Edit tour

Linux Analysis Report
boatnet.spc.elf

Overview

General Information

Sample name:	boatnet.spc.elf
Analysis ID:	1590304
MD5:	561df19695e84ff232204a7be5a8ae31
SHA1:	a79ddf4a5031b93876594147105377bb3ff4156e
SHA256:	915c1966d626e91c49e04f6c1759c290daa0b89451c996a4aaa5ca0c6e3265c5
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	84
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample tries to kill multiple processes (SIGKILL)

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Sample has stripped symbol table

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590304
Start date and time:	2025-01-13 23:02:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	boatnet.spc.elf
Detection:	MAL
Classification:	mal84.spre.troj.linELF@0/0@2/0

Runtime Messages

Command:	/tmp/boatnet.spc.elf
PID:	5437
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

system is lnxubuntu20

boatnet.spc.elf (PID: 5437, Parent: 5361, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/boatnet.spc.elf

boatnet.spc.elf New Fork (PID: 5439, Parent: 5437)

boatnet.spc.elf New Fork (PID: 5440, Parent: 5437)

boatnet.spc.elf New Fork (PID: 5443, Parent: 5437)

xfce4-panel New Fork (PID: 5447, Parent: 3147)

wrapper-2.0 (PID: 5447, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5448, Parent: 3147)

wrapper-2.0 (PID: 5448, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5449, Parent: 3147)

wrapper-2.0 (PID: 5449, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5450, Parent: 3147)

wrapper-2.0 (PID: 5450, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

xfce4-panel New Fork (PID: 5451, Parent: 3147)

wrapper-2.0 (PID: 5451, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5452, Parent: 3147)

wrapper-2.0 (PID: 5452, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
boatnet.spc.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
boatnet.spc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
boatnet.spc.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1256c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1260c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1265c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12684:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12698:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
boatnet.spc.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12ab8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
boatnet.spc.elf	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0x124a0:$x1: POST /cdn-cgi/ 0x13338:$s1: LCOGQGPTGP
boatnet.spc.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x124a0:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1256c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1260c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1265c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12684:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12698:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12ab8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0x124a0:$x1: POST /cdn-cgi/ 0x13338:$s1: LCOGQGPTGP
5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x124a0:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1256c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1260c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1265c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12684:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12698:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12ab8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0x124a0:$x1: POST /cdn-cgi/ 0x13338:$s1: LCOGQGPTGP
5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x124a0:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: boatnet.spc.elf PID: 5437	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: boatnet.spc.elf PID: 5437	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1246:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1282:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1296:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12aa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12be:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1322:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1336:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x134a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x135e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1372:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1386:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x139a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13ae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13c2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13d6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: boatnet.spc.elf PID: 5437	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1704:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: boatnet.spc.elf PID: 5440	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: boatnet.spc.elf PID: 5440	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6f12:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f26:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f3a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f4e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f62:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f76:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f8a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f9e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fb2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fc6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fda:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7002:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7016:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x702a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x703e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7052:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7066:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x707a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x708e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70a2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: boatnet.spc.elf PID: 5440	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x73d0:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 13 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: boatnet.spc.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: boatnet.spc.elf	Virustotal: Detection: 65%			Perma Link
Source: boatnet.spc.elf	ReversingLabs: Detection: 71%

Source: global traffic

TCP traffic: 192.168.2.13:59566 -> 96.62.214.10:3778

Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 96.62.214.10

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

System Summary

Malicious sample detected (through community Yara rule)

Source: boatnet.spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: boatnet.spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: boatnet.spc.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: boatnet.spc.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: Process Memory Space: boatnet.spc.elf PID: 5437, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: boatnet.spc.elf PID: 5437, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: boatnet.spc.elf PID: 5440, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: boatnet.spc.elf PID: 5440, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3208, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5447, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5448, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5449, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5450, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5451, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5452, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3208, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5447, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5448, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5449, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5450, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5451, result: successful	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	SIGKILL sent: pid: 5452, result: successful	Jump to behavior

Source: boatnet.spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: boatnet.spc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: boatnet.spc.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: boatnet.spc.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: Process Memory Space: boatnet.spc.elf PID: 5437, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: boatnet.spc.elf PID: 5437, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: boatnet.spc.elf PID: 5440, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: boatnet.spc.elf PID: 5440, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal84.spre.troj.linELF@0/0@2/0

Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5385/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5420/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5421/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3640/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3122/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3638/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3639/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3117/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3114/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/518/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/519/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3637/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3134/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3375/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3132/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3095/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1745/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1866/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/884/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1982/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/765/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3246/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/767/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1906/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1748/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3646/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3768/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5287/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5443/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1482/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1480/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1755/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1238/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1875/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/2964/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3413/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1751/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1872/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/2961/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/778/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/659/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/418/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/816/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1879/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5450/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5451/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5452/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1891/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3310/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3153/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/780/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/660/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1921/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/783/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1765/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/2974/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1400/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1884/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3424/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/2972/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3147/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/2970/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1881/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3146/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3300/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5447/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1805/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5448/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1925/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1804/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/5449/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1648/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1922/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3429/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3442/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3165/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3164/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3163/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3162/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/790/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3161/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/792/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/793/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/672/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1930/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/795/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/674/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/3315/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1411/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/2984/cmdline	Jump to behavior
Source: /tmp/boatnet.spc.elf (PID: 5439)	File opened: /proc/1410/cmdline	Jump to behavior

Source: /tmp/boatnet.spc.elf (PID: 5437)

Queries kernel information via 'uname':

Jump to behavior

Source: boatnet.spc.elf, 5437.1.0000558928b26000.0000558928bab000.rw-.sdmp, boatnet.spc.elf, 5440.1.0000558928b26000.0000558928bab000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: boatnet.spc.elf, 5437.1.0000558928b26000.0000558928bab000.rw-.sdmp, boatnet.spc.elf, 5440.1.0000558928b26000.0000558928bab000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/sparc
Source: boatnet.spc.elf, 5437.1.00007ffc01caf000.00007ffc01cd0000.rw-.sdmp, boatnet.spc.elf, 5440.1.00007ffc01caf000.00007ffc01cd0000.rw-.sdmp	Binary or memory string: 8x86_64/usr/bin/qemu-sparc/tmp/boatnet.spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/boatnet.spc.elf
Source: boatnet.spc.elf, 5437.1.00007ffc01caf000.00007ffc01cd0000.rw-.sdmp, boatnet.spc.elf, 5440.1.00007ffc01caf000.00007ffc01cd0000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: boatnet.spc.elf, type: SAMPLE
Source: Yara match	File source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: boatnet.spc.elf PID: 5437, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: boatnet.spc.elf PID: 5440, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: boatnet.spc.elf, type: SAMPLE
Source: Yara match	File source: 5440.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5437.1.00007f3c00011000.00007f3c00025000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: boatnet.spc.elf PID: 5437, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: boatnet.spc.elf PID: 5440, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
boatnet.spc.elf	65%	Virustotal		Browse
boatnet.spc.elf	71%	ReversingLabs	Linux.Trojan.Mirai
boatnet.spc.elf	100%	Avira	EXP/ELF.Gafgyt.Z.F

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
96.62.214.10	unknown	United States		35908	VPLSNETUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
96.62.214.10	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse
96.62.214.10	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	armv7l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	mipsel.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	elitebotnet.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24
	t5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	2.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	t6.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
VPLSNETUS	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	96.62.214.10
	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse	96.62.214.10
	armv6l.elf	Get hash	malicious	Unknown	Browse	174.139.77.182
	Tepe - 20000000826476479.exe	Get hash	malicious	MassLogger RAT	Browse	74.119.238.7
	Tepe - 20000000826476479.exe	Get hash	malicious	MassLogger RAT	Browse	74.119.238.7
	http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9	Get hash	malicious	Phisher	Browse	67.198.205.87
	Fantazy.arm4.elf	Get hash	malicious	Unknown	Browse	67.229.74.151
	na.elf	Get hash	malicious	Mirai	Browse	98.126.6.69
	loligang.arm.elf	Get hash	malicious	Mirai	Browse	74.222.148.221
	rebirth.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	110.34.245.254

