Create Interactive Tour

Linux Analysis Report
Fantazy.spc.elf

Overview

General Information

Sample name:	Fantazy.spc.elf
Analysis ID:	1597419
MD5:	c11975d2ffba3d7ccbaf51dc279af6e6
SHA1:	37ed9a21c243cf19cfe597dec27704422c00ca13
SHA256:	5a3dcd4a6c6a748f5984e9b2f92675fd6bea7ed7e9f51e7bc098e8c2476379a5
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Reads CPU information from /sys indicative of miner or evasive malware

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1597419
Start date and time:	2025-01-23 09:16:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Fantazy.spc.elf
Detection:	MAL
Classification:	mal64.spre.troj.linELF@0/11@0/0

Warnings

Connection to analysis system has been lost, crash info: Unknown

Runtime Messages

Command:	/tmp/Fantazy.spc.elf
PID:	6209
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	VegaSec-KATANA001
Standard Error:

Process Tree

system is lnxubuntu20

Fantazy.spc.elf (PID: 6209, Parent: 6126, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/Fantazy.spc.elf

Fantazy.spc.elf New Fork (PID: 6212, Parent: 6209)

Fantazy.spc.elf New Fork (PID: 6214, Parent: 6209)

Fantazy.spc.elf New Fork (PID: 6216, Parent: 6214)

Fantazy.spc.elf New Fork (PID: 6217, Parent: 6214)

Fantazy.spc.elf New Fork (PID: 6219, Parent: 6214)

systemd New Fork (PID: 6223, Parent: 1)

journalctl (PID: 6223, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 6244, Parent: 1)

dbus-daemon (PID: 6244, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6257, Parent: 1860)

pulseaudio (PID: 6257, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6258, Parent: 1)

rsyslogd (PID: 6258, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6259, Parent: 1)

systemd-journald (PID: 6259, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

gvfsd-fuse New Fork (PID: 6260, Parent: 2038)

fusermount (PID: 6260, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 6273, Parent: 1)

dbus-daemon (PID: 6273, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6274, Parent: 1)

systemd-journald (PID: 6274, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6276, Parent: 1)

dbus-daemon (PID: 6276, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6277, Parent: 1)

rsyslogd (PID: 6277, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6278, Parent: 1)

systemd-journald (PID: 6278, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6279, Parent: 1860)

pulseaudio (PID: 6279, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6280, Parent: 1)

dbus-daemon (PID: 6280, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6282, Parent: 1)

systemd-journald (PID: 6282, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6283, Parent: 1)

rsyslogd (PID: 6283, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6284, Parent: 1)

dbus-daemon (PID: 6284, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6285, Parent: 1)

systemd-journald (PID: 6285, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6287, Parent: 1860)

pulseaudio (PID: 6287, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6288, Parent: 1)

rsyslogd (PID: 6288, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gdm3 New Fork (PID: 6289, Parent: 1320)

Default (PID: 6289, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6290, Parent: 1320)

Default (PID: 6290, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6291, Parent: 1320)

Default (PID: 6291, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6292, Parent: 1)

rsyslogd (PID: 6292, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6294, Parent: 1860)

pulseaudio (PID: 6294, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6299, Parent: 1)

gpu-manager (PID: 6299, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6300, Parent: 1)

generate-config (PID: 6300, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6301, Parent: 1)

gpu-manager (PID: 6301, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6302, Parent: 6301)

sh (PID: 6302, Parent: 6301, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

gpu-manager New Fork (PID: 6303, Parent: 6301)

sh (PID: 6303, Parent: 6301, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6304, Parent: 6303)

grep (PID: 6304, Parent: 6303, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6305, Parent: 6301)

sh (PID: 6305, Parent: 6301, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

gpu-manager New Fork (PID: 6306, Parent: 6301)

sh (PID: 6306, Parent: 6301, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6307, Parent: 6306)

grep (PID: 6307, Parent: 6306, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6308, Parent: 6301)

sh (PID: 6308, Parent: 6301, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

gpu-manager New Fork (PID: 6309, Parent: 6301)

sh (PID: 6309, Parent: 6301, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6310, Parent: 6309)

grep (PID: 6310, Parent: 6309, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6311, Parent: 6301)

sh (PID: 6311, Parent: 6301, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

gpu-manager New Fork (PID: 6314, Parent: 6301)

sh (PID: 6314, Parent: 6301, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6315, Parent: 6314)

grep (PID: 6315, Parent: 6314, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6316, Parent: 1)

generate-config (PID: 6316, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6317, Parent: 6316)

pkill (PID: 6317, Parent: 6316, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6318, Parent: 1)

gdm-wait-for-drm (PID: 6318, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6320, Parent: 1)

systemd New Fork (PID: 6321, Parent: 1)

generate-config (PID: 6321, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6322, Parent: 1)

gpu-manager (PID: 6322, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6323, Parent: 6322)

sh (PID: 6323, Parent: 6322, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

gpu-manager New Fork (PID: 6324, Parent: 6322)

sh (PID: 6324, Parent: 6322, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

gpu-manager New Fork (PID: 6325, Parent: 6322)

gpu-manager New Fork (PID: 6326, Parent: 6322)

sh (PID: 6326, Parent: 6322, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

gpu-manager New Fork (PID: 6327, Parent: 6322)

gpu-manager New Fork (PID: 6328, Parent: 6322)

gpu-manager New Fork (PID: 6329, Parent: 6322)

gpu-manager New Fork (PID: 6330, Parent: 6322)

systemd New Fork (PID: 6331, Parent: 1)

generate-config (PID: 6331, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6332, Parent: 1)

gpu-manager (PID: 6332, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6333, Parent: 6332)

gpu-manager New Fork (PID: 6334, Parent: 6332)

gpu-manager New Fork (PID: 6335, Parent: 6332)

gpu-manager New Fork (PID: 6336, Parent: 6332)

gpu-manager New Fork (PID: 6337, Parent: 6332)

gpu-manager New Fork (PID: 6338, Parent: 6332)

gpu-manager New Fork (PID: 6339, Parent: 6332)

gpu-manager New Fork (PID: 6340, Parent: 6332)

systemd New Fork (PID: 6341, Parent: 1)

generate-config (PID: 6341, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6342, Parent: 6341)

systemd New Fork (PID: 6343, Parent: 1)

gdm-wait-for-drm (PID: 6343, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6344, Parent: 1)

gpu-manager (PID: 6344, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6345, Parent: 1)

generate-config (PID: 6345, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6346, Parent: 1)

gpu-manager (PID: 6346, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6347, Parent: 1)

systemd New Fork (PID: 6348, Parent: 1)

plymouth (PID: 6348, Parent: 1, MD5: 87003efd8dad470042f5e75360a8f49f) Arguments: /bin/plymouth quit

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Bitcoin Miner
• Networking
• System Summary
• Persistence and Installation Behavior
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Fantazy.spc.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: Fantazy.spc.elf	Virustotal: Detection: 53%			Perma Link
Source: Fantazy.spc.elf	ReversingLabs: Detection: 60%

Source: /usr/bin/pkill (PID: 6317)

Reads CPU info from /sys: /sys/devices/system/cpu/online

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.23:49066 -> 41.216.189.127:63645
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 196.141.189.118:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 143.2.43.122:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 212.156.20.233:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 61.84.150.152:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 148.252.65.112:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 166.2.208.55:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 119.115.23.153:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 164.175.186.39:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 98.110.241.160:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 222.80.110.111:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 107.122.40.63:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 107.42.163.109:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 2.148.22.203:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 63.56.199.37:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 109.174.213.173:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 187.171.117.205:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 92.122.74.133:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 116.14.98.54:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 156.124.141.92:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 110.202.87.179:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 159.88.189.24:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 187.104.208.102:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 23.216.84.200:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 42.68.188.79:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 171.61.94.162:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 84.253.214.90:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 206.27.105.171:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 174.66.154.45:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 78.107.82.49:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 159.178.67.189:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 141.112.145.91:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 46.219.144.159:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 158.116.95.80:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 181.75.111.114:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 159.88.98.119:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 213.184.255.242:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 23.211.233.172:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 222.239.241.43:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 95.174.166.201:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 110.179.176.180:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 1.28.106.155:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 20.245.83.110:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 210.230.216.254:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 178.200.155.233:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 36.216.115.228:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 164.38.8.134:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 96.175.224.100:2323
Source: global traffic	TCP traffic: 192.168.2.23:50272 -> 154.52.153.86:2323

Source: /usr/sbin/rsyslogd (PID: 6258)	Reads hosts file: /etc/hosts			Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6292)	Reads hosts file: /etc/hosts			Jump to behavior

Source: /tmp/Fantazy.spc.elf (PID: 6209)

Socket: 127.0.0.1:59025

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 41.216.189.127
Source: unknown	TCP traffic detected without corresponding DNS query: 41.216.189.127
Source: unknown	TCP traffic detected without corresponding DNS query: 41.216.189.127
Source: unknown	TCP traffic detected without corresponding DNS query: 196.141.189.118
Source: unknown	TCP traffic detected without corresponding DNS query: 97.186.231.114
Source: unknown	TCP traffic detected without corresponding DNS query: 211.195.85.118
Source: unknown	TCP traffic detected without corresponding DNS query: 48.18.12.117
Source: unknown	TCP traffic detected without corresponding DNS query: 197.172.253.241
Source: unknown	TCP traffic detected without corresponding DNS query: 200.171.149.173
Source: unknown	TCP traffic detected without corresponding DNS query: 206.31.17.34
Source: unknown	TCP traffic detected without corresponding DNS query: 88.102.244.6
Source: unknown	TCP traffic detected without corresponding DNS query: 94.245.17.145
Source: unknown	TCP traffic detected without corresponding DNS query: 93.183.69.95
Source: unknown	TCP traffic detected without corresponding DNS query: 143.2.43.122
Source: unknown	TCP traffic detected without corresponding DNS query: 72.200.82.66
Source: unknown	TCP traffic detected without corresponding DNS query: 64.58.178.135
Source: unknown	TCP traffic detected without corresponding DNS query: 45.102.176.42
Source: unknown	TCP traffic detected without corresponding DNS query: 187.201.17.218
Source: unknown	TCP traffic detected without corresponding DNS query: 125.77.231.210
Source: unknown	TCP traffic detected without corresponding DNS query: 125.61.105.63
Source: unknown	TCP traffic detected without corresponding DNS query: 161.12.196.244
Source: unknown	TCP traffic detected without corresponding DNS query: 96.185.164.155
Source: unknown	TCP traffic detected without corresponding DNS query: 99.227.235.32
Source: unknown	TCP traffic detected without corresponding DNS query: 212.156.20.233
Source: unknown	TCP traffic detected without corresponding DNS query: 98.78.158.48
Source: unknown	TCP traffic detected without corresponding DNS query: 177.51.54.140
Source: unknown	TCP traffic detected without corresponding DNS query: 107.55.131.162
Source: unknown	TCP traffic detected without corresponding DNS query: 59.185.227.66
Source: unknown	TCP traffic detected without corresponding DNS query: 185.43.6.116
Source: unknown	TCP traffic detected without corresponding DNS query: 100.168.84.229
Source: unknown	TCP traffic detected without corresponding DNS query: 109.160.208.5
Source: unknown	TCP traffic detected without corresponding DNS query: 150.207.182.54
Source: unknown	TCP traffic detected without corresponding DNS query: 61.84.150.152
Source: unknown	TCP traffic detected without corresponding DNS query: 145.148.180.100
Source: unknown	TCP traffic detected without corresponding DNS query: 142.244.58.124
Source: unknown	TCP traffic detected without corresponding DNS query: 65.238.238.169
Source: unknown	TCP traffic detected without corresponding DNS query: 17.93.63.111
Source: unknown	TCP traffic detected without corresponding DNS query: 68.121.179.77
Source: unknown	TCP traffic detected without corresponding DNS query: 99.123.180.10
Source: unknown	TCP traffic detected without corresponding DNS query: 208.190.194.185
Source: unknown	TCP traffic detected without corresponding DNS query: 69.158.114.117
Source: unknown	TCP traffic detected without corresponding DNS query: 116.216.55.163
Source: unknown	TCP traffic detected without corresponding DNS query: 148.252.65.112
Source: unknown	TCP traffic detected without corresponding DNS query: 192.126.211.160
Source: unknown	TCP traffic detected without corresponding DNS query: 195.124.16.222
Source: unknown	TCP traffic detected without corresponding DNS query: 99.33.216.12
Source: unknown	TCP traffic detected without corresponding DNS query: 96.28.75.65
Source: unknown	TCP traffic detected without corresponding DNS query: 184.252.46.94
Source: unknown	TCP traffic detected without corresponding DNS query: 181.51.113.194

