Edit tour

Linux Analysis Report
camp.arm.elf

Overview

General Information

Sample name:	camp.arm.elf
Analysis ID:	1590319
MD5:	b6b7e2e87e9aa326b584545c84753cb1
SHA1:	48a1a512bd931d80e0d6ab63f96d4b8cee270e97
SHA256:	71f11f69c2c6519f33977f33fb47bebe66264fc2c32c79d4e818993ff0631a6c
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

Sample contains only a LOAD segment without any section mappings

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590319
Start date and time:	2025-01-13 23:21:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	camp.arm.elf
Detection:	MAL
Classification:	mal68.troj.evad.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/camp.arm.elf
PID:	5533
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

system is lnxubuntu20

camp.arm.elf (PID: 5533, Parent: 5449, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/camp.arm.elf

camp.arm.elf New Fork (PID: 5535, Parent: 5533)

camp.arm.elf New Fork (PID: 5537, Parent: 5535)

camp.arm.elf New Fork (PID: 5538, Parent: 5535)

camp.arm.elf New Fork (PID: 5543, Parent: 5533)

camp.arm.elf New Fork (PID: 5545, Parent: 5533)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
5543.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5543.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10258:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1026c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10280:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10294:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1030c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10320:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10334:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10348:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1035c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10370:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10384:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10398:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5537.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5537.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10258:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1026c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10280:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10294:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1030c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10320:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10334:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10348:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1035c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10370:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10384:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10398:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5533.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5533.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10258:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1026c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10280:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10294:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1030c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10320:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10334:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10348:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1035c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10370:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10384:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10398:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5535.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5535.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10258:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1026c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10280:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10294:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1030c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10320:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10334:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10348:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1035c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10370:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10384:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10398:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.arm.elf PID: 5533	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: camp.arm.elf PID: 5533	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x4253:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4267:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x427b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x428f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42a3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42b7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42cb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42df:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42f3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4307:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x431b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x432f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4343:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4357:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x436b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x437f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4393:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x43a7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x43bb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x43cf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x43e3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.arm.elf PID: 5535	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: camp.arm.elf PID: 5535	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1a9d7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a9eb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a9ff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aa13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aa27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aa3b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aa4f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aa63:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aa77:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aa8b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aa9f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aab3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aac7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aadb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aaef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab03:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab17:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab2b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab3f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab53:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab67:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.arm.elf PID: 5537	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: camp.arm.elf PID: 5537	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x71e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x732:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x746:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x75a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x782:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x796:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7aa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7be:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x80e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x822:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x836:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x84a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x85e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x872:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x886:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.arm.elf PID: 5543	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: camp.arm.elf PID: 5543	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x36d6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36ea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36fe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3712:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3726:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x373a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x374e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3762:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3776:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x378a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x379e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37b2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37c6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37da:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37ee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3802:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3816:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x382a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x383e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3852:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3866:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 11 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: camp.arm.elf	Virustotal: Detection: 26%			Perma Link
Source: camp.arm.elf	ReversingLabs: Detection: 44%

Source: global traffic

TCP traffic: 192.168.2.15:56448 -> 154.213.187.11:3778

Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11

Source: camp.arm.elf

String found in binary or memory: http://upx.sf.net

System Summary

Malicious sample detected (through community Yara rule)

Source: 5543.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5537.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5533.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5535.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.arm.elf PID: 5533, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.arm.elf PID: 5535, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.arm.elf PID: 5537, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.arm.elf PID: 5543, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: LOAD without section mappings

Program segment: 0x8000

Source: 5543.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5537.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5533.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5535.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.arm.elf PID: 5533, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.arm.elf PID: 5535, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.arm.elf PID: 5537, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.arm.elf PID: 5543, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal68.troj.evad.linELF@0/0@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/3881/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/110/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/231/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/111/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/112/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/233/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/113/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/114/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/235/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/115/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1333/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/116/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1695/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/117/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/118/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/119/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/911/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/914/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/10/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/917/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/11/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/12/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/13/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/14/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/15/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/16/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/17/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/18/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/19/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1591/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/120/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/121/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/122/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/243/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/2/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/123/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/3/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/124/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1588/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/125/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/4/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/246/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/126/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/5/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/127/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/6/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1585/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/128/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/7/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/129/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/8/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/800/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/9/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/802/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/803/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/804/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/20/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/21/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/3407/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/22/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/23/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/24/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/25/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/26/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/27/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/28/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/29/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1484/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/490/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/250/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/130/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/251/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/131/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/132/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/133/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1479/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/378/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/258/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/259/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/931/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1595/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/812/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/933/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/30/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/3419/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/35/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/3310/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/260/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/261/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/262/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/142/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/263/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/264/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/265/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/145/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/266/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/267/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/268/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/3303/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/269/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1486/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/1806/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/3440/status	Jump to behavior
Source: /tmp/camp.arm.elf (PID: 5533)	File opened: /proc/270/status	Jump to behavior

Source: camp.arm.elf

Submission file: segment LOAD with 7.9666 entropy (max. 8.0)

Source: /tmp/camp.arm.elf (PID: 5533)

Queries kernel information via 'uname':