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.190124302411486
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	boatnet.spc.elf
File size:	82'952 bytes
MD5:	561df19695e84ff232204a7be5a8ae31
SHA1:	a79ddf4a5031b93876594147105377bb3ff4156e
SHA256:	915c1966d626e91c49e04f6c1759c290daa0b89451c996a4aaa5ca0c6e3265c5
SHA512:	2d0aa73b9651b8c41a040a6efb516b87adde2baf0cc0de79c13aa4198286df4429ded789b7afc67c646c211096588a522665b01958cd1d317353d444fd5214e7
SSDEEP:	1536:TKHfnkeTVw0gnTSajpuHrcSHC1UlbotP0RnHLQ5BrKgk+MLZEm+I:G/k49LZi1UResrQ5VKgbMtEm+I
TLSH:	73835C21B53E2B13D0E1F47E21BB8755B2E16ACE26A4C64E7E720E4FFF2155068439B4
File Content Preview:	.ELF...........................4..Bx.....4. ...(......................?X..?X..............@...@...@....8...x........dt.Q................................@..(....@.H.................#.....b8..`.....!..... ...@.....".........`......$ ... ...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	82552
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0x123dc	0x0	0x6	AX	4
.fini	PROGBITS	0x2248c	0x1248c	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x224a0	0x124a0	0x1ab8	0x0	0x2	A	8
.ctors	PROGBITS	0x34000	0x14000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x34008	0x14008	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x34018	0x14018	0x220	0x0	0x3	WA	8
.bss	NOBITS	0x34238	0x14238	0x440	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x14238	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x13f58	0x13f58	6.2171	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x14000	0x34000	0x34000	0x238	0x678	2.9453	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 23:03:02.597851992 CET	59566	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:02.603065968 CET	3778	59566	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:02.603127003 CET	59566	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:02.619424105 CET	59566	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:02.624515057 CET	3778	59566	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:02.624573946 CET	59566	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:02.629389048 CET	3778	59566	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:03.393002033 CET	3778	59566	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:03.393080950 CET	59566	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:03.393372059 CET	59566	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:03.395057917 CET	59568	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:03.401629925 CET	3778	59568	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:03.401727915 CET	59568	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:03.405175924 CET	59568	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:03.410095930 CET	3778	59568	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:03.411257982 CET	59568	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:03.416392088 CET	3778	59568	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:04.190045118 CET	3778	59568	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:04.190129995 CET	59568	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.190196037 CET	59568	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.194016933 CET	59570	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.198976040 CET	3778	59570	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:04.199126005 CET	59570	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.206521034 CET	59570	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.211376905 CET	3778	59570	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:04.211471081 CET	59570	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.216301918 CET	3778	59570	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:04.970084906 CET	3778	59570	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:04.970200062 CET	59570	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.970303059 CET	59570	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.971170902 CET	59572	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.976070881 CET	3778	59572	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:04.976130009 CET	59572	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.977905989 CET	59572	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.982750893 CET	3778	59572	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:04.982805014 CET	59572	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:04.987628937 CET	3778	59572	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:05.765022993 CET	3778	59572	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:05.765100002 CET	59572	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:05.765176058 CET	59572	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:05.775783062 CET	59574	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:05.781174898 CET	3778	59574	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:05.781264067 CET	59574	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:05.783291101 CET	59574	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:05.788716078 CET	3778	59574	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:05.788777113 CET	59574	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:05.794032097 CET	3778	59574	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:06.556096077 CET	3778	59574	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:06.556189060 CET	59574	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:06.556271076 CET	59574	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:06.556822062 CET	59576	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:06.561719894 CET	3778	59576	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:06.561780930 CET	59576	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:06.562974930 CET	59576	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:06.567876101 CET	3778	59576	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:06.567919016 CET	59576	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:06.572779894 CET	3778	59576	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:07.368453979 CET	3778	59576	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:07.368534088 CET	59576	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:07.371124983 CET	59576	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:07.379429102 CET	59578	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:07.384355068 CET	3778	59578	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:07.385337114 CET	59578	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:07.398365974 CET	59578	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:07.403281927 CET	3778	59578	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:07.403338909 CET	59578	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:07.408204079 CET	3778	59578	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:08.161597967 CET	3778	59578	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:08.161659002 CET	59578	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.161706924 CET	59578	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.162434101 CET	59580	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.167376995 CET	3778	59580	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:08.167442083 CET	59580	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.169214010 CET	59580	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.174160004 CET	3778	59580	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:08.174211025 CET	59580	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.179040909 CET	3778	59580	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:08.968043089 CET	3778	59580	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:08.968168974 CET	59580	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.968168974 CET	59580	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.969486952 CET	59582	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.974313021 CET	3778	59582	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:08.974394083 CET	59582	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.976679087 CET	59582	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.981631994 CET	3778	59582	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:08.981683016 CET	59582	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:08.986485958 CET	3778	59582	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:09.751559019 CET	3778	59582	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:09.751652002 CET	59582	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:09.751743078 CET	59582	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:09.753073931 CET	59584	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:09.757997990 CET	3778	59584	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:09.758045912 CET	59584	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:09.760951996 CET	59584	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:09.765710115 CET	3778	59584	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:09.765752077 CET	59584	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:09.770458937 CET	3778	59584	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:10.532641888 CET	3778	59584	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:10.535343885 CET	59584	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:10.535343885 CET	59584	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:10.543344021 CET	59586	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:10.548219919 CET	3778	59586	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:10.548446894 CET	59586	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:10.552743912 CET	59586	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:10.557605028 CET	3778	59586	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:10.557777882 CET	59586	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:10.562588930 CET	3778	59586	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:11.340143919 CET	3778	59586	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:11.340303898 CET	59586	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:11.340303898 CET	59586	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:11.340997934 CET	59588	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:11.345824003 CET	3778	59588	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:11.345879078 CET	59588	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:11.347316980 CET	59588	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:11.352155924 CET	3778	59588	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:11.352258921 CET	59588	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:11.357080936 CET	3778	59588	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:12.148699999 CET	3778	59588	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:12.148873091 CET	59588	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.149017096 CET	59588	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.151484013 CET	59590	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.156279087 CET	3778	59590	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:12.156327963 CET	59590	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.159030914 CET	59590	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.163893938 CET	3778	59590	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:12.163930893 CET	59590	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.168689013 CET	3778	59590	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:12.937572002 CET	3778	59590	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:12.937690020 CET	59590	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.937791109 CET	59590	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.938421011 CET	59592	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.943278074 CET	3778	59592	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:12.943331003 CET	59592	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.944284916 CET	59592	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.949058056 CET	3778	59592	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:12.949110031 CET	59592	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:12.953856945 CET	3778	59592	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:13.760977030 CET	3778	59592	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:13.761075974 CET	59592	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:13.761116028 CET	59592	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:13.761790037 CET	59594	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:13.766669989 CET	3778	59594	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:13.766817093 CET	59594	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:13.767668009 CET	59594	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:13.772574902 CET	3778	59594	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:13.772618055 CET	59594	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:13.777468920 CET	3778	59594	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:14.562807083 CET	3778	59594	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:14.562963009 CET	59594	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:14.563065052 CET	59594	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:14.563831091 CET	59596	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:14.568670988 CET	3778	59596	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:14.568722010 CET	59596	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:14.569669008 CET	59596	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:14.574419022 CET	3778	59596	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:14.574481964 CET	59596	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:14.579368114 CET	3778	59596	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:15.392452955 CET	3778	59596	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:15.392551899 CET	59596	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:15.392605066 CET	59596	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:15.393296003 CET	59598	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:15.398102999 CET	3778	59598	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:15.398148060 CET	59598	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:15.398874044 CET	59598	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:15.403707981 CET	3778	59598	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:15.403778076 CET	59598	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:15.408641100 CET	3778	59598	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:16.197990894 CET	3778	59598	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:16.198136091 CET	59598	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:16.198188066 CET	59598	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:16.203512907 CET	59600	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:16.208323002 CET	3778	59600	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:16.208393097 CET	59600	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:16.225491047 CET	59600	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:16.232541084 CET	3778	59600	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:16.232577085 CET	59600	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:16.237991095 CET	3778	59600	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:17.053762913 CET	3778	59600	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:17.053873062 CET	59600	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.053965092 CET	59600	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.054630995 CET	59602	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.059611082 CET	3778	59602	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:17.059678078 CET	59602	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.060717106 CET	59602	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.065520048 CET	3778	59602	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:17.065562963 CET	59602	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.070364952 CET	3778	59602	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:17.831813097 CET	3778	59602	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:17.832108974 CET	59602	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.832109928 CET	59602	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.832870007 CET	59604	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.837678909 CET	3778	59604	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:17.837749004 CET	59604	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.838869095 CET	59604	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.843657017 CET	3778	59604	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:17.843697071 CET	59604	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:17.848507881 CET	3778	59604	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:18.620743990 CET	3778	59604	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:18.620953083 CET	59604	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:18.621063948 CET	59604	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:18.621597052 CET	59606	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:18.626420021 CET	3778	59606	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:18.626501083 CET	59606	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:18.627546072 CET	59606	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:18.632397890 CET	3778	59606	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:18.632473946 CET	59606	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:18.637245893 CET	3778	59606	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:19.408884048 CET	3778	59606	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:19.409044027 CET	59606	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:19.409044027 CET	59606	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:19.409666061 CET	59608	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:19.414529085 CET	3778	59608	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:19.414587021 CET	59608	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:19.415401936 CET	59608	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:19.421067953 CET	3778	59608	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:19.421116114 CET	59608	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:19.425972939 CET	3778	59608	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:20.242405891 CET	3778	59608	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:20.242650032 CET	59608	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:20.242650032 CET	59608	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:20.243704081 CET	59610	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:20.249264956 CET	3778	59610	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:20.249320984 CET	59610	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:20.250605106 CET	59610	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:20.255398035 CET	3778	59610	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:20.255445957 CET	59610	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:20.260221958 CET	3778	59610	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:21.049542904 CET	3778	59610	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:21.049798965 CET	59610	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.049798965 CET	59610	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.050616980 CET	59612	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.055434942 CET	3778	59612	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:21.055494070 CET	59612	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.056817055 CET	59612	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.061592102 CET	3778	59612	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:21.061631918 CET	59612	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.066389084 CET	3778	59612	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:21.840769053 CET	3778	59612	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:21.840837002 CET	59612	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.840886116 CET	59612	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.841998100 CET	59614	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.846756935 CET	3778	59614	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:21.846807003 CET	59614	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.847654104 CET	59614	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.852500916 CET	3778	59614	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:21.852555990 CET	59614	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:21.857335091 CET	3778	59614	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:22.626530886 CET	3778	59614	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:22.626857996 CET	59614	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:22.626857996 CET	59614	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:22.627317905 CET	59616	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:22.632224083 CET	3778	59616	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:22.632286072 CET	59616	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:22.633857012 CET	59616	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:22.638639927 CET	3778	59616	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:22.638694048 CET	59616	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:22.643522978 CET	3778	59616	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:23.425328016 CET	3778	59616	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:23.425477028 CET	59616	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:23.425559998 CET	59616	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:23.426429987 CET	59618	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:23.431221962 CET	3778	59618	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:23.431303978 CET	59618	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:23.432357073 CET	59618	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:23.437213898 CET	3778	59618	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:23.437266111 CET	59618	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:23.442333937 CET	3778	59618	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:24.204385996 CET	3778	59618	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:24.204626083 CET	59618	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:24.204626083 CET	59618	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:24.206526041 CET	59620	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:24.211395979 CET	3778	59620	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:24.211450100 CET	59620	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:24.212598085 CET	59620	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:24.217406034 CET	3778	59620	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:24.217459917 CET	59620	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:24.222299099 CET	3778	59620	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:25.003649950 CET	3778	59620	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:25.003777027 CET	59620	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.003930092 CET	59620	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.004847050 CET	59622	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.009722948 CET	3778	59622	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:25.009799004 CET	59622	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.010742903 CET	59622	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.015620947 CET	3778	59622	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:25.015680075 CET	59622	