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33606
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1389, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1476, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1809, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 2038, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 4333, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 4501, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6036, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6187, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6188, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6214, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6219, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6244, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6253, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6257, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6258, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6259, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6273, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6274, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6275, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6276, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6277, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6278, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6279, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6280, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6281, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6282, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6283, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6284, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6285, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6286, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6287, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6288, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6289, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6290, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6291, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6293, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6294, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6295, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6299, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6300, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6302, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6303, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6304, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6305, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6306, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6308, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6309, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6310, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6311, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6314, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6315, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6319, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6320, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6321, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6323, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6324, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6325, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6326, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6327, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6328, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6329, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6330, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6331, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6333, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6334, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6335, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6336, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6337, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6338, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6340, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6342, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6343, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6344, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6345, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6346, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6347, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6348, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1389, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1476, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1809, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 2038, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 4333, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 4501, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6036, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6187, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6188, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6214, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6219, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6244, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6253, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6257, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6258, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6259, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6273, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6274, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6275, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6276, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6277, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6278, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6279, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6280, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6281, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6282, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6283, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6284, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6285, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6286, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6287, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6288, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6289, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6290, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6291, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6293, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6294, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6295, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6299, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6300, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6302, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6303, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6304, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6305, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6306, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6308, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6309, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6310, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6311, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6314, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6315, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6319, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6320, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6321, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6323, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6324, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6325, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6326, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6327, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6328, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6329, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6330, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6331, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6333, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6334, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6335, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6336, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6337, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6338, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6340, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6342, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6343, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6344, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6345, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6346, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6347, result: successful	Jump to behavior
Source: /tmp/Fantazy.spc.elf (PID: 6217)	SIGKILL sent: pid: 6348, result: successful	Jump to behavior

Source: classification engine

Classification label: mal64.spre.troj.linELF@0/11@0/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 6244)	File: /proc/6244/mounts			Jump to behavior
Source: /bin/fusermount (PID: 6260)	File: /proc/6260/mounts			Jump to behavior

Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/3088/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/230/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/230/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/110/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/110/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/231/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/231/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/111/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/111/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/232/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/232/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/112/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/112/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/233/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/233/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/113/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/113/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/234/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/234/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/1335/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/114/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/114/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/235/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/235/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/1334/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/115/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/115/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/236/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/236/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/116/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/116/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/237/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/237/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/117/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/117/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/910/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/910/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/118/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/118/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/119/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/119/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/10/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/10/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/11/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/11/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/12/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/12/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/13/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/13/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/14/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/14/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/15/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/15/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/16/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/16/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/17/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/17/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/18/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/18/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/120/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/120/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/121/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/121/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/1/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/1/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/122/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/122/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/243/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/243/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/123/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/123/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/2/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/2/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/124/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/124/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/3/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/3/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/125/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/125/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/4/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/4/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/126/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/126/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/248/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/248/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/6/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/6/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/127/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/127/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/128/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/128/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/249/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/249/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/9/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/9/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/20/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/20/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/21/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/21/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/22/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/22/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/23/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6317)	File opened: /proc/23/cmdline	Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6302)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6303)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6305)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6306)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6308)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6309)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6311)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6314)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6323)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6324)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6326)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior

Source: /bin/sh (PID: 6304)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6307)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6310)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6315)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior

Source: /usr/share/gdm/generate-config (PID: 6317)

Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Jump to behavior

Source: /usr/sbin/rsyslogd (PID: 6258)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6292)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 6301)	Log file created: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6322)	Log file created: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6332)	Log file created: /var/log/gpu-manager.log	Jump to dropped file

Source: /usr/bin/gpu-manager (PID: 6301)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6322)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6332)	Truncated file: /var/log/gpu-manager.log	Jump to behavior

Source: /usr/bin/pkill (PID: 6317)

Reads CPU info from /sys: /sys/devices/system/cpu/online

Jump to behavior

Source: /tmp/Fantazy.spc.elf (PID: 6209)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6258)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6292)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6301)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6322)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6332)	Queries kernel information via 'uname':	Jump to behavior

Source: Fantazy.spc.elf, 6209.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp, Fantazy.spc.elf, 6212.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp, Fantazy.spc.elf, 6214.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp, Fantazy.spc.elf, 6216.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp, Fantazy.spc.elf, 6219.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: Fantazy.spc.elf, 6209.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp, Fantazy.spc.elf, 6212.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp, Fantazy.spc.elf, 6214.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp, Fantazy.spc.elf, 6216.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp, Fantazy.spc.elf, 6219.1.00005595c5f36000.00005595c5fbb000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/sparc
Source: Fantazy.spc.elf, 6209.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp, Fantazy.spc.elf, 6212.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp, Fantazy.spc.elf, 6214.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp, Fantazy.spc.elf, 6216.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp, Fantazy.spc.elf, 6219.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp	Binary or memory string: x-nx86_64/usr/bin/qemu-sparc/tmp/Fantazy.spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Fantazy.spc.elf
Source: Fantazy.spc.elf, 6209.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp, Fantazy.spc.elf, 6212.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp, Fantazy.spc.elf, 6214.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp, Fantazy.spc.elf, 6216.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp, Fantazy.spc.elf, 6219.1.00007fff7c43f000.00007fff7c460000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Indicator Removal	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	1 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Fantazy.spc.elf	54%	Virustotal		Browse
Fantazy.spc.elf	61%	ReversingLabs	Linux.Trojan.Mirai
Fantazy.spc.elf	100%	Avira	EXP/ELF.Gafgyt.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
146.37.190.2	unknown	United States	197938	TRAVIANGAMESDE	false
193.39.127.75	unknown	Sweden	3257	GTT-BACKBONEGTTDE	false
141.240.125.130	unknown	United States	18454	AUGSBURGUS	false
167.240.180.157	unknown	United States	13325	STOMIUS	false
59.75.81.237	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
116.114.135.44	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
163.198.213.231	unknown	South Africa	9009	M247GB	false
41.106.35.230	unknown	Algeria	36947	ALGTEL-ASDZ	false
212.208.35.220	unknown	France	702	UUNETUS	false
4.37.125.76	unknown	United States	3356	LEVEL3US	false
177.60.105.94	unknown	Brazil	26599	TELEFONICABRASILSABR	false
146.31.68.39	unknown	United States	197938	TRAVIANGAMESDE	false
23.211.233.172	unknown	United States	16625	AKAMAI-ASUS	false
170.243.78.66	unknown	United States	11685	HNBCOL-ASUS	false
87.55.219.202	unknown	Denmark	3292	TDCTDCASDK	false
68.202.105.110	unknown	United States	33363	BHN-33363US	false
177.177.25.57	unknown	Brazil	7738	TelemarNorteLesteSABR	false
141.255.22.104	unknown	Greece	3329	HOL-GRAthensGreeceGR	false
45.102.176.42	unknown	Egypt	37069	MOBINILEG	false
189.194.151.198	unknown	Mexico	13999	MegaCableSAdeCVMX	false
109.83.42.85	unknown	Saudi Arabia	34400	ASN-ETTIHADETISALATSA	false
63.91.239.135	unknown	United States	701	UUNETUS	false
79.8.236.11	unknown	Italy	3269	ASN-IBSNAZIT	false
146.141.107.68	unknown	South Africa	2018	TENET-1ZA	false
83.238.96.186	unknown	Poland	12741	AS-NETIAWarszawa02-822PL	false
183.147.166.175	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
213.146.119.80	unknown	Germany	8648	KAMP-DE	false
99.33.216.12	unknown	United States	7018	ATT-INTERNET4US	false
72.248.208.23	unknown	United States	7029	WINDSTREAMUS	false
118.234.107.19	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
123.14.112.56	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
17.32.113.124	unknown	United States	714	APPLE-ENGINEERINGUS	false
118.5.226.231	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
58.182.169.34	unknown	Singapore	55430	STARHUB-NGNBNStarhubLtdSG	false
60.239.92.18	unknown	Japan	2518	BIGLOBEBIGLOBEIncJP	false
142.244.58.124	unknown	Canada	3359	U-ALBERTACA	false
20.197.68.171	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
156.88.174.192	unknown	United States	10695	WAL-MARTUS	false
81.140.62.151	unknown	United Kingdom	6871	PLUSNETUKInternetServiceProviderGB	false
212.84.68.219	unknown	United Kingdom	43545	TELEDATAGB	false
211.140.252.154	unknown	China	56044	CMNET-AS-LIAONINGChinaMobilecommunicationscorporationC	false
58.162.242.38	unknown	Australia	1221	ASN-TELSTRATelstraCorporationLtdAU	false
159.88.98.119	unknown	United States	32982	DOE-HQUS	false
143.2.43.122	unknown	United States	11003	PANDGUS	false
12.120.30.131	unknown	United States	4466	EASYLINK2US	false
85.48.125.91	unknown	Spain	12479	UNI2-ASES	false
220.1.83.56	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
51.4.35.95	unknown	Germany	200517	MS-DEUTSCHLANDDE	false
71.76.129.6	unknown	United States	11426	TWC-11426-CAROLINASUS	false
195.82.78.161	unknown	Germany	8469	PIRONETNDH-ASCANCOMPironetAGCoKGDE	false
206.237.109.178	unknown	United States	174	COGENT-174US	false
122.40.152.198	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
168.46.209.30	unknown	United States	1761	TDIR-CAPNETUS	false
27.137.129.29	unknown	Japan	9824	JTCL-JP-ASJupiterTelecommunicationCoLtdJP	false
19.121.94.109	unknown	United States	3	MIT-GATEWAYSUS	false
163.68.191.124	unknown	France	17816	CHINA169-GZChinaUnicomIPnetworkChina169Guangdongprovi	false
196.172.79.51	unknown	Ghana	37030	Airtel-GhanaGH	false
198.103.43.225	unknown	Canada	2665	CDAGOVNCA	false
94.220.44.215	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
70.196.138.184	unknown	United States	6167	CELLCO-PARTUS	false
119.3.202.237	unknown	China	55990	HWCSNETHuaweiCloudServicedatacenterCN	false
178.82.237.251	unknown	Switzerland	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
64.58.178.135	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
93.189.9.83	unknown	Russian Federation	47313	ECOM-RZN-ASRU	false
209.137.236.32	unknown	United States	40097	PRINTINGFORLESSUS	false
188.252.157.223	unknown	Croatia (LOCAL Name: Hrvatska)	31012	DCM-ASVipnetdooHR	false
218.155.176.189	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
92.122.74.133	unknown	European Union	12956	TELEFONICATELXIUSES	false
65.48.112.3	unknown	United States	40911	L2NC-ASUS	false
32.153.160.0	unknown	United States	2686	ATGS-MMD-ASUS	false
185.43.6.116	unknown	Russian Federation	29182	THEFIRST-ASRU	false
84.185.131.193	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
84.37.167.11	unknown	France	4589	EASYNETEasynetGlobalServicesEU	false
13.209.40.62	unknown	United States	16509	AMAZON-02US	false
81.26.35.60	unknown	Norway	43200	PCSUPPORTNO	false
154.196.233.239	unknown	Seychelles	139646	HKMTC-AS-APHONGKONGMegalayerTechnologyCoLimitedHK	false
23.91.54.48	unknown	United States	36315	SERVPACUS	false
57.175.155.135	unknown	Belgium	2686	ATGS-MMD-ASUS	false
178.200.155.233	unknown	Germany	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
40.240.52.92	unknown	United States	4249	LILLY-ASUS	false
27.37.69.204	unknown	China	17816	CHINA169-GZChinaUnicomIPnetworkChina169Guangdongprovi	false
164.175.186.39	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
17.138.68.236	unknown	United States	714	APPLE-ENGINEERINGUS	false
193.23.24.148	unknown	Sweden	1257	TELE2EU	false
74.41.54.242	unknown	United States	7011	FRONTIER-AND-CITIZENSUS	false
181.25.137.111	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
157.200.83.125	unknown	Finland	1759	TSF-IP-CORETeliaFinlandOyjEU	false
219.15.27.81	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
45.22.24.155	unknown	United States	7018	ATT-INTERNET4US	false
73.122.225.78	unknown	United States	7922	COMCAST-7922US	false
133.128.146.225	unknown	Japan	385	AFCONC-BLOCK1-ASUS	false
147.27.201.19	unknown	Greece	8278	TUC-ASGR	false
46.87.209.222	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
111.194.176.200	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
97.242.191.3	unknown	United States	6167	CELLCO-PARTUS	false
27.152.173.224	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
107.122.40.63	unknown	United States	7018	ATT-INTERNET4US	false
177.51.54.140	unknown	Brazil	26615	TIMSABR	false
48.165.226.202	unknown	United States	2686	ATGS-MMD-ASUS	false
40.15.228.222	unknown	United States	4249	LILLY-ASUS	false

