2.23	0x67e6	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:09.085166931 CET	8.8.8.8	192.168.2.23	0x6cbe	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:09.692687988 CET	8.8.8.8	192.168.2.23	0x5e5b	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:10.319806099 CET	8.8.8.8	192.168.2.23	0xab24	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:10.963721991 CET	8.8.8.8	192.168.2.23	0x29a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:11.579777002 CET	8.8.8.8	192.168.2.23	0xc048	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:12.221801996 CET	8.8.8.8	192.168.2.23	0xf3f7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:12.837779045 CET	8.8.8.8	192.168.2.23	0xcf56	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:13.470365047 CET	8.8.8.8	192.168.2.23	0x938f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:14.090511084 CET	8.8.8.8	192.168.2.23	0x7ed9	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:14.734746933 CET	8.8.8.8	192.168.2.23	0x5c7d	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:15.352060080 CET	8.8.8.8	192.168.2.23	0x1ae1	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:15.968466043 CET	8.8.8.8	192.168.2.23	0x6ca6	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:16.595707893 CET	8.8.8.8	192.168.2.23	0xd55c	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:17.239209890 CET	8.8.8.8	192.168.2.23	0x4ec6	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:17.855772018 CET	8.8.8.8	192.168.2.23	0xd17a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:18.499080896 CET	8.8.8.8	192.168.2.23	0x510f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:19.128684044 CET	8.8.8.8	192.168.2.23	0xd91a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:19.754828930 CET	8.8.8.8	192.168.2.23	0x5c01	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:20.372024059 CET	8.8.8.8	192.168.2.23	0xe014	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:20.984863043 CET	8.8.8.8	192.168.2.23	0x1448	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:21.621289015 CET	8.8.8.8	192.168.2.23	0x3499	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:22.240797043 CET	8.8.8.8	192.168.2.23	0x1c26	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:22.881994009 CET	8.8.8.8	192.168.2.23	0xb26e	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:23.524271011 CET	8.8.8.8	192.168.2.23	0xb464	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:24.134196997 CET	8.8.8.8	192.168.2.23	0x41cf	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:24.771142006 CET	8.8.8.8	192.168.2.23	0xe455	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:25.392946005 CET	8.8.8.8	192.168.2.23	0xa77f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:26.003073931 CET	8.8.8.8	192.168.2.23	0xacd2	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:26.639034986 CET	8.8.8.8	192.168.2.23	0x99d8	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:27.273936033 CET	8.8.8.8	192.168.2.23	0x1282	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:27.923644066 CET	8.8.8.8	192.168.2.23	0x88a4	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:28.539773941 CET	8.8.8.8	192.168.2.23	0x70bc	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:29.179850101 CET	8.8.8.8	192.168.2.23	0x77a1	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:29.832204103 CET	8.8.8.8	192.168.2.23	0x62dc	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:30.468925953 CET	8.8.8.8	192.168.2.23	0xa636	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:31.107851028 CET	8.8.8.8	192.168.2.23	0x7f8a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:31.720849037 CET	8.8.8.8	192.168.2.23	0xe729	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:32.352638960 CET	8.8.8.8	192.168.2.23	0x9ca7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:32.987787962 CET	8.8.8.8	192.168.2.23	0xcd02	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:33.616720915 CET	8.8.8.8	192.168.2.23	0x4132	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:34.241734028 CET	8.8.8.8	192.168.2.23	0x4b3a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:34.850694895 CET	8.8.8.8	192.168.2.23	0xc1e6	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:35.468229055 CET	8.8.8.8	192.168.2.23	0x4b4b	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:36.091264009 CET	8.8.8.8	192.168.2.23	0xa269	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:36.716135025 CET	8.8.8.8	192.168.2.23	0xc002	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:37.347755909 CET	8.8.8.8	192.168.2.23	0xe171	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:37.985178947 CET	8.8.8.8	192.168.2.23	0x8363	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:38.615951061 CET	8.8.8.8	192.168.2.23	0x66c0	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:39.250488997 CET	8.8.8.8	192.168.2.23	0xd8ac	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:39.890853882 CET	8.8.8.8	192.168.2.23	0xe030	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:40.504702091 CET	8.8.8.8	192.168.2.23	0xb436	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:41.119705915 CET	8.8.8.8	192.168.2.23	0x54d0	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:41.740859032 CET	8.8.8.8	192.168.2.23	0xf293	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:42.377481937 CET	8.8.8.8	192.168.2.23	0x14cd	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:43.013607025 CET	8.8.8.8	192.168.2.23	0xf42f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:43.648806095 CET	8.8.8.8	192.168.2.23	0xd701	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:44.260730028 CET	8.8.8.8	192.168.2.23	0xdf52	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:44.901947021 CET	8.8.8.8	192.168.2.23	0xf94b	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:45.525486946 CET	8.8.8.8	192.168.2.23	0x96a9	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:46.169059038 CET	8.8.8.8	192.168.2.23	0xf251	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:46.804389954 CET	8.8.8.8	192.168.2.23	0xeeb	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:47.447853088 CET	8.8.8.8	192.168.2.23	0xbc24	