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.020528078 CET	3778	59622	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:25.786493063 CET	3778	59622	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:25.786562920 CET	59622	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.786725998 CET	59622	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.787858009 CET	59624	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.792773962 CET	3778	59624	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:25.792839050 CET	59624	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.794321060 CET	59624	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.799186945 CET	3778	59624	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:25.799248934 CET	59624	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:25.804069042 CET	3778	59624	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:26.563307047 CET	3778	59624	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:26.563683987 CET	59624	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:26.563684940 CET	59624	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:26.564927101 CET	59626	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:26.569931030 CET	3778	59626	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:26.569998026 CET	59626	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:26.571543932 CET	59626	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:26.576386929 CET	3778	59626	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:26.576443911 CET	59626	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:26.581299067 CET	3778	59626	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:27.366553068 CET	3778	59626	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:27.366863012 CET	59626	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:27.366863012 CET	59626	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:27.368571043 CET	59628	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:27.373497963 CET	3778	59628	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:27.373610020 CET	59628	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:27.375264883 CET	59628	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:27.380147934 CET	3778	59628	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:27.380227089 CET	59628	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:27.385070086 CET	3778	59628	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:28.203478098 CET	3778	59628	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:28.203661919 CET	59628	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:28.203663111 CET	59628	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:28.204618931 CET	59630	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:28.209505081 CET	3778	59630	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:28.209567070 CET	59630	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:28.210623026 CET	59630	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:28.215504885 CET	3778	59630	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:28.215555906 CET	59630	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:28.220406055 CET	3778	59630	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:28.998286009 CET	3778	59630	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:28.998519897 CET	59630	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:28.998519897 CET	59630	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:28.999463081 CET	59632	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.004411936 CET	3778	59632	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:29.004466057 CET	59632	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.005680084 CET	59632	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.010588884 CET	3778	59632	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:29.010637045 CET	59632	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.015419006 CET	3778	59632	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:29.800715923 CET	3778	59632	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:29.800913095 CET	59632	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.800913095 CET	59632	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.801548004 CET	59634	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.806360960 CET	3778	59634	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:29.806421995 CET	59634	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.808619022 CET	59634	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.813386917 CET	3778	59634	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:29.813442945 CET	59634	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:29.818304062 CET	3778	59634	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:30.598790884 CET	3778	59634	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:30.599103928 CET	59634	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:30.599104881 CET	59634	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:30.599869967 CET	59636	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:30.604746103 CET	3778	59636	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:30.604796886 CET	59636	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:30.605967999 CET	59636	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:30.610800028 CET	3778	59636	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:30.610845089 CET	59636	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:30.615633011 CET	3778	59636	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:31.397406101 CET	3778	59636	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:31.397553921 CET	59636	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:31.397583961 CET	59636	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:31.398667097 CET	59638	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:31.403527975 CET	3778	59638	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:31.403635979 CET	59638	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:31.404711962 CET	59638	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:31.409537077 CET	3778	59638	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:31.409663916 CET	59638	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:31.414477110 CET	3778	59638	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:32.210993052 CET	3778	59638	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:32.211265087 CET	59638	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:32.211265087 CET	59638	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:32.212040901 CET	59640	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:32.216900110 CET	3778	59640	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:32.216962099 CET	59640	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:32.217885017 CET	59640	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:32.222671032 CET	3778	59640	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:32.222718954 CET	59640	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:32.227514029 CET	3778	59640	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:33.000392914 CET	3778	59640	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:33.000642061 CET	59640	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.000642061 CET	59640	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.001672029 CET	59642	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.006495953 CET	3778	59642	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:33.006548882 CET	59642	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.007711887 CET	59642	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.012501001 CET	3778	59642	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:33.012593985 CET	59642	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.017421007 CET	3778	59642	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:33.792664051 CET	3778	59642	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:33.792929888 CET	59642	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.792929888 CET	59642	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.793776035 CET	59644	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.798671961 CET	3778	59644	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:33.798837900 CET	59644	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.799972057 CET	59644	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.804820061 CET	3778	59644	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:33.804908037 CET	59644	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:33.809806108 CET	3778	59644	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:34.572072983 CET	3778	59644	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:34.572285891 CET	59644	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:34.572285891 CET	59644	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:34.573065042 CET	59646	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:34.577949047 CET	3778	59646	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:34.577999115 CET	59646	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:34.578982115 CET	59646	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:34.583761930 CET	3778	59646	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:34.583811998 CET	59646	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:34.588607073 CET	3778	59646	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:35.352022886 CET	3778	59646	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:35.352133989 CET	59646	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:35.352133989 CET	59646	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:35.353044033 CET	59648	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:35.357887983 CET	3778	59648	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:35.357984066 CET	59648	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:35.359251976 CET	59648	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:35.364041090 CET	3778	59648	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:35.364109039 CET	59648	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:35.368926048 CET	3778	59648	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:36.169712067 CET	3778	59648	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:36.170361996 CET	59648	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:36.170361996 CET	59648	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:36.171325922 CET	59650	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:36.176157951 CET	3778	59650	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:36.176218987 CET	59650	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:36.177413940 CET	59650	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:36.182231903 CET	3778	59650	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:36.182291031 CET	59650	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:36.187159061 CET	3778	59650	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:37.020131111 CET	3778	59650	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:37.020344019 CET	59650	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.020344019 CET	59650	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.021286011 CET	59652	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.026149988 CET	3778	59652	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:37.026207924 CET	59652	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.027354002 CET	59652	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.032191038 CET	3778	59652	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:37.032241106 CET	59652	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.037079096 CET	3778	59652	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:37.834326982 CET	3778	59652	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:37.834594011 CET	59652	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.834594011 CET	59652	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.835344076 CET	59654	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.840199947 CET	3778	59654	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:37.840257883 CET	59654	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.841507912 CET	59654	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.846326113 CET	3778	59654	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:37.846379995 CET	59654	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:37.851274014 CET	3778	59654	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:38.612603903 CET	3778	59654	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:38.612720013 CET	59654	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:38.612766981 CET	59654	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:38.613774061 CET	59656	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:38.618760109 CET	3778	59656	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:38.618829966 CET	59656	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:38.620068073 CET	59656	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:38.624963999 CET	3778	59656	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:38.625014067 CET	59656	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:38.630168915 CET	3778	59656	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:39.418241024 CET	3778	59656	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:39.418562889 CET	59656	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:39.418562889 CET	59656	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:39.419367075 CET	59658	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:39.424225092 CET	3778	59658	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:39.424294949 CET	59658	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:39.425504923 CET	59658	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:39.430727959 CET	3778	59658	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:39.430780888 CET	59658	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:39.436316967 CET	3778	59658	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:40.216192961 CET	3778	59658	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:40.216619968 CET	59658	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:40.216619968 CET	59658	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:40.217257977 CET	59660	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:40.222474098 CET	3778	59660	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:40.222536087 CET	59660	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:40.223634005 CET	59660	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:40.228574991 CET	3778	59660	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:40.228673935 CET	59660	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:40.233499050 CET	3778	59660	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:40.996922016 CET	3778	59660	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:40.997116089 CET	59660	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:40.997116089 CET	59660	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:40.998061895 CET	59662	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.003012896 CET	3778	59662	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:41.003071070 CET	59662	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.004014969 CET	59662	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.008882046 CET	3778	59662	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:41.008985996 CET	59662	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.013811111 CET	3778	59662	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:41.777606964 CET	3778	59662	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:41.777872086 CET	59662	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.778053045 CET	59662	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.779040098 CET	59664	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.783977032 CET	3778	59664	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:41.784092903 CET	59664	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.785032988 CET	59664	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.789901018 CET	3778	59664	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:41.789972067 CET	59664	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:41.794790030 CET	3778	59664	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:42.585714102 CET	3778	59664	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:42.585954905 CET	59664	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:42.585954905 CET	59664	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:42.586750031 CET	59666	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:42.591634989 CET	3778	59666	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:42.591696978 CET	59666	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:42.592684984 CET	59666	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:42.597531080 CET	3778	59666	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:42.597630024 CET	59666	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:42.602516890 CET	3778	59666	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:43.384751081 CET	3778	59666	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:43.385055065 CET	59666	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:43.385094881 CET	59666	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:43.386023045 CET	59668	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:43.390942097 CET	3778	59668	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:43.391001940 CET	59668	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:43.391650915 CET	59668	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:43.396490097 CET	3778	59668	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:43.396539927 CET	59668	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:43.401668072 CET	3778	59668	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:44.185455084 CET	3778	59668	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:44.185676098 CET	59668	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:44.185760975 CET	59668	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:44.186824083 CET	59670	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:44.192070961 CET	3778	59670	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:44.192131042 CET	59670	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:44.193348885 CET	59670	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:44.198259115 CET	3778	59670	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:44.198313951 CET	59670	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:44.203147888 CET	3778	59670	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:45.011167049 CET	3778	59670	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:45.011375904 CET	59670	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.011375904 CET	59670	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.012025118 CET	59672	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.016940117 CET	3778	59672	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:45.017008066 CET	59672	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.018011093 CET	59672	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.022874117 CET	3778	59672	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:45.022932053 CET	59672	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.027770042 CET	3778	59672	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:45.805690050 CET	3778	59672	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:45.805847883 CET	59672	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.805892944 CET	59672	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.806873083 CET	59674	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.812117100 CET	3778	59674	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:45.812202930 CET	59674	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.813287020 CET	59674	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.818222046 CET	3778	59674	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:45.818288088 CET	59674	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:45.823432922 CET	3778	59674	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:46.594305038 CET	3778	59674	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:46.594537020 CET	59674	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:46.594537020 CET	59674	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:46.595467091 CET	59676	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:46.600778103 CET	3778	59676	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:46.600856066 CET	59676	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:46.602099895 CET	59676	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:46.607393026 CET	3778	59676	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:46.607466936 CET	59676	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:46.612724066 CET	3778	59676	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:47.374187946 CET	3778	59676	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:47.374342918 CET	59676	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:47.374448061 CET	59676	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:47.375663042 CET	59678	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:47.380505085 CET	3778	59678	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:47.380562067 CET	59678	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:47.381589890 CET	59678	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:47.386431932 CET	3778	59678	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:47.386482000 CET	59678	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:47.391341925 CET	3778	59678	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:48.183768034 CET	3778	59678	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:48.184262991 CET	59678	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:48.184262991 CET	59678	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:48.184962034 CET	59680	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:48.189968109 CET	3778	59680	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:48.190040112 CET	59680	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:48.191190958 CET	59680	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:48.196245909 CET	3778	59680	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:48.196423054 CET	59680	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:48.201407909 CET	3778	59680	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:48.999088049 CET	3778	59680	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:48.999460936 CET	59680	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:48.999460936 CET	59680	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.000010967 CET	59682	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.005076885 CET	3778	59682	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:49.005148888 CET	59682	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.006114006 CET	59682	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.010951042 CET	3778	59682	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:49.011018038 CET	59682	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.015912056 CET	3778	59682	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:49.787471056 CET	3778	59682	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:49.787791967 CET	59682	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.787791967 CET	59682	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.788500071 CET	59684	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.793812990 CET	3778	59684	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:49.793889999 CET	59684	