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AUGSBURGUS	sh4.elf	Get hash	malicious	Mirai	Browse	141.224.174.234
	arm5.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	141.224.216.98
	sora.sh4.elf	Get hash	malicious	Mirai	Browse	141.224.226.177
	x86_64.elf	Get hash	malicious	Unknown	Browse	141.240.154.59
	x86.elf	Get hash	malicious	Mirai	Browse	141.224.174.238
	bin.sh.elf	Get hash	malicious	Mirai	Browse	141.243.6.216
	yakuza.sh.elf	Get hash	malicious	Unknown	Browse	141.240.102.239
	154.216.17.9-skid.x86_64-2024-08-04T06_23_14.elf	Get hash	malicious	Mirai, Moobot	Browse	141.224.102.82
	botx.arm.elf	Get hash	malicious	Mirai	Browse	141.224.174.207
	qD7cj0t7Ag.elf	Get hash	malicious	Mirai, Moobot	Browse	141.240.29.11
TRAVIANGAMESDE	Fantazy.mpsl.elf	Get hash	malicious	Unknown	Browse	146.153.26.173
	154.213.189.141-mips-2025-01-21T03_19_06.elf	Get hash	malicious	Mirai, Moobot	Browse	146.47.145.255
	star.ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	146.36.36.24
	frosty.x86.elf	Get hash	malicious	Mirai	Browse	146.10.40.126
	sora.mpsl.elf	Get hash	malicious	Mirai	Browse	146.8.245.146
	xd.arm.elf	Get hash	malicious	Mirai	Browse	146.130.175.156
	arm4.elf	Get hash	malicious	Mirai	Browse	146.27.181.133
	178.215.238.129-x86-2025-01-15T04_59_51.elf	Get hash	malicious	Mirai	Browse	146.46.85.181
	XB6SkLK7Al.dll	Get hash	malicious	Wannacry	Browse	146.29.208.1
	x86.elf	Get hash	malicious	Unknown	Browse	146.43.53.232
GTT-BACKBONEGTTDE	armv6l.elf	Get hash	malicious	Unknown	Browse	66.227.73.125
	x86.elf	Get hash	malicious	Mirai, Moobot	Browse	195.81.173.158
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	161.162.59.237
	http://memberreview.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	67.199.150.85
	i686.elf	Get hash	malicious	Unknown	Browse	207.34.43.92
	sora.arm.elf	Get hash	malicious	Mirai	Browse	194.183.117.240
	bot.ppc.elf	Get hash	malicious	Unknown	Browse	66.227.52.251
	spc.elf	Get hash	malicious	Mirai	Browse	213.251.29.156
	bC61G18iPf.dll	Get hash	malicious	Wannacry	Browse	213.39.119.211
	v9xYj92wR3.dll	Get hash	malicious	Wannacry	Browse	213.254.242.1
STOMIUS	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	167.241.153.138
	sora.mpsl.elf	Get hash	malicious	Mirai	Browse	167.245.160.78
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	167.240.163.213
	res.spc.elf	Get hash	malicious	Unknown	Browse	204.22.16.90
	mips.elf	Get hash	malicious	Unknown	Browse	136.181.15.160
	sora.mips.elf	Get hash	malicious	Unknown	Browse	162.108.58.156
	miori.sh4.elf	Get hash	malicious	Unknown	Browse	167.244.146.149
	Fantazy.i686.elf	Get hash	malicious	Unknown	Browse	204.22.54.162
	3.elf	Get hash	malicious	Unknown	Browse	136.181.141.100
	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	204.23.146.45

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.OCi03h (deleted)

Download File

Process:	/tmp/Fantazy.spc.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	312
Entropy (8bit):	3.573018369713392
Encrypted:	false
SSDEEP:	6:M0caFF6EEcsl10Y/VUS/FYcaFF6EEcsq0/VBVWPj/VfKoO/VNfiY/VH:MRanIluS/FFanIR/l
MD5:	F384217A371CD303AF5CF97DD1892871
SHA1:	477B567DF90A1C2A0023543A1CF8F6A75536FA12
SHA-256:	AECBDF5C6E3E875AEFC017AFEA3EBF3C8FA7A4988C175057B442B22C7A80FE5B
SHA-512:	22DFC98AC175F681FBA89DACCFB91DF2D7BC175B711566B1D09D21F6BEC4A4E6BF0B2CFFC5034613BE6FD4A2881BA7FBF01A8F8D3A99606C41F08A1B5662712C
Malicious:	false
Reputation:	low
Preview:	10000-24000 r-xp 00000000 fd:00 531563 /tmp/Fantazy.spc.elf.33000-34000 rw-p 00013000 fd:00 531563 /tmp/Fantazy.spc.elf.34000-35000 rw-p 00000000 00:00 0 .35000-37000 rw-p 00000000 00:00 0 .ff7fe000-ff7ff000 ---p 00000000 00:00 0 .ff7ff000-fffff000 rw-p 00000000 00:00 0 [stack].

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	CSV text
Category:	dropped
Size (bytes):	4728
Entropy (8bit):	4.7126631058771755
Encrypted:	false
SSDEEP:	96:16ALAVcUzdV2e0Mwso2GEhG0QxmMcKQqpRXV:ac0duv
MD5:	EB47DB58DA3E2B5EF44842B12B6D48A2
SHA1:	54FF7CFE24D9F0C9F20050B6564DC899A1C355E0
SHA-256:	B23CBDF05D2BF6B291E500B4E80E92EA0B88BA1E760518CE5C389923864A1FCC
SHA-512:	2A2C8740B3ACCD47EE6E5B66D7BB63DC29A28CC33D01143B4CD8EEAB434945219FFDC3ADBA292CF01A2A9769DD0DB2FBDA80D9BB4F79C26297C97FFD5F481953
Malicious:	false
Reputation:	low
Preview:	Jan 23 02:16:52 galassia kernel: [ 416.287334] New task spawned: old: (tgid 6292, tid 6292), new (tgid: 6292, tid: 6296).Jan 23 02:16:52 galassia kernel: [ 416.287898] New task spawned: old: (tgid 6292, tid 6292), new (tgid: 6292, tid: 6297).Jan 23 02:16:52 galassia kernel: [ 416.295476] New task spawned: old: (tgid 6292, tid 6297), new (tgid: 6292, tid: 6298).Jan 23 02:16:54 galassia kernel: [ 418.307672] New task spawned: old: (tgid 6301, tid 6301), new (tgid: 6302, tid: 6302).Jan 23 02:16:54 galassia kernel: [ 418.345797] New task spawned: old: (tgid 6301, tid 6301), new (tgid: 6303, tid: 6303).Jan 23 02:16:54 galassia kernel: [ 418.400119] New task spawned: old: (tgid 6303, tid 6303), new (tgid: 6304, tid: 6304).Jan 23 02:16:54 galassia kernel: [ 418.506763] New task spawned: old: (tgid 6301, tid 6301), new (tgid: 6305, tid: 6305).Jan 23 02:16:54 galassia kernel: [ 418.538977] New task spawned: old: (tgid 6301, tid 6301), new (tgid: 6306, tid: 6306).Jan 23 02:16:54 galassia

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	27116
Entropy (8bit):	5.0254086336778645
Encrypted:	false
SSDEEP:	384:XjRKrZcro85ESeGNG80dyTueEe+ea+lCeU9MGef3AnezeLR8WeVCuSieSvw2eb59:XjR0l8561dmLt7nrj6AGD6S
MD5:	972B01D02B1976081032568ABF9528A4
SHA1:	83107997AA08C86BE8FA16DEEDF69F10D68F9B5E
SHA-256:	A8BEA1151D12A53A9B0C071D0698551FB219012C321AB57CA3D10BC4352141D5
SHA-512:	B1A4FF5D345D3E349851C27C105F134244723261CD8A508243BA35032E55E76536FD5B525DA76AAD7EC3183208ACC62B92749B1822C51DD32BBE3D572A35EB52
Malicious:	false
Preview:	Jan 23 02:16:52 galassia kernel: [ 414.621664] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Jan 23 02:16:52 galassia kernel: [ 414.621744] systemd[1]: rsyslog.service: Failed with result 'signal'..Jan 23 02:16:52 galassia kernel: [ 414.641661] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL.Jan 23 02:16:52 galassia kernel: [ 414.641727] systemd[1]: systemd-journald.service: Failed with result 'signal'..Jan 23 02:16:52 galassia kernel: [ 414.642033] systemd[1]: Failed to start Journal Service..Jan 23 02:16:52 galassia kernel: [ 414.642119] systemd[1]: Dependency failed for Flush Journal to Persistent Storage..Jan 23 02:16:52 galassia kernel: [ 414.642124] systemd[1]: systemd-journal-flush.service: Job systemd-journal-flush.service/start failed with result 'dependency'..Jan 23 02:16:52 galassia kernel: [ 414.642262] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 2..Jan 23 02:

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.12064476723378
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Fantazy.spc.elf
File size:	79'896 bytes
MD5:	c11975d2ffba3d7ccbaf51dc279af6e6
SHA1:	37ed9a21c243cf19cfe597dec27704422c00ca13
SHA256:	5a3dcd4a6c6a748f5984e9b2f92675fd6bea7ed7e9f51e7bc098e8c2476379a5
SHA512:	60f0156c49d342e509124e41ce3aa32aa6a7f91ab364e00e1e48770ca1787ecdf2964c6996c983468fe9b6b94d9c5a72800cc5746262f6cfbacf31fdab7dca33
SSDEEP:	1536:10FeXSsT0hd6L6fbe9uG8ZGuc1eQO4LN2AsFIwF:Oeis3WqCBc17qFIwF
TLSH:	BB731710ED7D2E2BC0D8A27E11F78616F2F6360E14B4C66D7D350F8EBB54690A4863B6
File Content Preview:	.ELF...........................4..6......4. ...(......................4...4...............4...4...4....4............dt.Q................................@..(....@.G.................#.....bH..`.....!..... ,..@.....".........`......$ ,.. ,..@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	79496
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0x11f6c	0x0	0x6	AX	4
.fini	PROGBITS	0x2201c	0x1201c	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x22030	0x12030	0x13e0	0x0	0x2	A	8
.ctors	PROGBITS	0x33414	0x13414	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x3341c	0x1341c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x33428	0x13428	0x220	0x0	0x3	WA	8
.bss	NOBITS	0x33648	0x13648	0x558	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0x13648	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x13410	0x13410	6.1402	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x13414	0x33414	0x33414	0x234	0x78c	2.9482	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 1368
• 63645 undefined
• 2323 undefined
• 443 (HTTPS)
• 80 (HTTP)
• 23 (Telnet)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 23, 2025 09:16:46.724864960 CET	43928	443	192.168.2.23	91.189.91.42
Jan 23, 2025 09:16:48.518368006 CET	49066	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:48.523541927 CET	63645	49066	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:48.523611069 CET	49066	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:48.530611992 CET	49066	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:48.532428980 CET	50272	2323	192.168.2.23	196.141.189.118
Jan 23, 2025 09:16:48.532493114 CET	50272	23	192.168.2.23	97.186.231.114
Jan 23, 2025 09:16:48.532494068 CET	50272	23	192.168.2.23	211.195.85.118
Jan 23, 2025 09:16:48.532568932 CET	50272	23	192.168.2.23	48.18.12.117
Jan 23, 2025 09:16:48.532576084 CET	50272	23	192.168.2.23	197.172.253.241
Jan 23, 2025 09:16:48.532593012 CET	50272	23	192.168.2.23	200.171.149.173
Jan 23, 2025 09:16:48.532656908 CET	50272	23	192.168.2.23	206.31.17.34
Jan 23, 2025 09:16:48.532689095 CET	50272	23	192.168.2.23	88.102.244.6
Jan 23, 2025 09:16:48.532716036 CET	50272	23	192.168.2.23	94.245.17.145
Jan 23, 2025 09:16:48.532748938 CET	50272	23	192.168.2.23	93.183.69.95
Jan 23, 2025 09:16:48.532748938 CET	50272	2323	192.168.2.23	143.2.43.122
Jan 23, 2025 09:16:48.532763004 CET	50272	23	192.168.2.23	72.200.82.66
Jan 23, 2025 09:16:48.532828093 CET	50272	23	192.168.2.23	64.58.178.135
Jan 23, 2025 09:16:48.532849073 CET	50272	23	192.168.2.23	45.102.176.42
Jan 23, 2025 09:16:48.532851934 CET	50272	23	192.168.2.23	187.201.17.218
Jan 23, 2025 09:16:48.532895088 CET	50272	23	192.168.2.23	125.77.231.210
Jan 23, 2025 09:16:48.532912016 CET	50272	23	192.168.2.23	125.61.105.63
Jan 23, 2025 09:16:48.532912016 CET	50272	23	192.168.2.23	161.12.196.244
Jan 23, 2025 09:16:48.532915115 CET	50272	23	192.168.2.23	96.185.164.155
Jan 23, 2025 09:16:48.532915115 CET	50272	23	192.168.2.23	99.227.235.32
Jan 23, 2025 09:16:48.532917976 CET	50272	2323	192.168.2.23	212.156.20.233
Jan 23, 2025 09:16:48.532941103 CET	50272	23	192.168.2.23	98.78.158.48
Jan 23, 2025 09:16:48.532962084 CET	50272	23	192.168.2.23	177.51.54.140
Jan 23, 2025 09:16:48.533027887 CET	50272	23	192.168.2.23	107.55.131.162
Jan 23, 2025 09:16:48.533031940 CET	50272	23	192.168.2.23	59.185.227.66
Jan 23, 2025 09:16:48.533066988 CET	50272	23	192.168.2.23	185.43.6.116
Jan 23, 2025 09:16:48.533112049 CET	50272	23	192.168.2.23	136.110.250.16
Jan 23, 2025 09:16:48.533143997 CET	50272	23	192.168.2.23	100.168.84.229
Jan 23, 2025 09:16:48.533143997 CET	50272	23	192.168.2.23	109.160.208.5
Jan 23, 2025 09:16:48.533219099 CET	50272	23	192.168.2.23	150.207.182.54
Jan 23, 2025 09:16:48.533221960 CET	50272	2323	192.168.2.23	61.84.150.152
Jan 23, 2025 09:16:48.533226967 CET	50272	23	192.168.2.23	145.148.180.100
Jan 23, 2025 09:16:48.533240080 CET	50272	23	192.168.2.23	142.244.58.124
Jan 23, 2025 09:16:48.533240080 CET	50272	23	192.168.2.23	65.238.238.169
Jan 23, 2025 09:16:48.533260107 CET	50272	23	192.168.2.23	17.93.63.111
Jan 23, 2025 09:16:48.533302069 CET	50272	23	192.168.2.23	68.121.179.77
Jan 23, 2025 09:16:48.533302069 CET	50272	23	192.168.2.23	99.123.180.10
Jan 23, 2025 09:16:48.533313990 CET	50272	23	192.168.2.23	208.190.194.185
Jan 23, 2025 09:16:48.533313990 CET	50272	23	192.168.2.23	69.158.114.117
Jan 23, 2025 09:16:48.533329010 CET	50272	23	192.168.2.23	116.216.55.163
Jan 23, 2025 09:16:48.533339024 CET	50272	2323	192.168.2.23	148.252.65.112
Jan 23, 2025 09:16:48.533389091 CET	50272	23	192.168.2.23	192.126.211.160
Jan 23, 2025 09:16:48.533389091 CET	50272	23	192.168.2.23	195.124.16.222
Jan 23, 2025 09:16:48.533406019 CET	50272	23	192.168.2.23	99.33.216.12
Jan 23, 2025 09:16:48.533430099 CET	50272	23	192.168.2.23	96.28.75.65
Jan 23, 2025 09:16:48.533437967 CET	50272	23	192.168.2.23	184.252.46.94
Jan 23, 2025 09:16:48.533442974 CET	50272	23	192.168.2.23	181.51.113.194
Jan 23, 2025 09:16:48.533453941 CET	50272	23	192.168.2.23	106.35.237.41
Jan 23, 2025 09:16:48.533480883 CET	50272	23	192.168.2.23	1.170.219.33
Jan 23, 2025 09:16:48.533482075 CET	50272	23	192.168.2.23	183.213.145.189
Jan 23, 2025 09:16:48.533489943 CET	50272	2323	192.168.2.23	166.2.208.55
Jan 23, 2025 09:16:48.533528090 CET	50272	23	192.168.2.23	78.233.172.130
Jan 23, 2025 09:16:48.533528090 CET	50272	23	192.168.2.23	17.32.113.124
Jan 23, 2025 09:16:48.533548117 CET	50272	23	192.168.2.23	159.159.29.92
Jan 23, 2025 09:16:48.533549070 CET	50272	23	192.168.2.23	40.243.50.78
Jan 23, 2025 09:16:48.533560991 CET	50272	23	192.168.2.23	166.214.203.255
Jan 23, 2025 09:16:48.533567905 CET	50272	23	192.168.2.23	60.239.92.18
Jan 23, 2025 09:16:48.533580065 CET	50272	23	192.168.2.23	161.117.166.26
Jan 23, 2025 09:16:48.533581018 CET	50272	23	192.168.2.23	2.217.90.203
Jan 23, 2025 09:16:48.533586025 CET	50272	23	192.168.2.23	136.114.209.125
Jan 23, 2025 09:16:48.533591986 CET	50272	2323	192.168.2.23	119.115.23.153
Jan 23, 2025 09:16:48.533665895 CET	50272	23	192.168.2.23	155.235.21.6
Jan 23, 2025 09:16:48.533673048 CET	50272	23	192.168.2.23	192.44.212.165
Jan 23, 2025 09:16:48.533698082 CET	50272	23	192.168.2.23	40.180.227.242
Jan 23, 2025 09:16:48.533701897 CET	50272	23	192.168.2.23	32.153.160.0
Jan 23, 2025 09:16:48.533701897 CET	50272	23	192.168.2.23	113.139.184.124
Jan 23, 2025 09:16:48.533706903 CET	50272	23	192.168.2.23	170.243.78.66
Jan 23, 2025 09:16:48.533706903 CET	50272	23	192.168.2.23	8.177.86.56
Jan 23, 2025 09:16:48.533731937 CET	50272	23	192.168.2.23	12.0.90.115
Jan 23, 2025 09:16:48.533735037 CET	50272	23	192.168.2.23	94.77.78.64
Jan 23, 2025 09:16:48.533768892 CET	50272	2323	192.168.2.23	164.175.186.39
Jan 23, 2025 09:16:48.533795118 CET	50272	23	192.168.2.23	92.180.178.145
Jan 23, 2025 09:16:48.533808947 CET	50272	23	192.168.2.23	182.147.1.134
Jan 23, 2025 09:16:48.533830881 CET	50272	23	192.168.2.23	72.80.235.126
Jan 23, 2025 09:16:48.533847094 CET	50272	23	192.168.2.23	27.62.70.131
Jan 23, 2025 09:16:48.533849001 CET	50272	23	192.168.2.23	108.165.254.216
Jan 23, 2025 09:16:48.533850908 CET	50272	23	192.168.2.23	71.225.94.90
Jan 23, 2025 09:16:48.533862114 CET	50272	23	192.168.2.23	41.136.32.37
Jan 23, 2025 09:16:48.533870935 CET	50272	23	192.168.2.23	101.15.84.149
Jan 23, 2025 09:16:48.533878088 CET	50272	2323	192.168.2.23	98.110.241.160
Jan 23, 2025 09:16:48.533881903 CET	50272	23	192.168.2.23	196.172.79.51
Jan 23, 2025 09:16:48.533890009 CET	50272	23	192.168.2.23	211.140.252.154
Jan 23, 2025 09:16:48.533890963 CET	50272	23	192.168.2.23	71.158.129.125
Jan 23, 2025 09:16:48.533902884 CET	50272	23	192.168.2.23	88.184.74.37
Jan 23, 2025 09:16:48.533902884 CET	50272	23	192.168.2.23	123.25.214.65
Jan 23, 2025 09:16:48.533921003 CET	50272	23	192.168.2.23	96.125.72.38
Jan 23, 2025 09:16:48.533996105 CET	50272	23	192.168.2.23	40.240.52.92
Jan 23, 2025 09:16:48.534001112 CET	50272	23	192.168.2.23	18.191.255.15
Jan 23, 2025 09:16:48.534001112 CET	50272	23	192.168.2.23	84.59.39.203
Jan 23, 2025 09:16:48.534013987 CET	50272	2323	192.168.2.23	222.80.110.111
Jan 23, 2025 09:16:48.534014940 CET	50272	23	192.168.2.23	41.106.35.230
Jan 23, 2025 09:16:48.534018993 CET	50272	23	192.168.2.23	19.121.94.109
Jan 23, 2025 09:16:48.534063101 CET	50272	23	192.168.2.23	104.223.165.54
Jan 23, 2025 09:16:48.534082890 CET	50272	23	192.168.2.23	163.68.191.124
Jan 23, 2025 09:16:48.534089088 CET	50272	23	192.168.2.23	168.46.209.30
Jan 23, 2025 09:16:48.534094095 CET	50272	23	192.168.2.23	194.47.6.250
Jan 23, 2025 09:16:48.534116030 CET	50272	23	192.168.2.23	152.182.209.76
Jan 23, 2025 09:16:48.534151077 CET	50272	23	192.168.2.23	180.119.159.55
Jan 23, 2025 09:16:48.534193039 CET	50272	23	192.168.2.23	211.252.157.132
Jan 23, 2025 09:16:48.534193039 CET	50272	23	192.168.2.23	13.209.40.62
Jan 23, 2025 09:16:48.534193039 CET	50272	23	192.168.2.23	57.175.155.135
Jan 23, 2025 09:16:48.534193039 CET	50272	23	192.168.2.23	109.163.119.164
Jan 23, 2025 09:16:48.534202099 CET	50272	2323	192.168.2.23	107.122.40.63
Jan 23, 2025 09:16:48.534202099 CET	50272	23	192.168.2.23	1.191.165.58
Jan 23, 2025 09:16:48.534209967 CET	50272	23	192.168.2.23	71.229.37.147
Jan 23, 2025 09:16:48.534221888 CET	50272	23	192.168.2.23	88.91.114.120