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:48.092926979 CET	8.8.8.8	192.168.2.23	0xf74f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:48.712357044 CET	8.8.8.8	192.168.2.23	0x5b13	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:49.328907013 CET	8.8.8.8	192.168.2.23	0x3ab7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:49.946525097 CET	8.8.8.8	192.168.2.23	0xcf4f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:50.563050032 CET	8.8.8.8	192.168.2.23	0x4ed1	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:51.179439068 CET	8.8.8.8	192.168.2.23	0xb56c	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:51.804006100 CET	8.8.8.8	192.168.2.23	0x6349	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:52.448386908 CET	8.8.8.8	192.168.2.23	0x3a8c	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:53.083589077 CET	8.8.8.8	192.168.2.23	0xe050	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:53.739253044 CET	8.8.8.8	192.168.2.23	0xab59	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:54.374505043 CET	8.8.8.8	192.168.2.23	0x8d3	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:54.987200975 CET	8.8.8.8	192.168.2.23	0xe37b	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:55.623032093 CET	8.8.8.8	192.168.2.23	0xc9fc	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:56.262717962 CET	8.8.8.8	192.168.2.23	0xbda0	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:56.886612892 CET	8.8.8.8	192.168.2.23	0xaa63	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:57.495018005 CET	8.8.8.8	192.168.2.23	0x7a92	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:58.110860109 CET	8.8.8.8	192.168.2.23	0x4dca	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:58.738373995 CET	8.8.8.8	192.168.2.23	0x8538	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:59.373398066 CET	8.8.8.8	192.168.2.23	0x76f8	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:38:59.991112947 CET	8.8.8.8	192.168.2.23	0xc0a7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:00.596786022 CET	8.8.8.8	192.168.2.23	0xb680	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:01.209418058 CET	8.8.8.8	192.168.2.23	0x928f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:01.845820904 CET	8.8.8.8	192.168.2.23	0x399f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:02.490441084 CET	8.8.8.8	192.168.2.23	0xe10c	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:03.126049042 CET	8.8.8.8	192.168.2.23	0x821a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:03.742283106 CET	8.8.8.8	192.168.2.23	0xf5aa	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:04.366741896 CET	8.8.8.8	192.168.2.23	0xd779	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:05.018811941 CET	8.8.8.8	192.168.2.23	0x7be3	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:05.636748075 CET	8.8.8.8	192.168.2.23	0x56e0	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:06.262218952 CET	8.8.8.8	192.168.2.23	0x81c6	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:06.901871920 CET	8.8.8.8	192.168.2.23	0x42cc	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:07.519215107 CET	8.8.8.8	192.168.2.23	0x80c0	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:08.154582024 CET	8.8.8.8	192.168.2.23	0xb196	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:08.772425890 CET	8.8.8.8	192.168.2.23	0xf67d	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:09.389589071 CET	8.8.8.8	192.168.2.23	0xdd3a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:10.006021023 CET	8.8.8.8	192.168.2.23	0xaaea	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:10.615073919 CET	8.8.8.8	192.168.2.23	0x6ff7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:11.241887093 CET	8.8.8.8	192.168.2.23	0xf3ed	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:11.872936964 CET	8.8.8.8	192.168.2.23	0xcd79	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:12.498254061 CET	8.8.8.8	192.168.2.23	0x166e	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:13.114804983 CET	8.8.8.8	192.168.2.23	0x9096	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:13.723685026 CET	8.8.8.8	192.168.2.23	0x4b04	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:14.338759899 CET	8.8.8.8	192.168.2.23	0x3bc4	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:14.980390072 CET	8.8.8.8	192.168.2.23	0x889a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:15.593487978 CET	8.8.8.8	192.168.2.23	0x3be7	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:16.221405029 CET	8.8.8.8	192.168.2.23	0xc805	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:16.839162111 CET	8.8.8.8	192.168.2.23	0x9cb	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:17.474493980 CET	8.8.8.8	192.168.2.23	0xea2a	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:18.091253996 CET	8.8.8.8	192.168.2.23	0x3f4e	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:18.706626892 CET	8.8.8.8	192.168.2.23	0x4b06	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:19.323231936 CET	8.8.8.8	192.168.2.23	0x823f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:19.958137989 CET	8.8.8.8	192.168.2.23	0x7e6f	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:20.566672087 CET	8.8.8.8	192.168.2.23	0x58d1	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:21.180517912 CET	8.8.8.8	192.168.2.23	0x2e94	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:21.788220882 CET	8.8.8.8	192.168.2.23	0x1cbc	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:22.424065113 CET	8.8.8.8	192.168.2.23	0x5064	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:23.070139885 CET	8.8.8.8	192.168.2.23	0x4254	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:23.704904079 CET	8.8.8.8	192.168.2.23	0xfb24	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:24.341012001 CET	8.8.8.8	192.168.2.23	0x5fea	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:24.963412046 CET	8.8.8.8	192.168.2.23	0xb784	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false
Jan 11, 2025 14:39:25.590637922 CET	8.8.8.8	192.168.2.23	0x7cf5	No error (0)	webhorizon.icu	154.213.187.118	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: spc.elf PID: 6253, Parent PID: 6166