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.794981003 CET	59684	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.800246954 CET	3778	59684	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:49.800318003 CET	59684	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:49.805777073 CET	3778	59684	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:50.580430031 CET	3778	59684	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:50.580733061 CET	59684	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:50.580816984 CET	59684	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:50.581720114 CET	59686	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:50.587022066 CET	3778	59686	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:50.587212086 CET	59686	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:50.588325977 CET	59686	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:50.593312979 CET	3778	59686	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:50.593424082 CET	59686	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:50.598434925 CET	3778	59686	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:51.360733032 CET	3778	59686	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:51.360838890 CET	59686	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:51.360893965 CET	59686	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:51.362082005 CET	59688	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:51.367063999 CET	3778	59688	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:51.367181063 CET	59688	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:51.368521929 CET	59688	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:51.373367071 CET	3778	59688	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:51.373420954 CET	59688	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:51.378334999 CET	3778	59688	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:52.177416086 CET	3778	59688	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:52.177628040 CET	59688	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.177628040 CET	59688	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.178307056 CET	59690	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.183187962 CET	3778	59690	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:52.183250904 CET	59690	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.184215069 CET	59690	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.189238071 CET	3778	59690	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:52.189296961 CET	59690	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.194117069 CET	3778	59690	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:52.956145048 CET	3778	59690	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:52.956331968 CET	59690	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.956383944 CET	59690	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.957500935 CET	59692	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.962515116 CET	3778	59692	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:52.962583065 CET	59692	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.963926077 CET	59692	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.969321966 CET	3778	59692	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:52.969491005 CET	59692	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:52.974770069 CET	3778	59692	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:53.770899057 CET	3778	59692	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:53.771307945 CET	59692	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:53.771307945 CET	59692	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:53.772082090 CET	59694	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:53.777661085 CET	3778	59694	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:53.777738094 CET	59694	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:53.779120922 CET	59694	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:53.784375906 CET	3778	59694	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:53.784461021 CET	59694	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:53.789943933 CET	3778	59694	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:54.579308987 CET	3778	59694	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:54.579725981 CET	59694	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:54.579725981 CET	59694	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:54.580631018 CET	59696	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:54.585942984 CET	3778	59696	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:54.586030960 CET	59696	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:54.587472916 CET	59696	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:54.592652082 CET	3778	59696	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:54.592823029 CET	59696	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:54.598366022 CET	3778	59696	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:55.369580030 CET	3778	59696	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:55.369802952 CET	59696	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:55.369803905 CET	59696	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:55.370644093 CET	59698	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:55.376051903 CET	3778	59698	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:55.376214981 CET	59698	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:55.377672911 CET	59698	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:55.382821083 CET	3778	59698	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:55.383017063 CET	59698	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:55.388370037 CET	3778	59698	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:56.182107925 CET	3778	59698	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:56.182293892 CET	59698	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.182356119 CET	59698	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.183516979 CET	59700	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.190937996 CET	3778	59700	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:56.191123962 CET	59700	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.192504883 CET	59700	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.198445082 CET	3778	59700	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:56.198622942 CET	59700	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.204602957 CET	3778	59700	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:56.975928068 CET	3778	59700	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:56.976180077 CET	59700	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.976180077 CET	59700	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.977220058 CET	59702	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.982275963 CET	3778	59702	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:56.982460976 CET	59702	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.983803034 CET	59702	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.988953114 CET	3778	59702	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:56.989022970 CET	59702	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:56.993921995 CET	3778	59702	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:57.784466028 CET	3778	59702	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:57.784724951 CET	59702	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:57.784810066 CET	59702	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:57.785712004 CET	59704	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:57.790937901 CET	3778	59704	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:57.791011095 CET	59704	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:57.792033911 CET	59704	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:57.797211885 CET	3778	59704	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:57.797286987 CET	59704	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:57.802536011 CET	3778	59704	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:58.584778070 CET	3778	59704	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:58.585050106 CET	59704	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:58.585139990 CET	59704	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:58.586242914 CET	59706	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:58.591609955 CET	3778	59706	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:58.591794014 CET	59706	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:58.592885017 CET	59706	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:58.598017931 CET	3778	59706	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:58.598186970 CET	59706	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:58.603368998 CET	3778	59706	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:59.384887934 CET	3778	59706	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:59.385096073 CET	59706	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:59.385155916 CET	59706	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:59.386328936 CET	59708	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:59.391506910 CET	3778	59708	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:59.391573906 CET	59708	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:59.392971039 CET	59708	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:59.398299932 CET	3778	59708	96.62.214.10	192.168.2.13
Jan 13, 2025 23:03:59.398346901 CET	59708	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:03:59.403661966 CET	3778	59708	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:00.185803890 CET	3778	59708	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:00.185982943 CET	59708	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.186114073 CET	59708	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.187165022 CET	59710	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.195130110 CET	3778	59710	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:00.195333958 CET	59710	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.196590900 CET	59710	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.201898098 CET	3778	59710	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:00.202044964 CET	59710	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.207668066 CET	3778	59710	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:00.988023996 CET	3778	59710	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:00.988284111 CET	59710	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.988285065 CET	59710	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.989145994 CET	59712	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.994261980 CET	3778	59712	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:00.994415045 CET	59712	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:00.995827913 CET	59712	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:01.001215935 CET	3778	59712	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:01.001360893 CET	59712	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:01.006733894 CET	3778	59712	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:01.792906046 CET	3778	59712	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:01.793164015 CET	59712	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:01.793164015 CET	59712	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:01.794126034 CET	59714	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:01.799009085 CET	3778	59714	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:01.799074888 CET	59714	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:01.800357103 CET	59714	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:01.805252075 CET	3778	59714	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:01.805318117 CET	59714	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:01.810240030 CET	3778	59714	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:02.581053972 CET	3778	59714	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:02.581356049 CET	59714	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:02.581356049 CET	59714	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:02.582401037 CET	59716	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:02.587843895 CET	3778	59716	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:02.588042021 CET	59716	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:02.589235067 CET	59716	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:02.594630957 CET	3778	59716	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:02.594818115 CET	59716	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:02.600014925 CET	3778	59716	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:03.361363888 CET	3778	59716	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:03.361790895 CET	59716	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:03.361792088 CET	59716	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:03.362749100 CET	59718	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:03.368104935 CET	3778	59718	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:03.368422985 CET	59718	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:03.369631052 CET	59718	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:03.374792099 CET	3778	59718	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:03.374908924 CET	59718	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:03.380081892 CET	3778	59718	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:04.156994104 CET	3778	59718	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:04.157107115 CET	59718	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.157147884 CET	59718	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.157957077 CET	59720	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.162990093 CET	3778	59720	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:04.163053989 CET	59720	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.164253950 CET	59720	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.169194937 CET	3778	59720	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:04.169361115 CET	59720	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.174743891 CET	3778	59720	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:04.936602116 CET	3778	59720	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:04.937052011 CET	59720	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.937052011 CET	59720	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.937455893 CET	59722	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.942476034 CET	3778	59722	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:04.942552090 CET	59722	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.943595886 CET	59722	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.948729038 CET	3778	59722	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:04.948837042 CET	59722	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:04.954255104 CET	3778	59722	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:05.756938934 CET	3778	59722	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:05.757276058 CET	59722	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:05.757276058 CET	59722	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:05.758560896 CET	59724	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:05.763828039 CET	3778	59724	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:05.764050961 CET	59724	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:05.765332937 CET	59724	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:05.770225048 CET	3778	59724	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:05.770461082 CET	59724	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:05.775826931 CET	3778	59724	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:06.537590981 CET	3778	59724	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:06.537970066 CET	59724	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:06.537970066 CET	59724	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:06.538547039 CET	59726	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:06.543904066 CET	3778	59726	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:06.544095039 CET	59726	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:06.545106888 CET	59726	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:06.550295115 CET	3778	59726	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:06.550489902 CET	59726	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:06.555535078 CET	3778	59726	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:07.321595907 CET	3778	59726	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:07.322006941 CET	59726	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:07.322007895 CET	59726	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:07.322782040 CET	59728	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:07.327997923 CET	3778	59728	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:07.328191996 CET	59728	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:07.329341888 CET	59728	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:07.334332943 CET	3778	59728	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:07.334533930 CET	59728	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:07.339643955 CET	3778	59728	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:08.102252960 CET	3778	59728	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:08.102602959 CET	59728	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.102602959 CET	59728	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.103358984 CET	59730	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.108689070 CET	3778	59730	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:08.108978033 CET	59730	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.110236883 CET	59730	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.115432978 CET	3778	59730	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:08.115786076 CET	59730	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.121141911 CET	3778	59730	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:08.917658091 CET	3778	59730	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:08.917884111 CET	59730	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.917987108 CET	59730	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.918921947 CET	59732	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.923904896 CET	3778	59732	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:08.924068928 CET	59732	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.925446987 CET	59732	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.930392981 CET	3778	59732	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:08.930527925 CET	59732	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:08.935609102 CET	3778	59732	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:09.697649956 CET	3778	59732	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:09.697798967 CET	59732	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:09.697798967 CET	59732	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:09.698681116 CET	59734	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:09.703635931 CET	3778	59734	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:09.703689098 CET	59734	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:09.704778910 CET	59734	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:09.709841013 CET	3778	59734	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:09.709902048 CET	59734	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:09.714739084 CET	3778	59734	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:10.503751993 CET	3778	59734	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:10.503860950 CET	59734	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:10.503930092 CET	59734	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:10.504941940 CET	59736	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:10.510011911 CET	3778	59736	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:10.510075092 CET	59736	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:10.511173964 CET	59736	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:10.516315937 CET	3778	59736	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:10.516575098 CET	59736	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:10.521990061 CET	3778	59736	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:11.332082987 CET	3778	59736	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:11.332328081 CET	59736	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:11.333529949 CET	59736	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:11.334768057 CET	59738	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:11.340234041 CET	3778	59738	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:11.340445995 CET	59738	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:11.341526985 CET	59738	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:11.346807003 CET	3778	59738	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:11.347060919 CET	59738	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:11.352613926 CET	3778	59738	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:12.140538931 CET	3778	59738	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:12.140814066 CET	59738	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.140815020 CET	59738	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.142158985 CET	59740	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.147300959 CET	3778	59740	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:12.147546053 CET	59740	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.148894072 CET	59740	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.153784990 CET	3778	59740	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:12.153845072 CET	59740	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.158931017 CET	3778	59740	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:12.929933071 CET	3778	59740	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:12.930157900 CET	59740	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.930159092 CET	59740	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.931123972 CET	59742	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.936449051 CET	3778	59742	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:12.936532021 CET	59742	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.937829018 CET	59742	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.943120956 CET	3778	59742	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:12.943306923 CET	59742	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:12.948587894 CET	3778	59742	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:13.748267889 CET	3778	59742	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:13.748420954 CET	59742	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:13.748486996 CET	59742	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:13.749470949 CET	59744	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:13.754676104 CET	3778	59744	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:13.754754066 CET	59744	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:13.755942106 CET	59744	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:13.760994911 CET	3778	59744	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:13.761060953 CET	59744	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:13.766355991 CET	3778	59744	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:14.574541092 CET	3778	59744	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:14.574791908 CET	59744	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:14.574883938 CET	