Jan 23, 2025 09:16:48.534251928 CET	50272	23	192.168.2.23	154.37.48.121
Jan 23, 2025 09:16:48.534251928 CET	50272	23	192.168.2.23	150.229.156.198
Jan 23, 2025 09:16:48.534251928 CET	50272	23	192.168.2.23	167.226.179.70
Jan 23, 2025 09:16:48.534308910 CET	50272	23	192.168.2.23	206.237.109.178
Jan 23, 2025 09:16:48.534317970 CET	50272	23	192.168.2.23	171.31.33.195
Jan 23, 2025 09:16:48.534322977 CET	50272	2323	192.168.2.23	107.42.163.109
Jan 23, 2025 09:16:48.534396887 CET	50272	23	192.168.2.23	198.103.43.225
Jan 23, 2025 09:16:48.534411907 CET	50272	23	192.168.2.23	61.30.206.34
Jan 23, 2025 09:16:48.534415007 CET	50272	23	192.168.2.23	88.200.7.162
Jan 23, 2025 09:16:48.534457922 CET	50272	23	192.168.2.23	23.222.243.134
Jan 23, 2025 09:16:48.534457922 CET	50272	23	192.168.2.23	32.117.48.190
Jan 23, 2025 09:16:48.534466982 CET	50272	23	192.168.2.23	201.146.93.179
Jan 23, 2025 09:16:48.534467936 CET	50272	23	192.168.2.23	218.155.176.189
Jan 23, 2025 09:16:48.534477949 CET	50272	23	192.168.2.23	105.51.49.65
Jan 23, 2025 09:16:48.534499884 CET	50272	23	192.168.2.23	93.189.9.83
Jan 23, 2025 09:16:48.534507990 CET	50272	2323	192.168.2.23	2.148.22.203
Jan 23, 2025 09:16:48.534508944 CET	50272	23	192.168.2.23	4.37.125.76
Jan 23, 2025 09:16:48.534532070 CET	50272	23	192.168.2.23	59.103.174.73
Jan 23, 2025 09:16:48.534533978 CET	50272	23	192.168.2.23	165.108.191.110
Jan 23, 2025 09:16:48.534553051 CET	50272	23	192.168.2.23	83.238.96.186
Jan 23, 2025 09:16:48.534553051 CET	50272	23	192.168.2.23	152.164.67.196
Jan 23, 2025 09:16:48.534570932 CET	50272	23	192.168.2.23	93.180.252.42
Jan 23, 2025 09:16:48.534570932 CET	50272	23	192.168.2.23	211.241.112.236
Jan 23, 2025 09:16:48.534607887 CET	50272	23	192.168.2.23	172.250.149.227
Jan 23, 2025 09:16:48.534610033 CET	50272	23	192.168.2.23	179.80.181.111
Jan 23, 2025 09:16:48.534619093 CET	50272	23	192.168.2.23	126.172.105.183
Jan 23, 2025 09:16:48.534619093 CET	50272	23	192.168.2.23	84.37.167.11
Jan 23, 2025 09:16:48.534619093 CET	50272	23	192.168.2.23	92.191.73.193
Jan 23, 2025 09:16:48.534622908 CET	50272	2323	192.168.2.23	63.56.199.37
Jan 23, 2025 09:16:48.534622908 CET	50272	23	192.168.2.23	43.142.130.21
Jan 23, 2025 09:16:48.534631968 CET	50272	23	192.168.2.23	88.24.121.131
Jan 23, 2025 09:16:48.534653902 CET	50272	23	192.168.2.23	18.101.250.14
Jan 23, 2025 09:16:48.534656048 CET	50272	23	192.168.2.23	161.175.103.130
Jan 23, 2025 09:16:48.534657955 CET	50272	23	192.168.2.23	206.167.232.222
Jan 23, 2025 09:16:48.534673929 CET	50272	2323	192.168.2.23	109.174.213.173
Jan 23, 2025 09:16:48.534673929 CET	50272	23	192.168.2.23	59.79.183.196
Jan 23, 2025 09:16:48.534677029 CET	50272	23	192.168.2.23	108.248.179.131
Jan 23, 2025 09:16:48.534682035 CET	50272	23	192.168.2.23	121.168.155.43
Jan 23, 2025 09:16:48.534684896 CET	50272	23	192.168.2.23	73.105.227.118
Jan 23, 2025 09:16:48.534720898 CET	50272	23	192.168.2.23	178.82.237.251
Jan 23, 2025 09:16:48.534720898 CET	50272	23	192.168.2.23	216.99.121.82
Jan 23, 2025 09:16:48.534743071 CET	50272	23	192.168.2.23	136.23.249.209
Jan 23, 2025 09:16:48.534754038 CET	50272	23	192.168.2.23	145.155.33.27
Jan 23, 2025 09:16:48.534754038 CET	50272	23	192.168.2.23	81.233.152.84
Jan 23, 2025 09:16:48.534775019 CET	50272	23	192.168.2.23	182.49.163.177
Jan 23, 2025 09:16:48.534776926 CET	50272	23	192.168.2.23	62.50.205.187
Jan 23, 2025 09:16:48.534776926 CET	50272	23	192.168.2.23	89.25.169.37
Jan 23, 2025 09:16:48.534776926 CET	50272	2323	192.168.2.23	187.171.117.205
Jan 23, 2025 09:16:48.534796953 CET	50272	23	192.168.2.23	221.136.41.154
Jan 23, 2025 09:16:48.534799099 CET	50272	23	192.168.2.23	125.202.198.7
Jan 23, 2025 09:16:48.534801960 CET	50272	23	192.168.2.23	81.26.35.60
Jan 23, 2025 09:16:48.534813881 CET	50272	23	192.168.2.23	40.162.86.36
Jan 23, 2025 09:16:48.534832954 CET	50272	23	192.168.2.23	19.121.81.48
Jan 23, 2025 09:16:48.534847975 CET	50272	23	192.168.2.23	57.111.41.161
Jan 23, 2025 09:16:48.535501003 CET	63645	49066	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:48.535547972 CET	49066	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:48.537352085 CET	2323	50272	196.141.189.118	192.168.2.23
Jan 23, 2025 09:16:48.537381887 CET	23	50272	97.186.231.114	192.168.2.23
Jan 23, 2025 09:16:48.537410975 CET	50272	2323	192.168.2.23	196.141.189.118
Jan 23, 2025 09:16:48.537410975 CET	50272	23	192.168.2.23	97.186.231.114
Jan 23, 2025 09:16:48.537415028 CET	23	50272	211.195.85.118	192.168.2.23
Jan 23, 2025 09:16:48.537465096 CET	50272	23	192.168.2.23	211.195.85.118
Jan 23, 2025 09:16:48.537547112 CET	23	50272	48.18.12.117	192.168.2.23
Jan 23, 2025 09:16:48.537575960 CET	23	50272	200.171.149.173	192.168.2.23
Jan 23, 2025 09:16:48.537585020 CET	50272	23	192.168.2.23	48.18.12.117
Jan 23, 2025 09:16:48.537606001 CET	23	50272	197.172.253.241	192.168.2.23
Jan 23, 2025 09:16:48.537633896 CET	23	50272	206.31.17.34	192.168.2.23
Jan 23, 2025 09:16:48.537646055 CET	50272	23	192.168.2.23	197.172.253.241
Jan 23, 2025 09:16:48.537655115 CET	50272	23	192.168.2.23	200.171.149.173
Jan 23, 2025 09:16:48.537678003 CET	50272	23	192.168.2.23	206.31.17.34
Jan 23, 2025 09:16:48.537684917 CET	23	50272	88.102.244.6	192.168.2.23
Jan 23, 2025 09:16:48.537713051 CET	23	50272	93.183.69.95	192.168.2.23
Jan 23, 2025 09:16:48.537722111 CET	50272	23	192.168.2.23	88.102.244.6
Jan 23, 2025 09:16:48.537753105 CET	50272	23	192.168.2.23	93.183.69.95
Jan 23, 2025 09:16:48.540704966 CET	2323	50272	143.2.43.122	192.168.2.23
Jan 23, 2025 09:16:48.540735006 CET	23	50272	72.200.82.66	192.168.2.23
Jan 23, 2025 09:16:48.540756941 CET	50272	2323	192.168.2.23	143.2.43.122
Jan 23, 2025 09:16:48.540762901 CET	23	50272	94.245.17.145	192.168.2.23
Jan 23, 2025 09:16:48.540785074 CET	50272	23	192.168.2.23	72.200.82.66
Jan 23, 2025 09:16:48.540791988 CET	23	50272	64.58.178.135	192.168.2.23
Jan 23, 2025 09:16:48.540815115 CET	50272	23	192.168.2.23	94.245.17.145
Jan 23, 2025 09:16:48.540819883 CET	23	50272	45.102.176.42	192.168.2.23
Jan 23, 2025 09:16:48.540828943 CET	50272	23	192.168.2.23	64.58.178.135
Jan 23, 2025 09:16:48.540848017 CET	23	50272	187.201.17.218	192.168.2.23
Jan 23, 2025 09:16:48.540853977 CET	50272	23	192.168.2.23	45.102.176.42
Jan 23, 2025 09:16:48.540875912 CET	23	50272	125.61.105.63	192.168.2.23
Jan 23, 2025 09:16:48.540894985 CET	50272	23	192.168.2.23	187.201.17.218
Jan 23, 2025 09:16:48.540903091 CET	23	50272	99.227.235.32	192.168.2.23
Jan 23, 2025 09:16:48.540930986 CET	2323	50272	212.156.20.233	192.168.2.23
Jan 23, 2025 09:16:48.540935993 CET	50272	23	192.168.2.23	125.61.105.63
Jan 23, 2025 09:16:48.540951014 CET	50272	23	192.168.2.23	99.227.235.32
Jan 23, 2025 09:16:48.540961027 CET	23	50272	161.12.196.244	192.168.2.23
Jan 23, 2025 09:16:48.540977001 CET	50272	2323	192.168.2.23	212.156.20.233
Jan 23, 2025 09:16:48.541007042 CET	50272	23	192.168.2.23	161.12.196.244
Jan 23, 2025 09:16:48.541012049 CET	23	50272	96.185.164.155	192.168.2.23
Jan 23, 2025 09:16:48.541042089 CET	23	50272	98.78.158.48	192.168.2.23
Jan 23, 2025 09:16:48.541069031 CET	23	50272	125.77.231.210	192.168.2.23
Jan 23, 2025 09:16:48.541090012 CET	50272	23	192.168.2.23	98.78.158.48
Jan 23, 2025 09:16:48.541095972 CET	23	50272	177.51.54.140	192.168.2.23
Jan 23, 2025 09:16:48.541115999 CET	50272	23	192.168.2.23	125.77.231.210
Jan 23, 2025 09:16:48.541124105 CET	23	50272	107.55.131.162	192.168.2.23
Jan 23, 2025 09:16:48.541135073 CET	50272	23	192.168.2.23	177.51.54.140
Jan 23, 2025 09:16:48.541141987 CET	50272	23	192.168.2.23	96.185.164.155
Jan 23, 2025 09:16:48.541152954 CET	23	50272	59.185.227.66	192.168.2.23
Jan 23, 2025 09:16:48.541167974 CET	50272	23	192.168.2.23	107.55.131.162
Jan 23, 2025 09:16:48.541182041 CET	23	50272	185.43.6.116	192.168.2.23
Jan 23, 2025 09:16:48.541193962 CET	50272	23	192.168.2.23	59.185.227.66
Jan 23, 2025 09:16:48.541209936 CET	23	50272	136.110.250.16	192.168.2.23
Jan 23, 2025 09:16:48.541223049 CET	50272	23	192.168.2.23	185.43.6.116
Jan 23, 2025 09:16:48.541238070 CET	23	50272	100.168.84.229	192.168.2.23
Jan 23, 2025 09:16:48.541253090 CET	50272	23	192.168.2.23	136.110.250.16
Jan 23, 2025 09:16:48.541265011 CET	23	50272	109.160.208.5	192.168.2.23
Jan 23, 2025 09:16:48.541275024 CET	50272	23	192.168.2.23	100.168.84.229
Jan 23, 2025 09:16:48.541292906 CET	23	50272	150.207.182.54	192.168.2.23
Jan 23, 2025 09:16:48.541305065 CET	50272	23	192.168.2.23	109.160.208.5
Jan 23, 2025 09:16:48.541320086 CET	2323	50272	61.84.150.152	192.168.2.23
Jan 23, 2025 09:16:48.541332006 CET	50272	23	192.168.2.23	150.207.182.54
Jan 23, 2025 09:16:48.541349888 CET	23	50272	145.148.180.100	192.168.2.23
Jan 23, 2025 09:16:48.541362047 CET	50272	2323	192.168.2.23	61.84.150.152
Jan 23, 2025 09:16:48.541378021 CET	23	50272	142.244.58.124	192.168.2.23
Jan 23, 2025 09:16:48.541393995 CET	50272	23	192.168.2.23	145.148.180.100
Jan 23, 2025 09:16:48.541423082 CET	23	50272	65.238.238.169	192.168.2.23
Jan 23, 2025 09:16:48.541424990 CET	50272	23	192.168.2.23	142.244.58.124
Jan 23, 2025 09:16:48.541450024 CET	23	50272	17.93.63.111	192.168.2.23
Jan 23, 2025 09:16:48.541460991 CET	50272	23	192.168.2.23	65.238.238.169
Jan 23, 2025 09:16:48.541477919 CET	23	50272	68.121.179.77	192.168.2.23
Jan 23, 2025 09:16:48.541505098 CET	23	50272	208.190.194.185	192.168.2.23
Jan 23, 2025 09:16:48.541513920 CET	50272	23	192.168.2.23	68.121.179.77
Jan 23, 2025 09:16:48.541546106 CET	50272	23	192.168.2.23	17.93.63.111
Jan 23, 2025 09:16:48.541546106 CET	50272	23	192.168.2.23	208.190.194.185
Jan 23, 2025 09:16:48.541558027 CET	23	50272	116.216.55.163	192.168.2.23
Jan 23, 2025 09:16:48.541584969 CET	23	50272	99.123.180.10	192.168.2.23
Jan 23, 2025 09:16:48.541611910 CET	23	50272	69.158.114.117	192.168.2.23
Jan 23, 2025 09:16:48.541625023 CET	50272	23	192.168.2.23	99.123.180.10
Jan 23, 2025 09:16:48.541639090 CET	2323	50272	148.252.65.112	192.168.2.23