Jump to behavior

Source: camp.arm.elf, 5533.1.00005636903ce000.000056369063c000.rw-.sdmp, camp.arm.elf, 5535.1.00005636903ce000.000056369061c000.rw-.sdmp, camp.arm.elf, 5537.1.00005636903ce000.000056369061c000.rw-.sdmp, camp.arm.elf, 5543.1.00005636903ce000.000056369063c000.rw-.sdmp	Binary or memory string: 6V!/etc/qemu-binfmt/arm
Source: camp.arm.elf, 5533.1.00005636903ce000.000056369063c000.rw-.sdmp, camp.arm.elf, 5535.1.00005636903ce000.000056369061c000.rw-.sdmp, camp.arm.elf, 5537.1.00005636903ce000.000056369061c000.rw-.sdmp, camp.arm.elf, 5543.1.00005636903ce000.000056369063c000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: camp.arm.elf, 5533.1.00007ffcdea0e000.00007ffcdea2f000.rw-.sdmp, camp.arm.elf, 5535.1.00007ffcdea0e000.00007ffcdea2f000.rw-.sdmp, camp.arm.elf, 5537.1.00007ffcdea0e000.00007ffcdea2f000.rw-.sdmp, camp.arm.elf, 5543.1.00007ffcdea0e000.00007ffcdea2f000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: camp.arm.elf, 5533.1.00007ffcdea0e000.00007ffcdea2f000.rw-.sdmp, camp.arm.elf, 5535.1.00007ffcdea0e000.00007ffcdea2f000.rw-.sdmp, camp.arm.elf, 5537.1.00007ffcdea0e000.00007ffcdea2f000.rw-.sdmp, camp.arm.elf, 5543.1.00007ffcdea0e000.00007ffcdea2f000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/camp.arm.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/camp.arm.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 5543.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5537.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5533.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5535.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: camp.arm.elf PID: 5533, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.arm.elf PID: 5535, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.arm.elf PID: 5537, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.arm.elf PID: 5543, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 5543.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5537.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5533.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5535.1.00007f2f3c017000.00007f2f3c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: camp.arm.elf PID: 5533, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.arm.elf PID: 5535, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.arm.elf PID: 5537, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.arm.elf PID: 5543, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
camp.arm.elf	27%	Virustotal		Browse
camp.arm.elf	45%	ReversingLabs	Linux.Trojan.Svirtu

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	camp.arm.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
154.213.187.11	unknown	Seychelles		22769	DDOSING-BGP-NETWORKUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
154.213.187.11	camp.arm7.elf	Get hash	malicious	Mirai	Browse
	camp.x86_64.elf	Get hash	malicious	Mirai	Browse
	camp.i686.elf	Get hash	malicious	Mirai	Browse
	camp.sh4.elf	Get hash	malicious	Mirai	Browse
	camp.spc.elf	Get hash	malicious	Mirai	Browse
	camp.x86.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DDOSING-BGP-NETWORKUS	camp.arm7.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.x86_64.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.i686.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	hikarm4.elf	Get hash	malicious	Unknown	Browse	154.213.187.125
	hikarm7.elf	Get hash	malicious	Mirai	Browse	154.213.187.125
	hikarm5.elf	Get hash	malicious	Unknown	Browse	154.213.187.125
	gx86.elf	Get hash	malicious	Unknown	Browse	154.213.187.125
	camp.sh4.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.spc.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.x86.elf	Get hash	malicious	Mirai	Browse	154.213.187.11

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, no section header
Entropy (8bit):	7.964682681978237
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	camp.arm.elf
File size:	36'840 bytes
MD5:	b6b7e2e87e9aa326b584545c84753cb1
SHA1:	48a1a512bd931d80e0d6ab63f96d4b8cee270e97
SHA256:	71f11f69c2c6519f33977f33fb47bebe66264fc2c32c79d4e818993ff0631a6c
SHA512:	ab7f847fe407d74ebd1065de524c26133c1f8d02134f2df107877959fc6132ffe0a6db91327cee3834cfa896687a2583dc5c6c40fd79147cb6780d27cdc2d364
SSDEEP:	768:YrFs5me135wp1C+s9vbM5YNMygu+OR1juP3ACqtqNLIzLtZ6G6U5MzLs3UozcI:Y/eRSnQjMgVuP7qtqxgtAdU5pz3
TLSH:	BAF2E1622285B07341E59DF3D8B087E12E7F01B6D0E533F15FB98388D6866529876FE2
File Content Preview:	.ELF...a..........(.....H...4...........4. ...(..........................................Y...Y...Y..................Q.td............................s.y.UPX!........@5..@5......T..........?.E.h;.}...^..........f(...j.l..0z.$..G.sB...d..y...G.."b..k{......0