59744	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:14.576016903 CET	59746	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:14.581664085 CET	3778	59746	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:14.581866026 CET	59746	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:14.583170891 CET	59746	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:14.588777065 CET	3778	59746	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:14.588975906 CET	59746	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:14.594222069 CET	3778	59746	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:15.367103100 CET	3778	59746	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:15.367346048 CET	59746	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:15.367408991 CET	59746	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:15.368309975 CET	59748	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:15.373258114 CET	3778	59748	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:15.373332977 CET	59748	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:15.374644041 CET	59748	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:15.379761934 CET	3778	59748	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:15.379832983 CET	59748	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:15.385039091 CET	3778	59748	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:16.150407076 CET	3778	59748	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:16.150676966 CET	59748	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.150775909 CET	59748	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.151698112 CET	59750	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.156765938 CET	3778	59750	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:16.156847000 CET	59750	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.158090115 CET	59750	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.162988901 CET	3778	59750	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:16.163096905 CET	59750	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.167938948 CET	3778	59750	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:16.962532043 CET	3778	59750	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:16.962784052 CET	59750	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.962785006 CET	59750	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.963824034 CET	59752	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.968786955 CET	3778	59752	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:16.968856096 CET	59752	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.970120907 CET	59752	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.974998951 CET	3778	59752	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:16.975048065 CET	59752	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:16.979933977 CET	3778	59752	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:17.778176069 CET	3778	59752	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:17.778305054 CET	59752	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:17.778414011 CET	59752	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:17.779458046 CET	59754	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:17.789549112 CET	3778	59754	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:17.789613962 CET	59754	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:17.790844917 CET	59754	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:17.798929930 CET	3778	59754	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:17.798988104 CET	59754	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:17.807009935 CET	3778	59754	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:18.572351933 CET	3778	59754	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:18.572550058 CET	59754	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:18.572550058 CET	59754	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:18.573503017 CET	59756	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:18.578429937 CET	3778	59756	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:18.578494072 CET	59756	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:18.579447031 CET	59756	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:18.584331036 CET	3778	59756	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:18.584391117 CET	59756	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:18.589303970 CET	3778	59756	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:19.369203091 CET	3778	59756	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:19.369533062 CET	59756	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:19.369533062 CET	59756	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:19.370564938 CET	59758	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:19.375804901 CET	3778	59758	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:19.375880957 CET	59758	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:19.377157927 CET	59758	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:19.381982088 CET	3778	59758	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:19.382035971 CET	59758	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:19.388139009 CET	3778	59758	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:20.160298109 CET	3778	59758	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:20.160609007 CET	59758	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.160609007 CET	59758	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.161840916 CET	59760	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.167038918 CET	3778	59760	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:20.167160034 CET	59760	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.168476105 CET	59760	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.173629999 CET	3778	59760	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:20.173696041 CET	59760	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.178848028 CET	3778	59760	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:20.941145897 CET	3778	59760	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:20.941452026 CET	59760	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.941452026 CET	59760	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.942408085 CET	59762	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.947912931 CET	3778	59762	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:20.947988987 CET	59762	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.949202061 CET	59762	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.954061031 CET	3778	59762	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:20.954169989 CET	59762	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:20.959597111 CET	3778	59762	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:21.748404026 CET	3778	59762	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:21.748624086 CET	59762	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:21.748716116 CET	59762	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:21.749739885 CET	59764	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:21.755105972 CET	3778	59764	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:21.755306959 CET	59764	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:21.756683111 CET	59764	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:21.761671066 CET	3778	59764	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:21.761779070 CET	59764	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:21.767349005 CET	3778	59764	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:22.566626072 CET	3778	59764	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:22.566773891 CET	59764	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:22.566828012 CET	59764	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:22.568088055 CET	59766	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:22.573179007 CET	3778	59766	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:22.573239088 CET	59766	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:22.574731112 CET	59766	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:22.579705954 CET	3778	59766	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:22.579761982 CET	59766	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:22.584935904 CET	3778	59766	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:23.368098974 CET	3778	59766	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:23.368372917 CET	59766	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:23.368374109 CET	59766	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:23.369262934 CET	59768	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:23.374711037 CET	3778	59768	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:23.374790907 CET	59768	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:23.376133919 CET	59768	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:23.381063938 CET	3778	59768	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:23.381129026 CET	59768	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:23.386837959 CET	3778	59768	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:24.193042994 CET	3778	59768	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:24.193171978 CET	59768	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.193270922 CET	59768	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.194190025 CET	59770	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.199268103 CET	3778	59770	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:24.199351072 CET	59770	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.200599909 CET	59770	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.205781937 CET	3778	59770	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:24.206067085 CET	59770	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.211282969 CET	3778	59770	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:24.972527981 CET	3778	59770	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:24.972831964 CET	59770	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.972990990 CET	59770	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.974258900 CET	59772	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.979686022 CET	3778	59772	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:24.979867935 CET	59772	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.981396914 CET	59772	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.986566067 CET	3778	59772	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:24.986773014 CET	59772	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:24.992094994 CET	3778	59772	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:25.774441004 CET	3778	59772	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:25.774876118 CET	59772	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:25.774876118 CET	59772	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:25.776128054 CET	59774	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:25.781333923 CET	3778	59774	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:25.781544924 CET	59774	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:25.783480883 CET	59774	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:25.788511038 CET	3778	59774	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:25.788625002 CET	59774	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:25.793790102 CET	3778	59774	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:26.575582027 CET	3778	59774	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:26.576016903 CET	59774	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:26.576016903 CET	59774	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:26.577086926 CET	59776	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:26.582551003 CET	3778	59776	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:26.582634926 CET	59776	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:26.583751917 CET	59776	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:26.588756084 CET	3778	59776	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:26.588819027 CET	59776	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:26.594250917 CET	3778	59776	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:27.356451988 CET	3778	59776	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:27.356658936 CET	59776	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:27.356658936 CET	59776	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:27.358114958 CET	59778	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:27.363224030 CET	3778	59778	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:27.363303900 CET	59778	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:27.364511967 CET	59778	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:27.369759083 CET	3778	59778	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:27.369880915 CET	59778	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:27.375104904 CET	3778	59778	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:28.140168905 CET	3778	59778	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:28.140434980 CET	59778	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.140434980 CET	59778	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.141861916 CET	59780	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.148108006 CET	3778	59780	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:28.148302078 CET	59780	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.149641991 CET	59780	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.155966043 CET	3778	59780	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:28.156183004 CET	59780	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.162201881 CET	3778	59780	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:28.947398901 CET	3778	59780	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:28.947673082 CET	59780	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.947674036 CET	59780	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.948956966 CET	59782	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.954474926 CET	3778	59782	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:28.954775095 CET	59782	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.956330061 CET	59782	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.961556911 CET	3778	59782	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:28.961890936 CET	59782	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:28.967554092 CET	3778	59782	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:29.758603096 CET	3778	59782	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:29.759181023 CET	59782	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:29.759181023 CET	59782	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:29.760268927 CET	59784	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:29.765621901 CET	3778	59784	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:29.765723944 CET	59784	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:29.767047882 CET	59784	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:29.771907091 CET	3778	59784	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:29.772070885 CET	59784	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:29.776901960 CET	3778	59784	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:30.568553925 CET	3778	59784	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:30.568960905 CET	59784	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:30.569052935 CET	59784	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:30.570097923 CET	59786	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:30.575268030 CET	3778	59786	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:30.575362921 CET	59786	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:30.576663017 CET	59786	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:30.581885099 CET	3778	59786	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:30.582067013 CET	59786	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:30.587553024 CET	3778	59786	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:31.354089975 CET	3778	59786	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:31.354438066 CET	59786	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:31.354532957 CET	59786	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:31.355618000 CET	59788	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:31.360852003 CET	3778	59788	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:31.361092091 CET	59788	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:31.362370968 CET	59788	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:31.367542982 CET	3778	59788	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:31.367850065 CET	59788	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:31.373049974 CET	3778	59788	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:32.155755997 CET	3778	59788	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:32.156234026 CET	59788	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.156234026 CET	59788	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.156968117 CET	59790	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.162918091 CET	3778	59790	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:32.163000107 CET	59790	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.164175034 CET	59790	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.169495106 CET	3778	59790	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:32.169655085 CET	59790	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.175167084 CET	3778	59790	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:32.958955050 CET	3778	59790	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:32.959389925 CET	59790	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.959389925 CET	59790	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.960402012 CET	59792	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.965884924 CET	3778	59792	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:32.965967894 CET	59792	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.967217922 CET	59792	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.972567081 CET	3778	59792	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:32.972724915 CET	59792	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:32.978936911 CET	3778	59792	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:33.759917974 CET	3778	59792	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:33.760116100 CET	59792	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:33.760116100 CET	59792	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:33.760930061 CET	59794	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:33.765831947 CET	3778	59794	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:33.765906096 CET	59794	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:33.766742945 CET	59794	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:33.771610022 CET	3778	59794	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:33.771675110 CET	59794	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:33.776593924 CET	3778	59794	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:34.559446096 CET	3778	59794	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:34.559633017 CET	59794	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:34.559720039 CET	59794	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:34.560357094 CET	59796	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:34.565192938 CET	3778	59796	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:34.565258026 CET	59796	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:34.565987110 CET	59796	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:34.570785999 CET	3778	59796	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:34.570851088 CET	59796	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:34.577475071 CET	3778	59796	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:35.348486900 CET	3778	59796	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:35.348681927 CET	59796	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:35.348766088 CET	59796	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:35.349555969 CET	59798	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:35.354396105 CET	3778	59798	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:35.354470015 CET	59798	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:35.355640888 CET	59798	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:35.360521078 CET	3778	59798	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:35.360589981 CET	59798	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:35.365469933 CET	3778	59798	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:36.137140036 CET	3778	59798	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:36.137339115 CET	59798	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.137392998 CET	59798	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.138386965 CET	59800	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.143258095 CET	3778	59800	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:36.143362045 CET	59800	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.144458055 CET	59800	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.149290085 CET	3778	59800	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:36.149362087 CET	59800	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.154215097 CET	3778	59800	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:36.917433977 CET	3778	59800	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:36.917656898 CET	59800	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.917742014 CET	59800	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.918654919 CET	59802	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.923511982 CET	3778	59802	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:36.923579931 CET	59802	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.924666882 CET	59802	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.929465055 CET	3778	59802	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:36.929524899 CET	59802	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:36.934362888 CET	3778	59802	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:37.725327969 CET	3778	59802	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:37.725497007 CET	59802	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:37.725497007 CET	59802	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:37.726356983 CET	59804	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:37.732480049 CET	3778	59804	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:37.732558012 CET	59804	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:37.733395100 CET	59804	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:37.738955021 CET	3778	59804	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:37.739022017 CET	59804	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:37.745012045 CET	3778	59804	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:38.511909962 CET	3778	59804	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:38.512136936 CET	59804	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:38.512136936 CET	59804	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:38.512686014 CET	59806	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:38.517677069 CET	3778	59806	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:38.517740011 CET	59806	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:38.518377066 CET	59806	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:38.523267031 CET	3778	59806	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:38.523324966 CET	59806	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:38.528697014 CET	3778	59806	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:41.276220083 CET	3778	59806	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:41.276683092 CET	59806	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:41.276684046 CET	59806	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:41.277590990 CET	59808	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:41.282773972 CET	3778	59808	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:41.282855034 CET	59808	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:41.283958912 CET	59808	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:41.288871050 CET	3778	59808	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:41.288928032 CET	59808	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:41.293819904 CET	3778	59808	96.62.214.10	192.168.2.13