Jan 23, 2025 09:16:48.541666031 CET	23	50272	192.126.211.160	192.168.2.23
Jan 23, 2025 09:16:48.541681051 CET	50272	2323	192.168.2.23	148.252.65.112
Jan 23, 2025 09:16:48.541692972 CET	23	50272	195.124.16.222	192.168.2.23
Jan 23, 2025 09:16:48.541695118 CET	50272	23	192.168.2.23	69.158.114.117
Jan 23, 2025 09:16:48.541697025 CET	50272	23	192.168.2.23	116.216.55.163
Jan 23, 2025 09:16:48.541722059 CET	23	50272	99.33.216.12	192.168.2.23
Jan 23, 2025 09:16:48.541724920 CET	50272	23	192.168.2.23	192.126.211.160
Jan 23, 2025 09:16:48.541742086 CET	50272	23	192.168.2.23	195.124.16.222
Jan 23, 2025 09:16:48.541749954 CET	23	50272	96.28.75.65	192.168.2.23
Jan 23, 2025 09:16:48.541771889 CET	50272	23	192.168.2.23	99.33.216.12
Jan 23, 2025 09:16:48.541778088 CET	23	50272	184.252.46.94	192.168.2.23
Jan 23, 2025 09:16:48.541802883 CET	50272	23	192.168.2.23	96.28.75.65
Jan 23, 2025 09:16:48.541805983 CET	23	50272	181.51.113.194	192.168.2.23
Jan 23, 2025 09:16:48.541825056 CET	50272	23	192.168.2.23	184.252.46.94
Jan 23, 2025 09:16:48.541832924 CET	23	50272	106.35.237.41	192.168.2.23
Jan 23, 2025 09:16:48.541858912 CET	50272	23	192.168.2.23	181.51.113.194
Jan 23, 2025 09:16:48.541860104 CET	23	50272	1.170.219.33	192.168.2.23
Jan 23, 2025 09:16:48.541872978 CET	50272	23	192.168.2.23	106.35.237.41
Jan 23, 2025 09:16:48.541893959 CET	23	50272	183.213.145.189	192.168.2.23
Jan 23, 2025 09:16:48.541896105 CET	50272	23	192.168.2.23	1.170.219.33
Jan 23, 2025 09:16:48.541929007 CET	2323	50272	166.2.208.55	192.168.2.23
Jan 23, 2025 09:16:48.541965008 CET	23	50272	40.243.50.78	192.168.2.23
Jan 23, 2025 09:16:48.541980028 CET	50272	23	192.168.2.23	183.213.145.189
Jan 23, 2025 09:16:48.541980982 CET	50272	2323	192.168.2.23	166.2.208.55
Jan 23, 2025 09:16:48.541999102 CET	23	50272	159.159.29.92	192.168.2.23
Jan 23, 2025 09:16:48.542000055 CET	50272	23	192.168.2.23	40.243.50.78
Jan 23, 2025 09:16:48.542036057 CET	23	50272	78.233.172.130	192.168.2.23
Jan 23, 2025 09:16:48.542063951 CET	50272	23	192.168.2.23	159.159.29.92
Jan 23, 2025 09:16:48.542071104 CET	23	50272	17.32.113.124	192.168.2.23
Jan 23, 2025 09:16:48.542093992 CET	50272	23	192.168.2.23	78.233.172.130
Jan 23, 2025 09:16:48.542104006 CET	23	50272	166.214.203.255	192.168.2.23
Jan 23, 2025 09:16:48.542115927 CET	50272	23	192.168.2.23	17.32.113.124
Jan 23, 2025 09:16:48.542136908 CET	23	50272	60.239.92.18	192.168.2.23
Jan 23, 2025 09:16:48.542149067 CET	50272	23	192.168.2.23	166.214.203.255
Jan 23, 2025 09:16:48.542170048 CET	23	50272	161.117.166.26	192.168.2.23
Jan 23, 2025 09:16:48.542177916 CET	50272	23	192.168.2.23	60.239.92.18
Jan 23, 2025 09:16:48.542206049 CET	23	50272	2.217.90.203	192.168.2.23
Jan 23, 2025 09:16:48.542221069 CET	50272	23	192.168.2.23	161.117.166.26
Jan 23, 2025 09:16:48.542248011 CET	50272	23	192.168.2.23	2.217.90.203
Jan 23, 2025 09:16:48.542268991 CET	23	50272	136.114.209.125	192.168.2.23
Jan 23, 2025 09:16:48.542311907 CET	2323	50272	119.115.23.153	192.168.2.23
Jan 23, 2025 09:16:48.542313099 CET	50272	23	192.168.2.23	136.114.209.125
Jan 23, 2025 09:16:48.542346954 CET	23	50272	155.235.21.6	192.168.2.23
Jan 23, 2025 09:16:48.542352915 CET	50272	2323	192.168.2.23	119.115.23.153
Jan 23, 2025 09:16:48.542380095 CET	50272	23	192.168.2.23	155.235.21.6
Jan 23, 2025 09:16:48.542382002 CET	23	50272	192.44.212.165	192.168.2.23
Jan 23, 2025 09:16:48.542417049 CET	23	50272	40.180.227.242	192.168.2.23
Jan 23, 2025 09:16:48.542424917 CET	50272	23	192.168.2.23	192.44.212.165
Jan 23, 2025 09:16:48.542450905 CET	23	50272	32.153.160.0	192.168.2.23
Jan 23, 2025 09:16:48.542457104 CET	50272	23	192.168.2.23	40.180.227.242
Jan 23, 2025 09:16:48.542480946 CET	23	50272	170.243.78.66	192.168.2.23
Jan 23, 2025 09:16:48.542499065 CET	50272	23	192.168.2.23	32.153.160.0
Jan 23, 2025 09:16:48.542506933 CET	23	50272	113.139.184.124	192.168.2.23
Jan 23, 2025 09:16:48.542516947 CET	50272	23	192.168.2.23	170.243.78.66
Jan 23, 2025 09:16:48.542536020 CET	23	50272	8.177.86.56	192.168.2.23
Jan 23, 2025 09:16:48.542562962 CET	23	50272	94.77.78.64	192.168.2.23
Jan 23, 2025 09:16:48.542572975 CET	50272	23	192.168.2.23	8.177.86.56
Jan 23, 2025 09:16:48.542591095 CET	23	50272	12.0.90.115	192.168.2.23
Jan 23, 2025 09:16:48.542608023 CET	50272	23	192.168.2.23	94.77.78.64
Jan 23, 2025 09:16:48.542618036 CET	2323	50272	164.175.186.39	192.168.2.23
Jan 23, 2025 09:16:48.542633057 CET	50272	23	192.168.2.23	12.0.90.115
Jan 23, 2025 09:16:48.542644978 CET	23	50272	92.180.178.145	192.168.2.23
Jan 23, 2025 09:16:48.542668104 CET	50272	2323	192.168.2.23	164.175.186.39
Jan 23, 2025 09:16:48.542673111 CET	23	50272	182.147.1.134	192.168.2.23
Jan 23, 2025 09:16:48.542685986 CET	50272	23	192.168.2.23	92.180.178.145
Jan 23, 2025 09:16:48.542700052 CET	23	50272	72.80.235.126	192.168.2.23
Jan 23, 2025 09:16:48.542712927 CET	50272	23	192.168.2.23	182.147.1.134
Jan 23, 2025 09:16:48.542726994 CET	23	50272	71.225.94.90	192.168.2.23
Jan 23, 2025 09:16:48.542738914 CET	50272	23	192.168.2.23	72.80.235.126
Jan 23, 2025 09:16:48.542754889 CET	23	50272	108.165.254.216	192.168.2.23
Jan 23, 2025 09:16:48.542768002 CET	50272	23	192.168.2.23	71.225.94.90
Jan 23, 2025 09:16:48.542782068 CET	23	50272	41.136.32.37	192.168.2.23
Jan 23, 2025 09:16:48.542785883 CET	50272	23	192.168.2.23	113.139.184.124
Jan 23, 2025 09:16:48.542792082 CET	50272	23	192.168.2.23	108.165.254.216
Jan 23, 2025 09:16:48.542809010 CET	23	50272	27.62.70.131	192.168.2.23
Jan 23, 2025 09:16:48.542818069 CET	50272	23	192.168.2.23	41.136.32.37
Jan 23, 2025 09:16:48.542836905 CET	23	50272	101.15.84.149	192.168.2.23
Jan 23, 2025 09:16:48.542856932 CET	50272	23	192.168.2.23	27.62.70.131
Jan 23, 2025 09:16:48.542864084 CET	2323	50272	98.110.241.160	192.168.2.23
Jan 23, 2025 09:16:48.542869091 CET	50272	23	192.168.2.23	101.15.84.149
Jan 23, 2025 09:16:48.542891026 CET	23	50272	196.172.79.51	192.168.2.23
Jan 23, 2025 09:16:48.542905092 CET	50272	2323	192.168.2.23	98.110.241.160
Jan 23, 2025 09:16:48.542918921 CET	23	50272	211.140.252.154	192.168.2.23
Jan 23, 2025 09:16:48.542947054 CET	50272	23	192.168.2.23	196.172.79.51
Jan 23, 2025 09:16:48.542949915 CET	23	50272	88.184.74.37	192.168.2.23
Jan 23, 2025 09:16:48.542973042 CET	50272	23	192.168.2.23	211.140.252.154
Jan 23, 2025 09:16:48.542988062 CET	50272	23	192.168.2.23	88.184.74.37
Jan 23, 2025 09:16:48.542992115 CET	23	50272	123.25.214.65	192.168.2.23
Jan 23, 2025 09:16:48.543020010 CET	23	50272	71.158.129.125	192.168.2.23
Jan 23, 2025 09:16:48.543032885 CET	50272	23	192.168.2.23	123.25.214.65
Jan 23, 2025 09:16:48.543046951 CET	23	50272	96.125.72.38	192.168.2.23
Jan 23, 2025 09:16:48.543054104 CET	50272	23	192.168.2.23	71.158.129.125
Jan 23, 2025 09:16:48.543073893 CET	23	50272	18.191.255.15	192.168.2.23
Jan 23, 2025 09:16:48.543091059 CET	50272	23	192.168.2.23	96.125.72.38
Jan 23, 2025 09:16:48.543101072 CET	23	50272	40.240.52.92	192.168.2.23
Jan 23, 2025 09:16:48.543112993 CET	50272	23	192.168.2.23	18.191.255.15
Jan 23, 2025 09:16:48.543128014 CET	23	50272	84.59.39.203	192.168.2.23
Jan 23, 2025 09:16:48.543143988 CET	50272	23	192.168.2.23	40.240.52.92
Jan 23, 2025 09:16:48.543155909 CET	2323	50272	222.80.110.111	192.168.2.23
Jan 23, 2025 09:16:48.543176889 CET	50272	23	192.168.2.23	84.59.39.203
Jan 23, 2025 09:16:48.543183088 CET	23	50272	41.106.35.230	192.168.2.23
Jan 23, 2025 09:16:48.543210030 CET	23	50272	19.121.94.109	192.168.2.23
Jan 23, 2025 09:16:48.543221951 CET	50272	2323	192.168.2.23	222.80.110.111
Jan 23, 2025 09:16:48.543221951 CET	50272	23	192.168.2.23	41.106.35.230
Jan 23, 2025 09:16:48.543236971 CET	23	50272	104.223.165.54	192.168.2.23
Jan 23, 2025 09:16:48.543252945 CET	50272	23	192.168.2.23	19.121.94.109
Jan 23, 2025 09:16:48.543263912 CET	23	50272	163.68.191.124	192.168.2.23
Jan 23, 2025 09:16:48.543279886 CET	50272	23	192.168.2.23	104.223.165.54
Jan 23, 2025 09:16:48.543289900 CET	23	50272	194.47.6.250	192.168.2.23
Jan 23, 2025 09:16:48.543304920 CET	50272	23	192.168.2.23	163.68.191.124
Jan 23, 2025 09:16:48.543328047 CET	50272	23	192.168.2.23	194.47.6.250
Jan 23, 2025 09:16:48.543349028 CET	23	50272	168.46.209.30	192.168.2.23
Jan 23, 2025 09:16:48.543375969 CET	23	50272	152.182.209.76	192.168.2.23
Jan 23, 2025 09:16:48.543389082 CET	50272	23	192.168.2.23	168.46.209.30
Jan 23, 2025 09:16:48.543404102 CET	23	50272	180.119.159.55	192.168.2.23
Jan 23, 2025 09:16:48.543415070 CET	50272	23	192.168.2.23	152.182.209.76
Jan 23, 2025 09:16:48.543431997 CET	2323	50272	107.122.40.63	192.168.2.23
Jan 23, 2025 09:16:48.543447971 CET	50272	23	192.168.2.23	180.119.159.55
Jan 23, 2025 09:16:48.543488979 CET	50272	2323	192.168.2.23	107.122.40.63
Jan 23, 2025 09:16:48.547018051 CET	23	50272	211.252.157.132	192.168.2.23
Jan 23, 2025 09:16:48.547046900 CET	23	50272	1.191.165.58	192.168.2.23
Jan 23, 2025 09:16:48.547065973 CET	50272	23	192.168.2.23	211.252.157.132
Jan 23, 2025 09:16:48.547075033 CET	23	50272	71.229.37.147	192.168.2.23
Jan 23, 2025 09:16:48.547102928 CET	23	50272	13.209.40.62	192.168.2.23
Jan 23, 2025 09:16:48.547116041 CET	50272	23	192.168.2.23	71.229.37.147
Jan 23, 2025 09:16:48.547130108 CET	23	50272	57.175.155.135	192.168.2.23
Jan 23, 2025 09:16:48.547138929 CET	50272	23	192.168.2.23	1.191.165.58
Jan 23, 2025 09:16:48.547152996 CET	50272	23	192.168.2.23	13.209.40.62
Jan 23, 2025 09:16:48.547158003 CET	23	50272	88.91.114.120	192.168.2.23
Jan 23, 2025 09:16:48.547177076 CET	50272	23	192.168.2.23	57.175.155.135
Jan 23, 2025 09:16:48.547184944 CET	23	50272	109.163.119.164	192.168.2.23
Jan 23, 2025 09:16:48.547189951 CET	50272	23	192.168.2.23	88.91.114.120
Jan 23, 2025 09:16:48.547210932 CET	23	50272	154.37.48.121	192.168.2.23
Jan 23, 2025 09:16:48.547230959 CET	50272	23	192.168.2.23	109.163.119.164
Jan 23, 2025 09:16:48.547238111 CET	23	50272	150.229.156.198	192.168.2.23