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0xfd48
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8000	0x8000	0x8ef7	0x8ef7	7.9666	0x5	R E	0x8000
LOAD	0x5990	0x25990	0x25990	0x0	0x0	0.0000	0x6	RW	0x8000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 23:22:18.434988022 CET	56448	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:18.440076113 CET	3778	56448	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:18.440136909 CET	56448	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:18.464941978 CET	56448	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:18.469783068 CET	3778	56448	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:18.469834089 CET	56448	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:18.474673033 CET	3778	56448	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:20.052454948 CET	3778	56448	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:20.052855015 CET	56448	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:20.057868004 CET	3778	56448	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:21.066169977 CET	56450	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:21.071284056 CET	3778	56450	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:21.071343899 CET	56450	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:21.072009087 CET	56450	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:21.076848030 CET	3778	56450	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:21.076915979 CET	56450	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:21.081707954 CET	3778	56450	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:22.692364931 CET	3778	56450	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:22.692693949 CET	56450	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:22.697642088 CET	3778	56450	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:23.695517063 CET	56452	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:23.700978041 CET	3778	56452	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:23.701163054 CET	56452	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:23.702430010 CET	56452	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:23.707686901 CET	3778	56452	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:23.707878113 CET	56452	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:23.713125944 CET	3778	56452	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:24.070106030 CET	56454	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:24.075728893 CET	3778	56454	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:24.075823069 CET	56454	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:24.127979040 CET	56454	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:24.133090019 CET	3778	56454	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:24.133171082 CET	56454	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:24.138051033 CET	3778	56454	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:25.313843966 CET	3778	56452	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:25.314301014 CET	56452	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:25.319269896 CET	3778	56452	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:25.674372911 CET	3778	56454	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:25.675029039 CET	56454	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:25.679981947 CET	3778	56454	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:26.316767931 CET	56456	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:26.322077990 CET	3778	56456	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:26.322144985 CET	56456	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:26.323169947 CET	56456	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:26.327989101 CET	3778	56456	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:26.328038931 CET	56456	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:26.332880020 CET	3778	56456	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:26.678981066 CET	56458	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:26.684221983 CET	3778	56458	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:26.684287071 CET	56458	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:26.685616970 CET	56458	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:26.891159058 CET	56458	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:26.944077969 CET	3778	56458	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:26.945463896 CET	3778	56458	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:27.976732969 CET	3778	56456	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:27.976923943 CET	56456	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:27.981863022 CET	3778	56456	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:28.319725990 CET	3778	56458	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:28.319982052 CET	56458	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:28.325561047 CET	3778	56458	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:28.980498075 CET	56460	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:28.985779047 CET	3778	56460	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:28.986032963 CET	56460	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:28.988285065 CET	56460	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:28.993323088 CET	3778	56460	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:28.993516922 CET	56460	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:28.998626947 CET	3778	56460	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:29.322412014 CET	56462	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:29.327956915 CET	3778	56462	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:29.328265905 CET	56462	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:29.329288006 CET	56462	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:29.334249973 CET	3778	56462	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:29.334603071 CET	56462	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:29.339998007 CET	3778	56462	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:30.618988991 CET	3778	56460	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:30.619431019 CET	56460	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:30.625097990 CET	3778	56460	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:30.942765951 CET	3778	56462	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:30.943394899 CET	56462	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:30.948942900 CET	3778	56462	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:31.624768972 CET	56464	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:31.630410910 CET	3778	56464	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:31.630726099 CET	56464	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:31.632810116 CET	56464	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:31.638297081 CET	3778	56464	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:31.638650894 CET	56464	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:31.644109964 CET	3778	56464	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:31.949955940 CET	56466	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:31.955538034 CET	3778	56466	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:31.955665112 CET	56466	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:31.958024979 CET	56466	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:31.963103056 CET	3778	56466	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:31.963346004 CET	56466	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:31.968290091 CET	3778	56466	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:33.257489920 CET	3778	56464	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:33.258363008 CET	56464	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:33.264204025 CET	3778	56464	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:33.557363033 CET	3778	56466	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:33.558073044 CET	56466	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:33.563574076 CET	3778	56466	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:34.265773058 CET	56468	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:34.271722078 CET	3778	56468	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:34.272022009 CET	56468	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:34.274616003 CET	56468	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:34.280041933 CET	3778	56468	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:34.280214071 CET	56468	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:34.285891056 CET	3778	56468	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:34.563460112 CET	56470	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:34.568743944 CET	3778	56470	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:34.569232941 CET	56470	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:34.571943998 CET	56470	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:34.577341080 CET	3778	56470	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:34.577596903 CET	56470	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:34.583304882 CET	3778	56470	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:35.897923946 CET	3778	56468	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:35.898639917 CET	56468	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:35.904192924 CET	3778	56468	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:36.213670015 CET	3778	56470	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:36.214576960 CET	56470	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:36.220012903 CET	3778	56470	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:36.904921055 CET	56472	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:36.910423040 CET	3778	56472	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:36.910696030 CET	56472	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:36.912722111 CET	56472	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:36.918422937 CET	3778	56472	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:36.918790102 CET	56472	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:36.924063921 CET	3778	56472	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:37.220362902 CET	56474	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:37.226273060 CET	3778	56474	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:37.226511002 CET	56474	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:37.228780031 CET	56474	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:37.234143972 CET	3778	56474	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:37.234405994 CET	56474	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:37.240350962 CET	3778	56474	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:38.521320105 CET	3778	56472	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:38.522254944 CET	56472	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:38.527597904 CET	3778	56472	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:38.868824005 CET	3778	56474	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:38.869750023 CET	56474	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:38.875572920 CET	3778	56474	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:39.528552055 CET	56476	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:39.534393072 CET	3778	56476	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:39.534778118 CET	56476	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:39.536592007 CET	56476	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:39.541994095 CET	3778	56476	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:39.542561054 CET	56476	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:39.548295021 CET	3778	56476	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:39.876348972 CET	56478	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:39.882263899 CET	3778	56478	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:39.882746935 CET	56478	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:39.885540009 CET	56478	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:39.890913963 CET	3778	56478	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:39.891239882 CET	56478	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:39.896606922 CET	3778	56478	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:41.167105913 CET	3778	56476	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:41.167717934 CET	56476	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:41.173136950 CET	3778	56476	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:41.505687952 CET	3778	56478	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:41.506484985 CET	56478	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:41.512250900 CET	3778	56478	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:42.174726009 CET	56480	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:42.180291891 CET	3778	56480	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:42.180671930 CET	56480	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:42.182593107 CET	56480	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:42.188060045 CET	3778	56480	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:42.188281059 CET	56480	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:42.193792105 CET	3778	56480	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:42.513370991 CET	56482	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:42.518865108 CET	3778	56482	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:42.519256115 CET	56482	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:42.522049904 CET	56482	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:42.527338982 CET	3778	56482	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:42.527899981 CET	56482	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:42.533648968 CET	3778	56482	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:43.818456888 CET	3778	56480	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:43.819344044 CET	56480	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:43.825032949 CET	3778	56480	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:44.130724907 CET	3778	56482	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:44.131489038 CET	56482	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:44.137168884 CET	3778	56482	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:44.826791048 CET	56484	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:44.832106113 CET	3778	56484	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:44.832355022 CET	56484	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:44.834836960 CET	56484	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:44.839869976 CET	3778	56484	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:44.840197086 CET	56484	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:44.845688105 CET	3778	56484	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:45.135735035 CET	56486	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:45.140945911 CET	3778	56486	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:45.141102076 CET	56486	