Jan 13, 2025 23:04:51.286672115 CET	59808	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:04:51.292254925 CET	3778	59808	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:02.642467976 CET	3778	59808	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:02.642967939 CET	59808	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:02.643970013 CET	59810	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:02.648170948 CET	3778	59808	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:02.648929119 CET	3778	59810	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:02.649127007 CET	59810	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:02.650178909 CET	59810	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:02.655252934 CET	3778	59810	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:02.655329943 CET	59810	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:02.660290956 CET	3778	59810	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:24.034060955 CET	3778	59810	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:24.034389019 CET	59810	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.035403013 CET	59812	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.039671898 CET	3778	59810	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:24.040874958 CET	3778	59812	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:24.040946960 CET	59812	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.042320013 CET	59812	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.047552109 CET	3778	59812	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:24.047621012 CET	59812	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.055201054 CET	3778	59812	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:24.898505926 CET	3778	59812	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:24.898633957 CET	59812	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.898722887 CET	59812	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.899743080 CET	59814	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.904979944 CET	3778	59814	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:24.905069113 CET	59814	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.906343937 CET	59814	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.911221027 CET	3778	59814	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:24.911334038 CET	59814	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:24.916616917 CET	3778	59814	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:46.286273956 CET	3778	59814	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:46.286391973 CET	59814	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:46.287693977 CET	59816	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:46.291757107 CET	3778	59814	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:46.293054104 CET	3778	59816	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:46.293118000 CET	59816	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:46.294675112 CET	59816	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:46.304826021 CET	3778	59816	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:46.304963112 CET	59816	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:46.310302973 CET	3778	59816	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:47.083061934 CET	3778	59816	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:47.083157063 CET	59816	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:47.083158016 CET	59816	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:47.084233046 CET	59818	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:47.089114904 CET	3778	59818	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:47.089181900 CET	59818	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:47.090673923 CET	59818	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:47.095537901 CET	3778	59818	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:47.095594883 CET	59818	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:47.100466967 CET	3778	59818	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:47.870542049 CET	3778	59818	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:47.870803118 CET	59818	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:47.870851994 CET	59818	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:47.945439100 CET	59820	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:47.950413942 CET	3778	59820	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:47.950464010 CET	59820	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:48.223418951 CET	59820	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:48.228316069 CET	3778	59820	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:48.228440046 CET	59820	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:48.233289957 CET	3778	59820	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:48.738795996 CET	3778	59820	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:48.738922119 CET	59820	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:48.738965988 CET	59820	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:48.739909887 CET	59822	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:48.744693041 CET	3778	59822	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:48.744749069 CET	59822	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:48.746515989 CET	59822	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:48.751269102 CET	3778	59822	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:48.751311064 CET	59822	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:48.756155968 CET	3778	59822	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:49.536866903 CET	3778	59822	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:49.537975073 CET	59822	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:49.537975073 CET	59822	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:49.583393097 CET	59824	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:49.588215113 CET	3778	59824	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:49.595340967 CET	59824	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:49.715450048 CET	59824	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:49.720371962 CET	3778	59824	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:49.723371983 CET	59824	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:49.728224993 CET	3778	59824	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:50.377474070 CET	3778	59824	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:50.377525091 CET	59824	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:50.377554893 CET	59824	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:50.377953053 CET	59826	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:50.382987976 CET	3778	59826	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:50.383044958 CET	59826	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:50.383898020 CET	59826	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:50.388761044 CET	3778	59826	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:50.388796091 CET	59826	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:50.393765926 CET	3778	59826	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:51.177717924 CET	3778	59826	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:51.177997112 CET	59826	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:51.177997112 CET	59826	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:51.178595066 CET	59828	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:51.188079119 CET	3778	59828	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:51.188124895 CET	59828	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:51.189127922 CET	59828	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:51.195069075 CET	3778	59828	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:51.195115089 CET	59828	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:51.201112986 CET	3778	59828	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:51.998509884 CET	3778	59828	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:51.999558926 CET	59828	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:51.999558926 CET	59828	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.006150007 CET	59830	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.011090994 CET	3778	59830	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:52.011174917 CET	59830	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.012096882 CET	59830	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.016932964 CET	3778	59830	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:52.017051935 CET	59830	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.021806002 CET	3778	59830	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:52.798172951 CET	3778	59830	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:52.798373938 CET	59830	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.798373938 CET	59830	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.798950911 CET	59832	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.803776979 CET	3778	59832	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:52.803831100 CET	59832	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.804686069 CET	59832	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.809531927 CET	3778	59832	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:52.809638977 CET	59832	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:52.814517021 CET	3778	59832	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:53.598040104 CET	3778	59832	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:53.598306894 CET	59832	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:53.598306894 CET	59832	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:53.598763943 CET	59834	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:53.603749990 CET	3778	59834	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:53.603815079 CET	59834	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:53.604701042 CET	59834	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:53.609590054 CET	3778	59834	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:53.609688044 CET	59834	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:53.614530087 CET	3778	59834	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:54.406050920 CET	3778	59834	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:54.406161070 CET	59834	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:54.406161070 CET	59834	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:54.407036066 CET	59836	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:54.412364960 CET	3778	59836	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:54.412611961 CET	59836	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:54.413871050 CET	59836	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:54.418771982 CET	3778	59836	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:54.418884039 CET	59836	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:54.423777103 CET	3778	59836	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:55.186582088 CET	3778	59836	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:55.186752081 CET	59836	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.186752081 CET	59836	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.187434912 CET	59838	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.192245960 CET	3778	59838	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:55.192317009 CET	59838	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.193409920 CET	59838	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.198211908 CET	3778	59838	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:55.198261976 CET	59838	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.203088999 CET	3778	59838	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:55.975445032 CET	3778	59838	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:55.975699902 CET	59838	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.975701094 CET	59838	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.981009007 CET	59840	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.986974955 CET	3778	59840	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:55.987030029 CET	59840	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:55.995691061 CET	59840	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:56.000459909 CET	3778	59840	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:56.000504971 CET	59840	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:56.005579948 CET	3778	59840	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:56.799638033 CET	3778	59840	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:56.799865007 CET	59840	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:56.799865007 CET	59840	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:56.800698996 CET	59842	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:56.805639029 CET	3778	59842	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:56.805763006 CET	59842	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:56.806719065 CET	59842	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:56.811861038 CET	3778	59842	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:56.811939001 CET	59842	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:56.817239046 CET	3778	59842	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:57.579266071 CET	3778	59842	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:57.579576969 CET	59842	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:57.579576969 CET	59842	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:57.580347061 CET	59844	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:57.585484982 CET	3778	59844	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:57.585546017 CET	59844	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:57.586486101 CET	59844	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:57.592317104 CET	3778	59844	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:57.592365980 CET	59844	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:57.598020077 CET	3778	59844	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:58.368429899 CET	3778	59844	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:58.368643045 CET	59844	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:58.368643045 CET	59844	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:58.369230032 CET	59846	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:58.374156952 CET	3778	59846	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:58.374265909 CET	59846	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:58.375118017 CET	59846	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:58.379914999 CET	3778	59846	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:58.379993916 CET	59846	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:58.384843111 CET	3778	59846	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:59.181874037 CET	3778	59846	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:59.182142973 CET	59846	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:59.182143927 CET	59846	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:59.182766914 CET	59848	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:59.187807083 CET	3778	59848	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:59.187915087 CET	59848	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:59.188777924 CET	59848	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:59.193658113 CET	3778	59848	96.62.214.10	192.168.2.13
Jan 13, 2025 23:05:59.193734884 CET	59848	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:05:59.200341940 CET	3778	59848	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:00.000036001 CET	3778	59848	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:00.000195980 CET	59848	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.000195980 CET	59848	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.001916885 CET	59850	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.006908894 CET	3778	59850	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:00.006966114 CET	59850	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.007767916 CET	59850	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.012576103 CET	3778	59850	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:00.012623072 CET	59850	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.017508030 CET	3778	59850	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:00.832570076 CET	3778	59850	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:00.832731009 CET	59850	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.832731009 CET	59850	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.833447933 CET	59852	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.838416100 CET	3778	59852	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:00.838545084 CET	59852	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.839433908 CET	59852	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.844319105 CET	3778	59852	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:00.844400883 CET	59852	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:00.849245071 CET	3778	59852	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:01.631043911 CET	3778	59852	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:01.631593943 CET	59852	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:01.631593943 CET	59852	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:01.633419991 CET	59854	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:01.638323069 CET	3778	59854	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:01.638389111 CET	59854	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:01.639636993 CET	59854	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:01.644470930 CET	3778	59854	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:01.644623041 CET	59854	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:01.649466038 CET	3778	59854	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:02.412877083 CET	3778	59854	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:02.413155079 CET	59854	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:02.413156033 CET	59854	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:02.413682938 CET	59856	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:02.418556929 CET	3778	59856	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:02.418617010 CET	59856	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:02.419615030 CET	59856	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:02.424459934 CET	3778	59856	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:02.424529076 CET	59856	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:02.429341078 CET	3778	59856	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:03.217937946 CET	3778	59856	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:03.218228102 CET	59856	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:03.218229055 CET	59856	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:03.218729019 CET	59858	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:03.223642111 CET	3778	59858	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:03.223762035 CET	59858	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:03.224596977 CET	59858	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:03.229464054 CET	3778	59858	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:03.229543924 CET	59858	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:03.234347105 CET	3778	59858	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:04.021007061 CET	3778	59858	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:04.021358967 CET	59858	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.021359921 CET	59858	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.022068024 CET	59860	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.027407885 CET	3778	59860	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:04.027472019 CET	59860	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.028320074 CET	59860	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.033191919 CET	3778	59860	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:04.033241034 CET	59860	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.038050890 CET	3778	59860	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:04.844547033 CET	3778	59860	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:04.844872952 CET	59860	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.844872952 CET	59860	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.845519066 CET	59862	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.850460052 CET	3778	59862	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:04.850589991 CET	59862	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.851150036 CET	59862	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.855993986 CET	3778	59862	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:04.856072903 CET	59862	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:04.860917091 CET	3778	59862	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:05.640074968 CET	3778	59862	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:05.640579939 CET	59862	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:05.640579939 CET	59862	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:05.641149998 CET	59864	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:05.647080898 CET	3778	59864	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:05.647193909 CET	59864	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:05.647799969 CET	59864	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:05.653069019 CET	3778	59864	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:05.653142929 CET	59864	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:05.658044100 CET	3778	59864	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:06.443351984 CET	3778	59864	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:06.443593025 CET	59864	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:06.443593025 CET	59864	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:06.444314957 CET	59866	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:06.450347900 CET	3778	59866	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:06.450403929 CET	59866	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:06.450997114 CET	59866	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:06.455863953 CET	3778	59866	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:06.455909967 CET	59866	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:06.460777044 CET	3778	59866	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:07.251776934 CET	3778	59866	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:07.251878023 CET	59866	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:07.251916885 CET	59866	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:07.252337933 