General

Start time (UTC):	13:37:20
Start date (UTC):	11/01/2025
Path:	/tmp/spc.elf
Arguments:	/tmp/spc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: spc.elf PID: 6255, Parent PID: 6253

General

Start time (UTC):	13:37:20
Start date (UTC):	11/01/2025
Path:	/tmp/spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: spc.elf PID: 6257, Parent PID: 6255

General

Start time (UTC):	13:37:20
Start date (UTC):	11/01/2025
Path:	/tmp/spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: spc.elf PID: 6259, Parent PID: 6255

General

Start time (UTC):	13:37:20
Start date (UTC):	11/01/2025
Path:	/tmp/spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: spc.elf PID: 6261, Parent PID: 6259

General

Start time (UTC):	13:37:20
Start date (UTC):	11/01/2025
Path:	/tmp/spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report spc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: spc.elf PID: 6253, Parent PID: 6166

General

Chronological Activities

Analysis Process: spc.elf PID: 6255, Parent PID: 6253

General

Chronological Activities

Analysis Process: spc.elf PID: 6257, Parent PID: 6255

General

Chronological Activities

Analysis Process: spc.elf PID: 6259, Parent PID: 6255

General

Chronological Activities

Analysis Process: spc.elf PID: 6261, Parent PID: 6259

General

Chronological Activities

Linux Analysis Report
spc.elf