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:45.143373013 CET	56486	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:45.148859024 CET	3778	56486	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:45.149409056 CET	56486	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:45.154553890 CET	3778	56486	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:46.560363054 CET	3778	56484	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:46.560612917 CET	56484	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:46.565548897 CET	3778	56484	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:46.736068964 CET	3778	56486	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:46.736464024 CET	56486	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:46.741482019 CET	3778	56486	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:47.567537069 CET	56488	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:47.572942972 CET	3778	56488	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:47.573116064 CET	56488	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:47.575344086 CET	56488	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:47.580899954 CET	3778	56488	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:47.581464052 CET	56488	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:47.586834908 CET	3778	56488	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:47.742536068 CET	56490	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:47.748531103 CET	3778	56490	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:47.749031067 CET	56490	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:47.751285076 CET	56490	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:47.756607056 CET	3778	56490	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:47.756874084 CET	56490	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:47.762469053 CET	3778	56490	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:49.193819046 CET	3778	56488	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:49.194586992 CET	56488	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:49.200295925 CET	3778	56488	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:49.361690044 CET	3778	56490	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:49.362524033 CET	56490	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:49.368242025 CET	3778	56490	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:50.202004910 CET	56492	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:50.207889080 CET	3778	56492	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:50.208419085 CET	56492	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:50.211186886 CET	56492	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:50.216640949 CET	3778	56492	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:50.217106104 CET	56492	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:50.222575903 CET	3778	56492	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:50.369066954 CET	56494	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:50.374886990 CET	3778	56494	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:50.375222921 CET	56494	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:50.377824068 CET	56494	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:50.383402109 CET	3778	56494	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:50.383925915 CET	56494	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:50.389853001 CET	3778	56494	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:51.849589109 CET	3778	56492	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:51.850260019 CET	56492	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:51.855858088 CET	3778	56492	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:52.012137890 CET	3778	56494	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:52.012897968 CET	56494	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:52.018384933 CET	3778	56494	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:52.856503010 CET	56496	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:52.862226009 CET	3778	56496	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:52.862520933 CET	56496	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:52.864156961 CET	56496	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:52.869339943 CET	3778	56496	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:52.869689941 CET	56496	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:52.874842882 CET	3778	56496	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:53.020476103 CET	56498	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:53.026345968 CET	3778	56498	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:53.026895046 CET	56498	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:53.029376030 CET	56498	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:53.034578085 CET	3778	56498	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:53.034931898 CET	56498	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:53.040075064 CET	3778	56498	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:54.491272926 CET	3778	56496	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:54.492053986 CET	56496	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:54.497744083 CET	3778	56496	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:54.665985107 CET	3778	56498	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:54.666731119 CET	56498	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:54.672291994 CET	3778	56498	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:55.498038054 CET	56500	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:55.503854036 CET	3778	56500	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:55.504223108 CET	56500	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:55.506578922 CET	56500	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:55.512228966 CET	3778	56500	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:55.512521982 CET	56500	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:55.518346071 CET	3778	56500	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:55.673573971 CET	56502	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:55.679467916 CET	3778	56502	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:55.679856062 CET	56502	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:55.682192087 CET	56502	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:55.687716961 CET	3778	56502	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:55.687971115 CET	56502	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:55.693367958 CET	3778	56502	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:57.145299911 CET	3778	56500	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:57.146119118 CET	56500	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:57.151787996 CET	3778	56500	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:57.267843008 CET	3778	56502	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:57.268134117 CET	56502	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:57.273561001 CET	3778	56502	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:58.154215097 CET	56504	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:58.159663916 CET	3778	56504	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:58.159939051 CET	56504	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:58.162918091 CET	56504	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:58.168741941 CET	3778	56504	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:58.169049978 CET	56504	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:58.174762011 CET	3778	56504	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:58.275414944 CET	56506	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:58.280962944 CET	3778	56506	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:58.281414986 CET	56506	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:58.283951044 CET	56506	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:58.289536953 CET	3778	56506	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:58.289781094 CET	56506	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:58.295438051 CET	3778	56506	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:59.793051004 CET	3778	56504	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:59.794104099 CET	56504	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:59.799865007 CET	3778	56504	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:59.896507978 CET	3778	56506	154.213.187.11	192.168.2.15
Jan 13, 2025 23:22:59.897414923 CET	56506	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:22:59.902858019 CET	3778	56506	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:00.801120996 CET	56508	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:00.806747913 CET	3778	56508	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:00.807101011 CET	56508	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:00.809743881 CET	56508	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:00.815090895 CET	3778	56508	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:00.815248966 CET	56508	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:00.820481062 CET	3778	56508	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:00.904207945 CET	56510	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:00.909742117 CET	3778	56510	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:00.909981012 CET	56510	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:00.912899971 CET	56510	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:00.918349981 CET	3778	56510	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:00.918850899 CET	56510	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:00.924278021 CET	3778	56510	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:02.447299004 CET	3778	56508	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:02.448092937 CET	56508	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:02.453915119 CET	3778	56508	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:02.539052963 CET	3778	56510	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:02.539649010 CET	56510	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:02.545512915 CET	3778	56510	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:03.455180883 CET	56512	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:03.461034060 CET	3778	56512	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:03.461493015 CET	56512	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:03.463644028 CET	56512	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:03.469119072 CET	3778	56512	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:03.469734907 CET	56512	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:03.475419998 CET	3778	56512	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:03.547220945 CET	56514	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:03.553026915 CET	3778	56514	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:03.553683043 CET	56514	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:03.556158066 CET	56514	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:03.561671972 CET	3778	56514	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:03.561908007 CET	56514	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:03.567550898 CET	3778	56514	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:05.084247112 CET	3778	56512	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:05.085037947 CET	56512	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:05.090506077 CET	3778	56512	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:05.142919064 CET	3778	56514	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:05.143594980 CET	56514	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:05.149127007 CET	3778	56514	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:06.091418982 CET	56516	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:06.096468925 CET	3778	56516	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:06.096622944 CET	56516	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:06.098954916 CET	56516	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:06.104022980 CET	3778	56516	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:06.104290009 CET	56516	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:06.109395027 CET	3778	56516	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:06.149535894 CET	56518	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:06.154716015 CET	3778	56518	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:06.155025005 CET	56518	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:06.157419920 CET	56518	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:06.162456036 CET	3778	56518	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:06.162764072 CET	56518	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:06.167747021 CET	3778	56518	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:07.709135056 CET	3778	56516	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:07.709892988 CET	56516	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:07.715485096 CET	3778	56516	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:07.807024002 CET	3778	56518	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:07.807836056 CET	56518	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:07.813167095 CET	3778	56518	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:08.717776060 CET	56520	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:08.723685980 CET	3778	56520	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:08.723855972 CET	56520	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:08.726425886 CET	56520	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:08.731698036 CET	3778	56520	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:08.732031107 CET	56520	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:08.737622023 CET	3778	56520	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:08.813870907 CET	56522	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:08.819616079 CET	3778	56522	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:08.820095062 CET	56522	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:08.822387934 CET	56522	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:08.827670097 CET	3778	56522	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:08.827871084 CET	56522	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:08.833363056 CET	3778	56522	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:10.334280014 CET	3778	56520	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:10.335186958 CET	56520	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:10.340742111 CET	3778	56520	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:10.445749998 CET	3778	56522	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:10.446712017 CET	56522	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:10.452579021 CET	3778	56522	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:11.342740059 CET	56524	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:11.348529100 CET	3778	56524	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:11.349033117 CET	56524	