CET	59868	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:07.257258892 CET	3778	59868	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:07.257385969 CET	59868	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:07.258009911 CET	59868	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:07.262861967 CET	3778	59868	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:07.262962103 CET	59868	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:07.267924070 CET	3778	59868	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:08.046489954 CET	3778	59868	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:08.046773911 CET	59868	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.046773911 CET	59868	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.047669888 CET	59870	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.052580118 CET	3778	59870	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:08.052654982 CET	59870	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.053606987 CET	59870	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.058435917 CET	3778	59870	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:08.058491945 CET	59870	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.063354969 CET	3778	59870	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:08.880990028 CET	3778	59870	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:08.881094933 CET	59870	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.881148100 CET	59870	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.881737947 CET	59872	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.886610985 CET	3778	59872	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:08.886670113 CET	59872	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.887582064 CET	59872	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.892364025 CET	3778	59872	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:08.892420053 CET	59872	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:08.897191048 CET	3778	59872	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:09.712286949 CET	3778	59872	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:09.712407112 CET	59872	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:09.712408066 CET	59872	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:09.712996006 CET	59874	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:09.717895031 CET	3778	59874	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:09.718003035 CET	59874	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:09.718847036 CET	59874	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:09.723644018 CET	3778	59874	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:09.723711967 CET	59874	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:09.728501081 CET	3778	59874	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:10.501990080 CET	3778	59874	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:10.502127886 CET	59874	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:10.502127886 CET	59874	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:10.502904892 CET	59876	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:10.507826090 CET	3778	59876	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:10.507884979 CET	59876	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:10.508768082 CET	59876	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:10.513586044 CET	3778	59876	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:10.513638973 CET	59876	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:10.518472910 CET	3778	59876	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:11.300012112 CET	3778	59876	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:11.300251961 CET	59876	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:11.300251961 CET	59876	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:11.301079988 CET	59878	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:11.305988073 CET	3778	59878	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:11.306109905 CET	59878	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:11.306977987 CET	59878	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:11.311799049 CET	3778	59878	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:11.311877012 CET	59878	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:11.316783905 CET	3778	59878	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:12.091125965 CET	3778	59878	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:12.091557026 CET	59878	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.091557026 CET	59878	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.092096090 CET	59880	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.096962929 CET	3778	59880	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:12.097058058 CET	59880	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.098012924 CET	59880	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.102823019 CET	3778	59880	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:12.102899075 CET	59880	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.107755899 CET	3778	59880	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:12.908272028 CET	3778	59880	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:12.908664942 CET	59880	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.908664942 CET	59880	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.909138918 CET	59882	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.914375067 CET	3778	59882	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:12.914444923 CET	59882	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.915493965 CET	59882	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.923466921 CET	3778	59882	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:12.923537016 CET	59882	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:12.931638956 CET	3778	59882	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:13.713694096 CET	3778	59882	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:13.714006901 CET	59882	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:13.714006901 CET	59882	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:13.714498997 CET	59884	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:13.721967936 CET	3778	59884	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:13.722100019 CET	59884	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:13.723068953 CET	59884	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:13.731453896 CET	3778	59884	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:13.731581926 CET	59884	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:13.738892078 CET	3778	59884	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:14.534475088 CET	3778	59884	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:14.534616947 CET	59884	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:14.534616947 CET	59884	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:14.535341978 CET	59886	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:14.540246964 CET	3778	59886	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:14.540303946 CET	59886	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:14.541016102 CET	59886	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:14.546097994 CET	3778	59886	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:14.546149969 CET	59886	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:14.551158905 CET	3778	59886	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:15.355896950 CET	3778	59886	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:15.356061935 CET	59886	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:15.356061935 CET	59886	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:15.356750965 CET	59888	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:15.362149000 CET	3778	59888	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:15.362346888 CET	59888	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:15.362932920 CET	59888	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:15.368040085 CET	3778	59888	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:15.368096113 CET	59888	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:15.374567986 CET	3778	59888	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:16.144754887 CET	3778	59888	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:16.144897938 CET	59888	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.144898891 CET	59888	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.145493031 CET	59890	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.151456118 CET	3778	59890	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:16.151580095 CET	59890	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.152277946 CET	59890	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.158035040 CET	3778	59890	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:16.158138990 CET	59890	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.163407087 CET	3778	59890	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:16.938014984 CET	3778	59890	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:16.938391924 CET	59890	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.938391924 CET	59890	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.938951015 CET	59892	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.943865061 CET	3778	59892	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:16.943917990 CET	59892	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.944638014 CET	59892	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.949456930 CET	3778	59892	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:16.949505091 CET	59892	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:16.954401016 CET	3778	59892	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:17.745142937 CET	3778	59892	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:17.745251894 CET	59892	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:17.745251894 CET	59892	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:17.745944977 CET	59894	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:17.750977993 CET	3778	59894	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:17.751054049 CET	59894	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:17.751938105 CET	59894	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:17.757081985 CET	3778	59894	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:17.757178068 CET	59894	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:17.762396097 CET	3778	59894	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:18.523840904 CET	3778	59894	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:18.524055958 CET	59894	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:18.524055958 CET	59894	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:18.524416924 CET	59896	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:18.529355049 CET	3778	59896	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:18.529469967 CET	59896	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:18.529978037 CET	59896	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:18.534825087 CET	3778	59896	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:18.534903049 CET	59896	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:18.539819002 CET	3778	59896	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:19.332746029 CET	3778	59896	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:19.332943916 CET	59896	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:19.332998037 CET	59896	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:19.333545923 CET	59898	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:19.338422060 CET	3778	59898	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:19.338485003 CET	59898	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:19.339171886 CET	59898	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:19.344083071 CET	3778	59898	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:19.344140053 CET	59898	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:19.349028111 CET	3778	59898	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:20.119071007 CET	3778	59898	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:20.119188070 CET	59898	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.119189024 CET	59898	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.119638920 CET	59900	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.124521017 CET	3778	59900	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:20.124650955 CET	59900	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.125310898 CET	59900	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.130168915 CET	3778	59900	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:20.130244017 CET	59900	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.135199070 CET	3778	59900	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:20.941627026 CET	3778	59900	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:20.941842079 CET	59900	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.941842079 CET	59900	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.942477942 CET	59902	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.947561979 CET	3778	59902	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:20.947650909 CET	59902	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.948369026 CET	59902	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.953589916 CET	3778	59902	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:20.953749895 CET	59902	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:20.958702087 CET	3778	59902	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:21.759242058 CET	3778	59902	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:21.759361982 CET	59902	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:21.759361982 CET	59902	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:21.760067940 CET	59904	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:21.765172958 CET	3778	59904	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:21.765234947 CET	59904	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:21.765906096 CET	59904	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:21.770868063 CET	3778	59904	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:21.770934105 CET	59904	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:21.776118994 CET	3778	59904	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:22.541413069 CET	3778	59904	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:22.541702032 CET	59904	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:22.541702032 CET	59904	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:22.542463064 CET	59906	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:22.547450066 CET	3778	59906	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:22.547723055 CET	59906	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:22.549098969 CET	59906	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:22.553895950 CET	3778	59906	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:22.554131985 CET	59906	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:22.559175014 CET	3778	59906	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:23.342236042 CET	3778	59906	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:23.342538118 CET	59906	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:23.342538118 CET	59906	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:23.343297958 CET	59908	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:23.348598003 CET	3778	59908	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:23.348683119 CET	59908	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:23.349927902 CET	59908	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:23.354938030 CET	3778	59908	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:23.354990005 CET	59908	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:23.359883070 CET	3778	59908	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:24.139811993 CET	3778	59908	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:24.140065908 CET	59908	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.140065908 CET	59908	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.140613079 CET	59910	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.145464897 CET	3778	59910	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:24.145596027 CET	59910	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.146806955 CET	59910	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.151717901 CET	3778	59910	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:24.151788950 CET	59910	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.156925917 CET	3778	59910	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:24.944118977 CET	3778	59910	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:24.944282055 CET	59910	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.944325924 CET	59910	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.945112944 CET	59912	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.949990034 CET	3778	59912	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:24.950088978 CET	59912	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.951025009 CET	59912	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.955881119 CET	3778	59912	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:24.955954075 CET	59912	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:24.960757017 CET	3778	59912	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:25.726382971 CET	3778	59912	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:25.726916075 CET	59912	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:25.726916075 CET	59912	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:25.727335930 CET	59914	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:25.732676029 CET	3778	59914	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:25.732736111 CET	59914	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:25.733705997 CET	59914	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:25.738888025 CET	3778	59914	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:25.738981009 CET	59914	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:25.744457006 CET	3778	59914	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:26.524795055 CET	3778	59914	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:26.524900913 CET	59914	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:26.524931908 CET	59914	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:26.525532961 CET	59916	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:26.530473948 CET	3778	59916	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:26.530611038 CET	59916	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:26.531774998 CET	59916	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:26.536638975 CET	3778	59916	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:26.536724091 CET	59916	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:26.541615009 CET	3778	59916	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:27.327899933 CET	3778	59916	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:27.328049898 CET	59916	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:27.328145981 CET	59916	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:27.328881979 CET	59918	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:27.333764076 CET	3778	59918	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:27.333836079 CET	59918	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:27.334947109 CET	59918	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:27.339921951 CET	3778	59918	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:27.339979887 CET	59918	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:27.344860077 CET	3778	59918	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:28.115678072 CET	3778	59918	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:28.115947008 CET	59918	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.115947962 CET	59918	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.116553068 CET	59920	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.122261047 CET	3778	59920	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:28.122319937 CET	59920	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.123303890 CET	59920	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.128520966 CET	3778	59920	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:28.128575087 CET	59920	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.134105921 CET	3778	59920	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:28.918498039 CET	3778	59920	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:28.918653011 CET	59920	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.918653011 CET	59920	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.919271946 CET	59922	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.924345016 CET	3778	59922	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:28.924434900 CET	59922	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.925566912 CET	59922	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.930643082 CET	3778	59922	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:28.930713892 CET	59922	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:28.935837030 CET	3778	59922	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:29.706471920 CET	3778	59922	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:29.706742048 CET	59922	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:29.706742048 CET	59922	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:29.707521915 CET	59924	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:29.712435007 CET	3778	59924	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:29.712502956 CET	59924	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:29.713251114 CET	59924	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:29.718080044 CET	3778	59924	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:29.718130112 CET	59924	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:29.723516941 CET	3778	59924	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:30.506779909 CET	3778	59924	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:30.507039070 CET	59924	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:30.507039070 CET	59924	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:30.507826090 CET	59926	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:30.512783051 CET	3778	59926	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:30.512917995 CET	59926	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:30.514158010 CET	59926	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:30.518942118 CET	3778	59926	96.62.214.10	192.168.2.13
Jan 13, 2025 23:06:30.519042015 CET	59926	3778	192.168.2.13	96.62.214.10
Jan 13, 2025 23:06:30.523868084 CET	3778	59926	96.62.214.10	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 23:05:47.197052002 CET	34854	53	192.168.2.13	8.8.8.8
Jan 13, 2025 23:05:47.197155952 CET	37419	53	192.168.2.13	8.8.8.8
Jan 13, 2025 23:05:47.203438044 CET	53	34854	8.8.8.8	192.168.2.13
Jan 13, 2025 23:05:47.203774929 CET	53	37419	8.8.8.8	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 13, 2025 23:05:47.197052002 CET	192.168.2.13	8.8.8.8	0x500f	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 23:05:47.197155952 CET	192.168.2.13	8.8.8.8	0x6c69	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 13, 2025 23:05:47.203438044 CET	8.8.8.8	192.168.2.13	0x500f	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 13, 2025 23:05:47.203438044 CET	8.8.8.8	192.168.2.13	0x500f	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: boatnet.spc.elf PID: 5437, Parent PID: 5361