Jan 23, 2025 09:16:48.547262907 CET	50272	23	192.168.2.23	154.37.48.121
Jan 23, 2025 09:16:48.547266006 CET	23	50272	167.226.179.70	192.168.2.23
Jan 23, 2025 09:16:48.547292948 CET	23	50272	206.237.109.178	192.168.2.23
Jan 23, 2025 09:16:48.547311068 CET	50272	23	192.168.2.23	167.226.179.70
Jan 23, 2025 09:16:48.547338963 CET	23	50272	171.31.33.195	192.168.2.23
Jan 23, 2025 09:16:48.547343016 CET	50272	23	192.168.2.23	206.237.109.178
Jan 23, 2025 09:16:48.547343016 CET	50272	23	192.168.2.23	150.229.156.198
Jan 23, 2025 09:16:48.547369003 CET	2323	50272	107.42.163.109	192.168.2.23
Jan 23, 2025 09:16:48.547378063 CET	50272	23	192.168.2.23	171.31.33.195
Jan 23, 2025 09:16:48.547396898 CET	23	50272	198.103.43.225	192.168.2.23
Jan 23, 2025 09:16:48.547420979 CET	50272	2323	192.168.2.23	107.42.163.109
Jan 23, 2025 09:16:48.547424078 CET	23	50272	61.30.206.34	192.168.2.23
Jan 23, 2025 09:16:48.547435045 CET	50272	23	192.168.2.23	198.103.43.225
Jan 23, 2025 09:16:48.547452927 CET	23	50272	88.200.7.162	192.168.2.23
Jan 23, 2025 09:16:48.547471046 CET	50272	23	192.168.2.23	61.30.206.34
Jan 23, 2025 09:16:48.547481060 CET	23	50272	23.222.243.134	192.168.2.23
Jan 23, 2025 09:16:48.547497034 CET	50272	23	192.168.2.23	88.200.7.162
Jan 23, 2025 09:16:48.547508955 CET	23	50272	201.146.93.179	192.168.2.23
Jan 23, 2025 09:16:48.547522068 CET	50272	23	192.168.2.23	23.222.243.134
Jan 23, 2025 09:16:48.547537088 CET	23	50272	218.155.176.189	192.168.2.23
Jan 23, 2025 09:16:48.547564983 CET	23	50272	32.117.48.190	192.168.2.23
Jan 23, 2025 09:16:48.547591925 CET	23	50272	105.51.49.65	192.168.2.23
Jan 23, 2025 09:16:48.547601938 CET	50272	23	192.168.2.23	201.146.93.179
Jan 23, 2025 09:16:48.547602892 CET	50272	23	192.168.2.23	218.155.176.189
Jan 23, 2025 09:16:48.547604084 CET	50272	23	192.168.2.23	32.117.48.190
Jan 23, 2025 09:16:48.547619104 CET	2323	50272	2.148.22.203	192.168.2.23
Jan 23, 2025 09:16:48.547633886 CET	50272	23	192.168.2.23	105.51.49.65
Jan 23, 2025 09:16:48.547668934 CET	23	50272	93.189.9.83	192.168.2.23
Jan 23, 2025 09:16:48.547708035 CET	50272	23	192.168.2.23	93.189.9.83
Jan 23, 2025 09:16:48.547715902 CET	23	50272	4.37.125.76	192.168.2.23
Jan 23, 2025 09:16:48.547732115 CET	50272	2323	192.168.2.23	2.148.22.203
Jan 23, 2025 09:16:48.547743082 CET	23	50272	59.103.174.73	192.168.2.23
Jan 23, 2025 09:16:48.547770977 CET	23	50272	165.108.191.110	192.168.2.23
Jan 23, 2025 09:16:48.547784090 CET	50272	23	192.168.2.23	59.103.174.73
Jan 23, 2025 09:16:48.547799110 CET	23	50272	83.238.96.186	192.168.2.23
Jan 23, 2025 09:16:48.547811985 CET	50272	23	192.168.2.23	165.108.191.110
Jan 23, 2025 09:16:48.547821999 CET	50272	23	192.168.2.23	4.37.125.76
Jan 23, 2025 09:16:48.547827005 CET	23	50272	152.164.67.196	192.168.2.23
Jan 23, 2025 09:16:48.547842979 CET	50272	23	192.168.2.23	83.238.96.186
Jan 23, 2025 09:16:48.547854900 CET	23	50272	93.180.252.42	192.168.2.23
Jan 23, 2025 09:16:48.547869921 CET	50272	23	192.168.2.23	152.164.67.196
Jan 23, 2025 09:16:48.547883034 CET	23	50272	211.241.112.236	192.168.2.23
Jan 23, 2025 09:16:48.547895908 CET	50272	23	192.168.2.23	93.180.252.42
Jan 23, 2025 09:16:48.547910929 CET	23	50272	172.250.149.227	192.168.2.23
Jan 23, 2025 09:16:48.547918081 CET	50272	23	192.168.2.23	211.241.112.236
Jan 23, 2025 09:16:48.547938108 CET	23	50272	179.80.181.111	192.168.2.23
Jan 23, 2025 09:16:48.547965050 CET	50272	23	192.168.2.23	172.250.149.227
Jan 23, 2025 09:16:48.547966003 CET	23	50272	126.172.105.183	192.168.2.23
Jan 23, 2025 09:16:48.547974110 CET	50272	23	192.168.2.23	179.80.181.111
Jan 23, 2025 09:16:48.547993898 CET	23	50272	84.37.167.11	192.168.2.23
Jan 23, 2025 09:16:48.548001051 CET	50272	23	192.168.2.23	126.172.105.183
Jan 23, 2025 09:16:48.548023939 CET	23	50272	92.191.73.193	192.168.2.23
Jan 23, 2025 09:16:48.548032999 CET	50272	23	192.168.2.23	84.37.167.11
Jan 23, 2025 09:16:48.548053026 CET	2323	50272	63.56.199.37	192.168.2.23
Jan 23, 2025 09:16:48.548057079 CET	50272	23	192.168.2.23	92.191.73.193
Jan 23, 2025 09:16:48.548079967 CET	23	50272	43.142.130.21	192.168.2.23
Jan 23, 2025 09:16:48.548091888 CET	50272	2323	192.168.2.23	63.56.199.37
Jan 23, 2025 09:16:48.548109055 CET	23	50272	88.24.121.131	192.168.2.23
Jan 23, 2025 09:16:48.548120022 CET	50272	23	192.168.2.23	43.142.130.21
Jan 23, 2025 09:16:48.548136950 CET	23	50272	18.101.250.14	192.168.2.23
Jan 23, 2025 09:16:48.548156023 CET	50272	23	192.168.2.23	88.24.121.131
Jan 23, 2025 09:16:48.548162937 CET	23	50272	161.175.103.130	192.168.2.23
Jan 23, 2025 09:16:48.548175097 CET	50272	23	192.168.2.23	18.101.250.14
Jan 23, 2025 09:16:48.548191071 CET	23	50272	206.167.232.222	192.168.2.23
Jan 23, 2025 09:16:48.548202038 CET	50272	23	192.168.2.23	161.175.103.130
Jan 23, 2025 09:16:48.548218012 CET	23	50272	108.248.179.131	192.168.2.23
Jan 23, 2025 09:16:48.548235893 CET	50272	23	192.168.2.23	206.167.232.222
Jan 23, 2025 09:16:48.548244953 CET	2323	50272	109.174.213.173	192.168.2.23
Jan 23, 2025 09:16:48.548253059 CET	50272	23	192.168.2.23	108.248.179.131
Jan 23, 2025 09:16:48.548274040 CET	23	50272	59.79.183.196	192.168.2.23
Jan 23, 2025 09:16:48.548294067 CET	50272	2323	192.168.2.23	109.174.213.173
Jan 23, 2025 09:16:48.548300982 CET	23	50272	73.105.227.118	192.168.2.23
Jan 23, 2025 09:16:48.548311949 CET	50272	23	192.168.2.23	59.79.183.196
Jan 23, 2025 09:16:48.548331976 CET	23	50272	121.168.155.43	192.168.2.23
Jan 23, 2025 09:16:48.548357010 CET	50272	23	192.168.2.23	73.105.227.118
Jan 23, 2025 09:16:48.548365116 CET	23	50272	178.82.237.251	192.168.2.23
Jan 23, 2025 09:16:48.548372030 CET	50272	23	192.168.2.23	121.168.155.43
Jan 23, 2025 09:16:48.548392057 CET	23	50272	216.99.121.82	192.168.2.23
Jan 23, 2025 09:16:48.548408985 CET	50272	23	192.168.2.23	178.82.237.251
Jan 23, 2025 09:16:48.548418999 CET	23	50272	136.23.249.209	192.168.2.23
Jan 23, 2025 09:16:48.548435926 CET	50272	23	192.168.2.23	216.99.121.82
Jan 23, 2025 09:16:48.548446894 CET	23	50272	145.155.33.27	192.168.2.23
Jan 23, 2025 09:16:48.548468113 CET	50272	23	192.168.2.23	136.23.249.209
Jan 23, 2025 09:16:48.548475981 CET	23	50272	81.233.152.84	192.168.2.23
Jan 23, 2025 09:16:48.548501968 CET	23	50272	182.49.163.177	192.168.2.23
Jan 23, 2025 09:16:48.548523903 CET	50272	23	192.168.2.23	145.155.33.27
Jan 23, 2025 09:16:48.548523903 CET	50272	23	192.168.2.23	81.233.152.84
Jan 23, 2025 09:16:48.548527956 CET	23	50272	62.50.205.187	192.168.2.23
Jan 23, 2025 09:16:48.548537016 CET	50272	23	192.168.2.23	182.49.163.177
Jan 23, 2025 09:16:48.548556089 CET	23	50272	89.25.169.37	192.168.2.23
Jan 23, 2025 09:16:48.548573971 CET	50272	23	192.168.2.23	62.50.205.187
Jan 23, 2025 09:16:48.548583984 CET	2323	50272	187.171.117.205	192.168.2.23
Jan 23, 2025 09:16:48.548597097 CET	50272	23	192.168.2.23	89.25.169.37
Jan 23, 2025 09:16:48.548612118 CET	23	50272	221.136.41.154	192.168.2.23
Jan 23, 2025 09:16:48.548625946 CET	50272	2323	192.168.2.23	187.171.117.205
Jan 23, 2025 09:16:48.548639059 CET	23	50272	125.202.198.7	192.168.2.23
Jan 23, 2025 09:16:48.548651934 CET	50272	23	192.168.2.23	221.136.41.154
Jan 23, 2025 09:16:48.548665047 CET	23	50272	81.26.35.60	192.168.2.23
Jan 23, 2025 09:16:48.548681974 CET	50272	23	192.168.2.23	125.202.198.7
Jan 23, 2025 09:16:48.548691988 CET	23	50272	40.162.86.36	192.168.2.23
Jan 23, 2025 09:16:48.548698902 CET	50272	23	192.168.2.23	81.26.35.60
Jan 23, 2025 09:16:48.548718929 CET	23	50272	19.121.81.48	192.168.2.23
Jan 23, 2025 09:16:48.548731089 CET	50272	23	192.168.2.23	40.162.86.36
Jan 23, 2025 09:16:48.548746109 CET	23	50272	57.111.41.161	192.168.2.23
Jan 23, 2025 09:16:48.548754930 CET	50272	23	192.168.2.23	19.121.81.48
Jan 23, 2025 09:16:48.548774004 CET	63645	49066	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:48.548783064 CET	50272	23	192.168.2.23	57.111.41.161
Jan 23, 2025 09:16:49.227072954 CET	63645	49066	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:49.227427006 CET	49066	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:49.227427959 CET	49066	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:49.289971113 CET	49068	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:49.294914961 CET	63645	49068	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:49.295252085 CET	49068	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:49.342200041 CET	49068	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:49.347189903 CET	63645	49068	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:49.347333908 CET	49068	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:49.353415966 CET	63645	49068	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:49.536184072 CET	50272	23	192.168.2.23	77.78.139.179
Jan 23, 2025 09:16:49.536201000 CET	50272	23	192.168.2.23	163.198.213.231
Jan 23, 2025 09:16:49.536201000 CET	50272	23	192.168.2.23	4.63.52.28
Jan 23, 2025 09:16:49.536214113 CET	50272	23	192.168.2.23	4.229.48.31
Jan 23, 2025 09:16:49.536221981 CET	50272	23	192.168.2.23	65.190.187.130
Jan 23, 2025 09:16:49.536231995 CET	50272	23	192.168.2.23	71.70.91.237
Jan 23, 2025 09:16:49.536247969 CET	50272	2323	192.168.2.23	92.122.74.133
Jan 23, 2025 09:16:49.536248922 CET	50272	23	192.168.2.23	81.110.29.45
Jan 23, 2025 09:16:49.536248922 CET	50272	23	192.168.2.23	119.3.202.237
Jan 23, 2025 09:16:49.536257982 CET	50272	23	192.168.2.23	46.87.209.222
Jan 23, 2025 09:16:49.536279917 CET	50272	23	192.168.2.23	38.248.229.232
Jan 23, 2025 09:16:49.536295891 CET	50272	23	192.168.2.23	192.175.74.21
Jan 23, 2025 09:16:49.536299944 CET	50272	2323	192.168.2.23	116.14.98.54
Jan 23, 2025 09:16:49.536299944 CET	50272	23	192.168.2.23	177.60.105.94
Jan 23, 2025 09:16:49.536317110 CET	50272	23	192.168.2.23	38.11.94.92
Jan 23, 2025 09:16:49.536317110 CET	50272	23	192.168.2.23	14.163.58.144
Jan 23, 2025 09:16:49.536320925 CET	50272	23	192.168.2.23	116.42.26.205