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:11.351155996 CET	56524	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:11.356683969 CET	3778	56524	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:11.356926918 CET	56524	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:11.362234116 CET	3778	56524	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:11.453294039 CET	56526	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:11.458726883 CET	3778	56526	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:11.459228992 CET	56526	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:11.462169886 CET	56526	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:11.467583895 CET	3778	56526	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:11.468096018 CET	56526	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:11.473448038 CET	3778	56526	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:12.959494114 CET	3778	56524	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:12.960284948 CET	56524	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:12.965893030 CET	3778	56524	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:13.070693016 CET	3778	56526	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:13.071409941 CET	56526	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:13.076766968 CET	3778	56526	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:13.968400002 CET	56528	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:13.973829985 CET	3778	56528	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:13.974178076 CET	56528	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:13.977106094 CET	56528	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:13.982460976 CET	3778	56528	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:13.982686043 CET	56528	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:13.988533020 CET	3778	56528	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:14.077797890 CET	56530	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:14.083163977 CET	3778	56530	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:14.083488941 CET	56530	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:14.086194038 CET	56530	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:14.091339111 CET	3778	56530	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:14.091697931 CET	56530	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:14.096903086 CET	3778	56530	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:15.596467972 CET	3778	56528	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:15.597167969 CET	56528	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:15.602583885 CET	3778	56528	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:15.711683989 CET	3778	56530	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:15.712551117 CET	56530	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:15.717849016 CET	3778	56530	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:16.606637955 CET	56532	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:16.612102032 CET	3778	56532	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:16.612360001 CET	56532	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:16.615046024 CET	56532	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:16.620304108 CET	3778	56532	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:16.620707035 CET	56532	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:16.626013994 CET	3778	56532	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:16.719996929 CET	56534	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:16.725579977 CET	3778	56534	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:16.726136923 CET	56534	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:16.728801012 CET	56534	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:16.733995914 CET	3778	56534	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:16.734452963 CET	56534	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:16.740001917 CET	3778	56534	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:18.224888086 CET	3778	56532	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:18.225806952 CET	56532	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:18.230947971 CET	3778	56532	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:18.350167036 CET	3778	56534	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:18.350788116 CET	56534	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:18.355910063 CET	3778	56534	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:19.234621048 CET	56536	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:19.240232944 CET	3778	56536	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:19.240629911 CET	56536	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:19.243446112 CET	56536	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:19.249479055 CET	3778	56536	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:19.249948025 CET	56536	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:19.255398989 CET	3778	56536	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:19.358350992 CET	56538	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:19.364528894 CET	3778	56538	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:19.364891052 CET	56538	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:19.367034912 CET	56538	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:19.372805119 CET	3778	56538	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:19.373033047 CET	56538	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:19.379064083 CET	3778	56538	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:20.849423885 CET	3778	56536	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:20.850006104 CET	56536	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:20.855217934 CET	3778	56536	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:20.992681026 CET	3778	56538	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:20.993443966 CET	56538	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:20.998466015 CET	3778	56538	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:21.855633974 CET	56540	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:21.861205101 CET	3778	56540	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:21.861592054 CET	56540	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:21.863814116 CET	56540	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:21.868988037 CET	3778	56540	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:21.869535923 CET	56540	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:21.874778032 CET	3778	56540	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:21.999783039 CET	56542	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:22.004941940 CET	3778	56542	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:22.005222082 CET	56542	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:22.007122993 CET	56542	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:22.011960983 CET	3778	56542	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:22.012218952 CET	56542	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:22.019381046 CET	3778	56542	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:23.491962910 CET	3778	56540	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:23.492629051 CET	56540	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:23.498094082 CET	3778	56540	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:23.684627056 CET	3778	56542	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:23.685360909 CET	56542	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:23.690756083 CET	3778	56542	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:24.498847008 CET	56544	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:24.504926920 CET	3778	56544	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:24.505131960 CET	56544	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:24.507822990 CET	56544	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:24.513324976 CET	3778	56544	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:24.513489008 CET	56544	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:24.519212961 CET	3778	56544	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:24.690898895 CET	56546	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:24.696513891 CET	3778	56546	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:24.696676016 CET	56546	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:24.698506117 CET	56546	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:24.703545094 CET	3778	56546	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:24.703989029 CET	56546	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:24.709542036 CET	3778	56546	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:26.182060957 CET	3778	56544	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:26.182590961 CET	56544	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:26.188179970 CET	3778	56544	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:26.318875074 CET	3778	56546	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:26.319480896 CET	56546	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:26.325293064 CET	3778	56546	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:27.188710928 CET	56548	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:27.194349051 CET	3778	56548	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:27.194607973 CET	56548	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:27.196698904 CET	56548	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:27.202047110 CET	3778	56548	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:27.202253103 CET	56548	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:27.207875013 CET	3778	56548	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:27.325094938 CET	56550	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:27.330825090 CET	3778	56550	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:27.331147909 CET	56550	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:27.333226919 CET	56550	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:27.338588953 CET	3778	56550	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:27.338835001 CET	56550	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:27.344383001 CET	3778	56550	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:28.820947886 CET	3778	56548	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:28.821847916 CET	56548	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:28.827492952 CET	3778	56548	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:28.944124937 CET	3778	56550	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:28.944901943 CET	56550	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:28.950303078 CET	3778	56550	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:29.825838089 CET	56552	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:29.831234932 CET	3778	56552	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:29.831357956 CET	56552	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:29.832707882 CET	56552	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:29.838349104 CET	3778	56552	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:29.838589907 CET	56552	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:29.844069958 CET	3778	56552	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:29.949620008 CET	56554	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:29.955053091 CET	3778	56554	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:29.955394983 CET	56554	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:29.957566977 CET	56554	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:29.962989092 CET	3778	56554	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:29.963332891 CET	56554	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:29.969033003 CET	3778	56554	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:31.494509935 CET	3778	56552	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:31.495155096 CET	56552	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:31.500688076 CET	3778	56552	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:31.605707884 CET	3778	56554	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:31.606237888 CET	56554	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:31.611860991 CET	3778	56554	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:32.501578093 CET	56556	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:32.507297993 CET	3778	56556	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:32.507652998 CET	56556	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:32.510489941 CET	56556	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:32.515779972 CET	3778	56556	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:32.516067028 CET	56556	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:32.522008896 CET	3778	56556	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:32.612462044 CET	56558	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:32.618031025 CET	3778	56558	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:32.618205070 CET	56558	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:32.620950937 CET	56558	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:32.626153946 CET	3778	56558	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:32.626475096 CET	56558	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:32.631937027 CET	3778	56558	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:34.150862932 CET	3778	56556	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:34.151249886 CET	56556	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:34.156250000 CET	3778	56556	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:34.240653992 CET	3778	56558	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:34.240835905 CET	56558	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:34.245748043 CET	3778	56558	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:35.155709028 CET	56560	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:35.161040068 CET	3778	56560	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:35.161120892 CET	56560	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:35.162997007 CET	56560	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:35.167931080 CET	3778	56560	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:35.167989969 CET	56560	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:35.172918081 CET	3778	56560	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:35.244837999 CET	56562	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:35.250300884 CET	3778	56562	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:35.250418901 CET	56562	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:35.252063990 CET	56562	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:35.257016897 CET	3778	56562	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:35.257076979 CET	56562	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:35.262082100 CET	3778	56562	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:37.601738930 CET	3778	56560	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:37.601902962 CET	3778	56562	