General

Start time (UTC):	22:03:01
Start date (UTC):	13/01/2025
Path:	/tmp/boatnet.spc.elf
Arguments:	/tmp/boatnet.spc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: boatnet.spc.elf PID: 5439, Parent PID: 5437

General

Start time (UTC):	22:03:01
Start date (UTC):	13/01/2025
Path:	/tmp/boatnet.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: boatnet.spc.elf PID: 5440, Parent PID: 5437

General

Start time (UTC):	22:03:01
Start date (UTC):	13/01/2025
Path:	/tmp/boatnet.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: boatnet.spc.elf PID: 5443, Parent PID: 5437

General

Start time (UTC):	22:03:01
Start date (UTC):	13/01/2025
Path:	/tmp/boatnet.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: xfce4-panel PID: 5447, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Chronological Activities

Analysis Process: wrapper-2.0 PID: 5447, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Chronological Activities

Analysis Process: xfce4-panel PID: 5448, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Chronological Activities

Analysis Process: wrapper-2.0 PID: 5448, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Chronological Activities

Analysis Process: xfce4-panel PID: 5449, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Chronological Activities

Analysis Process: wrapper-2.0 PID: 5449, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Chronological Activities

Analysis Process: xfce4-panel PID: 5450, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Chronological Activities

Analysis Process: wrapper-2.0 PID: 5450, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Chronological Activities

Analysis Process: xfce4-panel PID: 5451, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Chronological Activities

Analysis Process: wrapper-2.0 PID: 5451, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Chronological Activities

Analysis Process: xfce4-panel PID: 5452, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Chronological Activities

Analysis Process: wrapper-2.0 PID: 5452, Parent PID: 3147

General

Start time (UTC):	22:03:03
Start date (UTC):	13/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report boatnet.spc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: boatnet.spc.elf PID: 5437, Parent PID: 5361

General

Chronological Activities

Analysis Process: boatnet.spc.elf PID: 5439, Parent PID: 5437

General

Chronological Activities

Analysis Process: boatnet.spc.elf PID: 5440, Parent PID: 5437

General

Chronological Activities

Analysis Process: boatnet.spc.elf PID: 5443, Parent PID: 5437

General

Chronological Activities

Analysis Process: xfce4-panel PID: 5447, Parent PID: 3147

General

Chronological Activities

Analysis Process: wrapper-2.0 PID: 5447, Parent PID: 3147

General

Linux Analysis Report
boatnet.spc.elf