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:37.602211952 CET	3778	56560	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:37.602252007 CET	3778	56562	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:37.602638006 CET	3778	56560	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:37.602710009 CET	56560	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:37.602710962 CET	56560	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:37.602710962 CET	56562	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:37.602858067 CET	56560	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:37.602859020 CET	56562	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:37.602955103 CET	3778	56562	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:37.603169918 CET	56562	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:37.608223915 CET	3778	56560	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:37.608247995 CET	3778	56562	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:38.610820055 CET	56564	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:38.611376047 CET	56566	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:38.616590977 CET	3778	56564	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:38.616981983 CET	56564	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:38.617151022 CET	3778	56566	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:38.617461920 CET	56566	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:38.620634079 CET	56564	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:38.620809078 CET	56566	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:38.625881910 CET	3778	56564	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:38.626249075 CET	56564	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:38.626646042 CET	3778	56566	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:38.627007961 CET	56566	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:38.631716013 CET	3778	56564	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:38.632452965 CET	3778	56566	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:40.225737095 CET	3778	56564	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:40.226732016 CET	56564	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:40.231834888 CET	3778	56564	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:40.258048058 CET	3778	56566	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:40.258873940 CET	56566	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:40.264405966 CET	3778	56566	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:41.232589006 CET	56568	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:41.238395929 CET	3778	56568	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:41.238784075 CET	56568	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:41.241298914 CET	56568	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:41.246220112 CET	3778	56568	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:41.246293068 CET	56568	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:41.251456022 CET	3778	56568	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:41.264389992 CET	56570	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:41.270096064 CET	3778	56570	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:41.270314932 CET	56570	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:41.272819042 CET	56570	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:41.278122902 CET	3778	56570	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:41.278420925 CET	56570	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:41.283618927 CET	3778	56570	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:42.868931055 CET	3778	56568	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:42.869582891 CET	56568	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:42.875119925 CET	3778	56568	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:42.896956921 CET	3778	56570	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:42.897434950 CET	56570	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:42.902767897 CET	3778	56570	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:43.876148939 CET	56572	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:43.881350994 CET	3778	56572	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:43.881644964 CET	56572	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:43.884242058 CET	56572	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:43.889533043 CET	3778	56572	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:43.889748096 CET	56572	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:43.894928932 CET	3778	56572	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:43.901619911 CET	56574	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:43.906928062 CET	3778	56574	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:43.907088995 CET	56574	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:43.909467936 CET	56574	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:43.914474010 CET	3778	56574	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:43.914755106 CET	56574	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:43.919696093 CET	3778	56574	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:45.527822971 CET	3778	56572	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:45.528315067 CET	56572	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:45.533284903 CET	3778	56572	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:45.538100958 CET	3778	56574	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:45.538352013 CET	56574	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:45.543418884 CET	3778	56574	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:46.532887936 CET	56576	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:46.538151979 CET	3778	56576	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:46.538255930 CET	56576	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:46.540519953 CET	56576	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:46.541790009 CET	56578	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:46.545345068 CET	3778	56576	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:46.545413971 CET	56576	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:46.546684027 CET	3778	56578	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:46.546757936 CET	56578	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:46.548450947 CET	56578	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:46.550342083 CET	3778	56576	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:46.553316116 CET	3778	56578	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:46.553390026 CET	56578	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:46.558362007 CET	3778	56578	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:48.144126892 CET	3778	56576	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:48.144382954 CET	56576	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:48.149332047 CET	3778	56576	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:48.169666052 CET	3778	56578	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:48.170068026 CET	56578	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:48.175050020 CET	3778	56578	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:49.149741888 CET	56580	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:49.154937983 CET	3778	56580	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:49.155277014 CET	56580	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:49.156956911 CET	56580	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:49.162110090 CET	3778	56580	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:49.162489891 CET	56580	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:49.168018103 CET	3778	56580	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:49.174999952 CET	56582	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:49.180525064 CET	3778	56582	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:49.180754900 CET	56582	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:49.182864904 CET	56582	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:49.187864065 CET	3778	56582	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:49.188059092 CET	56582	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:49.193370104 CET	3778	56582	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:50.776226997 CET	3778	56580	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:50.776945114 CET	56580	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:50.782221079 CET	3778	56580	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:51.785222054 CET	56584	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:51.790911913 CET	3778	56584	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:51.791347027 CET	56584	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:51.794192076 CET	56584	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:51.799784899 CET	3778	56584	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:51.800307989 CET	56584	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:51.805644989 CET	3778	56584	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:53.208483934 CET	3778	56582	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:53.209222078 CET	56582	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:53.214498043 CET	3778	56582	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:53.433861971 CET	3778	56584	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:53.434458971 CET	56584	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:53.439841032 CET	3778	56584	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:54.216526985 CET	56586	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:54.222083092 CET	3778	56586	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:54.222430944 CET	56586	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:54.224509954 CET	56586	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:54.229724884 CET	3778	56586	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:54.230174065 CET	56586	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:54.235632896 CET	3778	56586	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:54.443661928 CET	56588	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:54.449306011 CET	3778	56588	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:54.449842930 CET	56588	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:54.453069925 CET	56588	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:54.458348989 CET	3778	56588	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:54.458720922 CET	56588	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:54.464117050 CET	3778	56588	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:55.854861021 CET	3778	56586	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:55.855684996 CET	56586	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:55.860951900 CET	3778	56586	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:56.049900055 CET	3778	56588	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:56.050301075 CET	56588	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:56.055227995 CET	3778	56588	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:56.862729073 CET	56590	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:56.868345976 CET	3778	56590	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:56.868638039 CET	56590	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:56.871145964 CET	56590	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:56.876462936 CET	3778	56590	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:56.876728058 CET	56590	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:56.882299900 CET	3778	56590	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:57.056360960 CET	56592	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:57.061873913 CET	3778	56592	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:57.062148094 CET	56592	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:57.065114021 CET	56592	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:57.070401907 CET	3778	56592	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:57.070918083 CET	56592	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:57.076129913 CET	3778	56592	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:58.526958942 CET	3778	56590	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:58.527694941 CET	56590	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:58.533025980 CET	3778	56590	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:58.694269896 CET	3778	56592	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:58.695089102 CET	56592	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:58.700803041 CET	3778	56592	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:59.535509109 CET	56594	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:59.541472912 CET	3778	56594	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:59.541824102 CET	56594	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:59.545227051 CET	56594	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:59.550694942 CET	3778	56594	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:59.551187992 CET	56594	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:59.556643009 CET	3778	56594	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:59.702394962 CET	56596	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:59.708148956 CET	3778	56596	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:59.708600998 CET	56596	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:59.711689949 CET	56596	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:59.717099905 CET	3778	56596	154.213.187.11	192.168.2.15
Jan 13, 2025 23:23:59.717734098 CET	56596	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:23:59.723206997 CET	3778	56596	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:01.148216009 CET	3778	56594	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:01.149153948 CET	56594	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:01.154721022 CET	3778	56594	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:01.317015886 CET	3778	56596	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:01.317761898 CET	56596	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:01.323441029 CET	3778	56596	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:02.157211065 CET	56598	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:02.163286924 CET	3778	56598	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:02.163779020 CET	56598	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:02.166383028 CET	56598	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:02.172054052 CET	3778	56598	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:02.172287941 CET	56598	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:02.178090096 CET	3778	56598	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:02.325582027 CET	56600	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:02.331480980 CET	3778	56600	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:02.331893921 CET	56600	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:02.334976912 CET	56600	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:02.340548992 CET	3778	56600	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:02.340956926 CET	56600	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:02.346473932 CET	3778	56600	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:03.784388065 CET	3778	56598	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:03.784811020 CET	56598	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:03.789758921 CET	3778	56598	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:03.946049929 CET	3778	56600	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:03.946592093 CET	56600	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:03.952121973 CET	3778	56600	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:04.790693045 CET	56602	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:04.796447992 CET	3778	56602	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:04.796973944 CET	56602	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:04.799595118 CET	56602	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:04.804980993 CET	3778	56602	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:04.805402994 CET	56602	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:04.811111927 CET	3778	56602	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:04.954669952 CET	56604	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:04.960063934 CET	3778	56604	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:04.960206985 CET	56604	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:04.963073015 CET	56604	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:04.968091965 CET	3778	56604	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:04.968187094 CET	56604	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:04.973440886 CET	3778	56604	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:06.480165005 CET	3778	56602	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:06.480621099 CET	56602	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:06.485908985 CET	3778	56602	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:06.632085085 CET	3778	56604	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:06.632812023 CET	56604	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:06.638335943 CET	3778	56604	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:07.487770081 CET	56606	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:07.493349075 CET	3778	56606	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:07.493478060 CET	56606	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:07.496174097 CET	56606	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:07.501682043 CET	3778	56606	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:07.502058029 CET	56606	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:07.507673979 CET	3778	56606	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:07.639302969 CET	56608	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:07.645231009 CET	3778	56608	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:07.645504951 CET	56608	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:07.647862911 CET	56608	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:07.652930021 CET	3778	56608	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:07.653269053 CET	56608	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:07.658674955 CET	3778	56608	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:09.133090973 CET	3778	56606	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:09.133718014 CET	56606	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:09.139462948 CET	3778	56606	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:09.293945074 CET	3778	56608	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:09.294735909 CET	56608	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:09.300390005 CET	3778	56608	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:10.141856909 CET	56610	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:10.147600889 CET	3778	56610	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:10.148196936 CET	56610	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:10.152333975 CET	56610	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:10.158155918 CET	3778	56610	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:10.158652067 CET	56610	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:10.164047003 CET	3778	56610	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:10.303409100 CET	56612	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:10.309185028 CET	3778	56612	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:10.309617043 CET	56612	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:10.312915087 CET	56612	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:10.318785906 CET	3778	56612	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:10.319026947 CET	56612	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:10.324740887 CET	3778	56612	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:11.793272972 CET	3778	56610	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:11.793972969 CET	56610	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:11.799648046 CET	3778	56610	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:11.943131924 CET	3778	56612	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:11.943659067 CET	56612	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:11.949237108 CET	3778	56612	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:12.802329063 CET	56614	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:12.952924013 CET	56616	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:13.764039040 CET	3778	56614	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:13.764072895 CET	3778	56616	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:13.764261961 CET	56616	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:13.764370918 CET	56614	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:13.767899990 CET	56616	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:13.768024921 CET	56614	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:13.772986889 CET	3778	56616	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:13.773049116 CET	56616	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:13.773165941 CET	3778	56614	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:13.773241043 CET	56614	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:13.778114080 CET	3778	56616	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:13.778265953 CET	3778	56614	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:15.400172949 CET	3778	56616	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:15.400262117 CET	3778	56614	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:15.400775909 CET	56616	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:15.400846004 CET	56614	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:15.405635118 CET	3778	56616	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:15.406940937 CET	3778	56614	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:16.409420967 CET	56618	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:16.409625053 CET	56620	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:16.414529085 CET	3778	56618	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:16.414549112 CET	3778	56620	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:16.414724112 CET	56618	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:16.414856911 CET	56620	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:16.419101000 CET	56620	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:16.419732094 CET	56618	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:16.424330950 CET	3778	56620	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:16.424674034 CET	3778	56618	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:16.424726963 CET	56620	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:16.425157070 CET	56618	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:16.429925919 CET	3778	56620	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:16.430711031 CET	3778	56618	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:18.021442890 CET	3778	56620	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:18.022135019 CET	56620	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:18.027998924 CET	3778	56620	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:18.039062023 CET	3778	56618	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:18.039556980 CET	56618	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:18.044892073 CET	3778	56618	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:19.028209925 CET	56622	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:19.033965111 CET	3778	56622	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:19.034255028 CET	56622	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:19.036694050 CET	56622	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:19.041901112 CET	3778	56622	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:19.042253971 CET	56622	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:19.043622971 CET	56624	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:19.047935009 CET	3778	56622	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:19.049051046 CET	3778	56624	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:19.049185038 CET	56624	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:19.051486969 CET	56624	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:19.056360006 CET	3778	56624	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:19.056488991 CET	56624	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:19.061721087 CET	3778	56624	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:20.652060032 CET	3778	56622	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:20.652982950 CET	56622	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:20.658451080 CET	3778	56622	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:20.678975105 CET	3778	56624	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:20.679511070 CET	56624	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:20.684909105 CET	3778	56624	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:21.658108950 CET	56626	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:21.663585901 CET	3778	56626	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:21.663906097 CET	56626	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:21.665920019 CET	56626	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:21.671516895 CET	3778	56626	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:21.671627045 CET	56626	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:21.676881075 CET	3778	56626	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:21.685540915 CET	56628	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:21.690746069 CET	3778	56628	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:21.690984011 CET	56628	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:21.693032026 CET	56628	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:21.697940111 CET	3778	56628	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:21.698340893 CET	56628	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:21.703361034 CET	3778	56628	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:23.288992882 CET	3778	56626	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:23.289674044 CET	56626	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:23.295178890 CET	3778	56626	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:23.341042995 CET	3778	56628	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:23.341453075 CET	56628	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:23.346595049 CET	3778	56628	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:24.297552109 CET	56630	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:24.303153038 CET	3778	56630	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:24.303620100 CET	56630	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:24.306008101 CET	56630	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:24.311500072 CET	3778	56630	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:24.311976910 CET	56630	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:24.317631006 CET	3778	56630	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:24.347875118 CET	56632	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:24.353200912 CET	3778	56632	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:24.353460073 CET	56632	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:24.356460094 CET	56632	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:24.361659050 CET	3778	56632	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:24.361861944 CET	56632	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:24.366946936 CET	3778	56632	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:26.011198044 CET	3778	56630	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:26.011859894 CET	56630	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:26.017462969 CET	3778	56630	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:27.019058943 CET	56634	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:27.024791002 CET	3778	56634	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:27.025352001 CET	56634	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:27.028171062 CET	56634	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:27.033569098 CET	3778	56634	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:27.034048080 CET	56634	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:27.039299011 CET	3778	56634	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:28.434695005 CET	3778	56632	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:28.435447931 CET	56632	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:28.441119909 CET	3778	56632	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:28.630893946 CET	3778	56634	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:28.631721020 CET	56634	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:28.637525082 CET	3778	56634	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:29.442303896 CET	56636	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:29.447989941 CET	3778	56636	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:29.448476076 CET	56636	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:29.451546907 CET	56636	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:29.456778049 CET	3778	56636	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:29.457108021 CET	56636	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:29.462424994 CET	3778	56636	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:29.636600971 CET	56638	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:29.642100096 CET	3778	56638	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:29.642452955 CET	56638	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:29.644505024 CET	56638	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:29.649538994 CET	3778	56638	154.213.187.11	192.168.2.15
Jan 13, 2025 23:24:29.649828911 CET	56638	3778	192.168.2.15	154.213.187.11
Jan 13, 2025 23:24:29.655461073 CET	3778	56638	154.213.187.11	192.168.2.15

System Behavior

Analysis Process: camp.arm.elf PID: 5533, Parent PID: 5449

General

Start time (UTC):	22:22:17
Start date (UTC):	13/01/2025
Path:	/tmp/camp.arm.elf
Arguments:	/tmp/camp.arm.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: camp.arm.elf PID: 5535, Parent PID: 5533

General

Start time (UTC):	22:22:17
Start date (UTC):	13/01/2025
Path:	/tmp/camp.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: camp.arm.elf PID: 5537, Parent PID: 5535

General

Start time (UTC):	22:22:17
Start date (UTC):	13/01/2025
Path:	/tmp/camp.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: camp.arm.elf PID: 5538, Parent PID: 5535

General

Start time (UTC):	22:22:17
Start date (UTC):	13/01/2025
Path:	/tmp/camp.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: camp.arm.elf PID: 5543, Parent PID: 5533

General

Start time (UTC):	22:22:23
Start date (UTC):	13/01/2025
Path:	/tmp/camp.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: camp.arm.elf PID: 5545, Parent PID: 5533

General

Start time (UTC):	22:22:23
Start date (UTC):	13/01/2025
Path:	/tmp/camp.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report camp.arm.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: camp.arm.elf PID: 5533, Parent PID: 5449

General

Chronological Activities

Analysis Process: camp.arm.elf PID: 5535, Parent PID: 5533

General

Chronological Activities

Analysis Process: camp.arm.elf PID: 5537, Parent PID: 5535

General

Chronological Activities

Analysis Process: camp.arm.elf PID: 5538, Parent PID: 5535

General

Chronological Activities

Analysis Process: camp.arm.elf PID: 5543, Parent PID: 5533

General

Chronological Activities

Analysis Process: camp.arm.elf PID: 5545, Parent PID: 5533

General

Chronological Activities

Linux Analysis Report
camp.arm.elf