Jan 23, 2025 09:16:49.536333084 CET	50272	23	192.168.2.23	149.223.127.202
Jan 23, 2025 09:16:49.536336899 CET	50272	23	192.168.2.23	41.112.50.10
Jan 23, 2025 09:16:49.536344051 CET	50272	23	192.168.2.23	192.76.189.169
Jan 23, 2025 09:16:49.536396027 CET	50272	23	192.168.2.23	58.162.242.38
Jan 23, 2025 09:16:49.536397934 CET	50272	2323	192.168.2.23	156.124.141.92
Jan 23, 2025 09:16:49.536416054 CET	50272	23	192.168.2.23	212.143.62.194
Jan 23, 2025 09:16:49.536416054 CET	50272	23	192.168.2.23	63.91.239.135
Jan 23, 2025 09:16:49.536422968 CET	50272	23	192.168.2.23	36.23.22.1
Jan 23, 2025 09:16:49.536422968 CET	50272	23	192.168.2.23	2.69.168.55
Jan 23, 2025 09:16:49.536437988 CET	50272	23	192.168.2.23	141.240.125.130
Jan 23, 2025 09:16:49.536474943 CET	50272	23	192.168.2.23	121.78.215.74
Jan 23, 2025 09:16:49.536487103 CET	50272	23	192.168.2.23	157.200.83.125
Jan 23, 2025 09:16:49.536492109 CET	50272	23	192.168.2.23	184.69.149.59
Jan 23, 2025 09:16:49.536492109 CET	50272	2323	192.168.2.23	110.202.87.179
Jan 23, 2025 09:16:49.536495924 CET	50272	23	192.168.2.23	183.217.200.226
Jan 23, 2025 09:16:49.536505938 CET	50272	23	192.168.2.23	202.136.242.58
Jan 23, 2025 09:16:49.536514044 CET	50272	23	192.168.2.23	98.59.248.120
Jan 23, 2025 09:16:49.536529064 CET	50272	23	192.168.2.23	123.14.112.56
Jan 23, 2025 09:16:49.536537886 CET	50272	23	192.168.2.23	124.192.132.151
Jan 23, 2025 09:16:49.536537886 CET	50272	23	192.168.2.23	73.163.188.50
Jan 23, 2025 09:16:49.536583900 CET	50272	23	192.168.2.23	133.128.146.225
Jan 23, 2025 09:16:49.536590099 CET	50272	23	192.168.2.23	153.93.168.229
Jan 23, 2025 09:16:49.536603928 CET	50272	23	192.168.2.23	8.184.25.151
Jan 23, 2025 09:16:49.536612034 CET	50272	2323	192.168.2.23	159.88.189.24
Jan 23, 2025 09:16:49.536612034 CET	50272	23	192.168.2.23	175.80.95.161
Jan 23, 2025 09:16:49.536634922 CET	50272	23	192.168.2.23	58.197.249.213
Jan 23, 2025 09:16:49.536636114 CET	50272	23	192.168.2.23	58.182.169.34
Jan 23, 2025 09:16:49.536647081 CET	50272	23	192.168.2.23	83.93.61.118
Jan 23, 2025 09:16:49.536649942 CET	50272	23	192.168.2.23	44.126.218.32
Jan 23, 2025 09:16:49.536655903 CET	50272	23	192.168.2.23	189.55.125.66
Jan 23, 2025 09:16:49.536670923 CET	50272	23	192.168.2.23	211.198.99.150
Jan 23, 2025 09:16:49.536679029 CET	50272	23	192.168.2.23	124.96.108.134
Jan 23, 2025 09:16:49.536679029 CET	50272	2323	192.168.2.23	187.104.208.102
Jan 23, 2025 09:16:49.536683083 CET	50272	23	192.168.2.23	95.160.123.149
Jan 23, 2025 09:16:49.536685944 CET	50272	23	192.168.2.23	90.160.158.180
Jan 23, 2025 09:16:49.536685944 CET	50272	23	192.168.2.23	97.6.15.59
Jan 23, 2025 09:16:49.536703110 CET	50272	23	192.168.2.23	136.67.79.7
Jan 23, 2025 09:16:49.536715031 CET	50272	23	192.168.2.23	189.194.151.198
Jan 23, 2025 09:16:49.536716938 CET	50272	23	192.168.2.23	192.143.168.104
Jan 23, 2025 09:16:49.536746025 CET	50272	23	192.168.2.23	193.0.133.124
Jan 23, 2025 09:16:49.536746025 CET	50272	23	192.168.2.23	76.158.161.130
Jan 23, 2025 09:16:49.536792994 CET	50272	23	192.168.2.23	60.158.5.141
Jan 23, 2025 09:16:49.536801100 CET	50272	23	192.168.2.23	209.137.236.32
Jan 23, 2025 09:16:49.536813974 CET	50272	2323	192.168.2.23	23.216.84.200
Jan 23, 2025 09:16:49.536819935 CET	50272	23	192.168.2.23	111.194.176.200
Jan 23, 2025 09:16:49.536828995 CET	50272	23	192.168.2.23	94.220.44.215
Jan 23, 2025 09:16:49.536884069 CET	50272	23	192.168.2.23	188.252.157.223
Jan 23, 2025 09:16:49.536899090 CET	50272	23	192.168.2.23	32.157.79.249
Jan 23, 2025 09:16:49.536900043 CET	50272	23	192.168.2.23	53.214.191.118
Jan 23, 2025 09:16:49.536936045 CET	50272	23	192.168.2.23	34.4.123.5
Jan 23, 2025 09:16:49.536947966 CET	50272	23	192.168.2.23	9.12.79.160
Jan 23, 2025 09:16:49.536952019 CET	50272	23	192.168.2.23	23.91.54.48
Jan 23, 2025 09:16:49.536995888 CET	50272	2323	192.168.2.23	42.68.188.79
Jan 23, 2025 09:16:49.536998034 CET	50272	23	192.168.2.23	27.137.129.29
Jan 23, 2025 09:16:49.537005901 CET	50272	23	192.168.2.23	103.7.133.182
Jan 23, 2025 09:16:49.537018061 CET	50272	23	192.168.2.23	206.106.41.88
Jan 23, 2025 09:16:49.537031889 CET	50272	23	192.168.2.23	42.136.103.80
Jan 23, 2025 09:16:49.537035942 CET	50272	23	192.168.2.23	95.90.205.244
Jan 23, 2025 09:16:49.537059069 CET	50272	23	192.168.2.23	17.184.179.110
Jan 23, 2025 09:16:49.537069082 CET	50272	23	192.168.2.23	84.16.98.214
Jan 23, 2025 09:16:49.537075996 CET	50272	23	192.168.2.23	170.197.24.155
Jan 23, 2025 09:16:49.537086010 CET	50272	23	192.168.2.23	58.115.33.71
Jan 23, 2025 09:16:49.537101030 CET	50272	23	192.168.2.23	143.235.49.84
Jan 23, 2025 09:16:49.537105083 CET	50272	2323	192.168.2.23	171.61.94.162
Jan 23, 2025 09:16:49.537118912 CET	50272	23	192.168.2.23	92.255.224.146
Jan 23, 2025 09:16:49.537139893 CET	50272	23	192.168.2.23	220.1.83.56
Jan 23, 2025 09:16:49.537142038 CET	50272	23	192.168.2.23	192.37.239.212
Jan 23, 2025 09:16:49.537152052 CET	50272	23	192.168.2.23	191.104.33.85
Jan 23, 2025 09:16:49.537163973 CET	50272	23	192.168.2.23	116.114.135.44
Jan 23, 2025 09:16:49.537164927 CET	50272	23	192.168.2.23	133.242.244.63
Jan 23, 2025 09:16:49.537184954 CET	50272	23	192.168.2.23	20.197.68.171
Jan 23, 2025 09:16:49.537189007 CET	50272	23	192.168.2.23	40.15.228.222
Jan 23, 2025 09:16:49.537189960 CET	50272	23	192.168.2.23	211.78.202.182
Jan 23, 2025 09:16:49.537206888 CET	50272	23	192.168.2.23	222.195.55.165
Jan 23, 2025 09:16:49.537206888 CET	50272	23	192.168.2.23	27.37.69.204
Jan 23, 2025 09:16:49.537210941 CET	50272	2323	192.168.2.23	84.253.214.90
Jan 23, 2025 09:16:49.537236929 CET	50272	23	192.168.2.23	125.10.250.89
Jan 23, 2025 09:16:49.537252903 CET	50272	23	192.168.2.23	202.26.175.139
Jan 23, 2025 09:16:49.537255049 CET	50272	23	192.168.2.23	95.76.253.190
Jan 23, 2025 09:16:49.537255049 CET	50272	23	192.168.2.23	208.52.160.101
Jan 23, 2025 09:16:49.537275076 CET	50272	23	192.168.2.23	183.147.166.175
Jan 23, 2025 09:16:49.537283897 CET	50272	23	192.168.2.23	141.255.22.104
Jan 23, 2025 09:16:49.537288904 CET	50272	23	192.168.2.23	220.47.32.40
Jan 23, 2025 09:16:49.537288904 CET	50272	2323	192.168.2.23	206.27.105.171
Jan 23, 2025 09:16:49.537293911 CET	50272	23	192.168.2.23	211.205.66.62
Jan 23, 2025 09:16:49.537312984 CET	50272	23	192.168.2.23	115.232.205.165
Jan 23, 2025 09:16:49.537312031 CET	50272	23	192.168.2.23	108.122.129.102
Jan 23, 2025 09:16:49.537312031 CET	50272	23	192.168.2.23	193.171.112.35
Jan 23, 2025 09:16:49.537318945 CET	50272	23	192.168.2.23	58.10.10.114
Jan 23, 2025 09:16:49.537342072 CET	50272	23	192.168.2.23	71.95.233.180
Jan 23, 2025 09:16:49.537342072 CET	50272	23	192.168.2.23	18.73.172.90
Jan 23, 2025 09:16:49.537345886 CET	50272	23	192.168.2.23	45.25.114.236
Jan 23, 2025 09:16:49.537447929 CET	50272	23	192.168.2.23	146.159.231.184
Jan 23, 2025 09:16:49.537450075 CET	50272	2323	192.168.2.23	174.66.154.45
Jan 23, 2025 09:16:49.537453890 CET	50272	23	192.168.2.23	32.29.119.182
Jan 23, 2025 09:16:49.537470102 CET	50272	23	192.168.2.23	181.25.137.111
Jan 23, 2025 09:16:49.537478924 CET	50272	23	192.168.2.23	87.55.219.202
Jan 23, 2025 09:16:49.537491083 CET	50272	23	192.168.2.23	166.156.119.23
Jan 23, 2025 09:16:49.537499905 CET	50272	23	192.168.2.23	1.132.37.89
Jan 23, 2025 09:16:49.537512064 CET	50272	23	192.168.2.23	179.14.114.224
Jan 23, 2025 09:16:49.537519932 CET	50272	23	192.168.2.23	45.22.24.155
Jan 23, 2025 09:16:49.537522078 CET	50272	23	192.168.2.23	59.204.245.45
Jan 23, 2025 09:16:49.537523985 CET	50272	23	192.168.2.23	65.48.112.3
Jan 23, 2025 09:16:49.537528992 CET	50272	2323	192.168.2.23	78.107.82.49
Jan 23, 2025 09:16:49.537544012 CET	50272	23	192.168.2.23	58.42.30.128
Jan 23, 2025 09:16:49.537547112 CET	50272	23	192.168.2.23	114.203.216.22
Jan 23, 2025 09:16:49.537578106 CET	50272	23	192.168.2.23	37.210.225.87
Jan 23, 2025 09:16:49.537609100 CET	50272	23	192.168.2.23	151.104.252.128
Jan 23, 2025 09:16:49.537633896 CET	50272	23	192.168.2.23	197.59.244.206
Jan 23, 2025 09:16:49.537633896 CET	50272	23	192.168.2.23	70.172.206.4
Jan 23, 2025 09:16:49.537633896 CET	50272	23	192.168.2.23	149.250.162.251
Jan 23, 2025 09:16:49.537640095 CET	50272	23	192.168.2.23	84.42.71.219
Jan 23, 2025 09:16:49.537641048 CET	50272	23	192.168.2.23	83.15.59.67
Jan 23, 2025 09:16:49.537641048 CET	50272	2323	192.168.2.23	159.178.67.189
Jan 23, 2025 09:16:49.537651062 CET	50272	23	192.168.2.23	222.181.10.174
Jan 23, 2025 09:16:49.537652016 CET	50272	23	192.168.2.23	13.136.13.227
Jan 23, 2025 09:16:49.537662029 CET	50272	23	192.168.2.23	75.244.254.162
Jan 23, 2025 09:16:49.537687063 CET	50272	23	192.168.2.23	47.157.132.147
Jan 23, 2025 09:16:49.537698984 CET	50272	23	192.168.2.23	205.179.41.228
Jan 23, 2025 09:16:49.537724018 CET	50272	23	192.168.2.23	78.196.14.68
Jan 23, 2025 09:16:49.537728071 CET	50272	23	192.168.2.23	202.4.193.193
Jan 23, 2025 09:16:49.537733078 CET	50272	23	192.168.2.23	212.84.68.219
Jan 23, 2025 09:16:49.537745953 CET	50272	2323	192.168.2.23	141.112.145.91
Jan 23, 2025 09:16:49.537749052 CET	50272	23	192.168.2.23	116.150.151.155
Jan 23, 2025 09:16:49.537764072 CET	50272	23	192.168.2.23	146.141.107.68
Jan 23, 2025 09:16:49.537792921 CET	50272	23	192.168.2.23	118.5.226.231
Jan 23, 2025 09:16:49.537795067 CET	50272	23	192.168.2.23	35.92.205.16
Jan 23, 2025 09:16:49.537811041 CET	50272	23	192.168.2.23	184.127.30.54
Jan 23, 2025 09:16:49.537811995 CET	50272	23	192.168.2.23	153.74.202.50
Jan 23, 2025 09:16:49.537822962 CET	50272	23	192.168.2.23	8.72.139.90
Jan 23, 2025 09:16:49.537827969 CET	50272	23	192.168.2.23	193.23.24.148
Jan 23, 2025 09:16:49.537873983 CET	50272	23	192.168.2.23	202.132.44.241
Jan 23, 2025 09:16:49.537878990 CET	50272	23	192.168.2.23	97.242.191.3
Jan 23, 2025 09:16:49.537883043 CET	50272	2323	192.168.2.23	46.219.144.159
Jan 23, 2025 09:16:49.537897110 CET	50272	23	192.168.2.23	27.100.14.39
Jan 23, 2025 09:16:49.537908077 CET	50272	23	192.168.2.23	81.140.62.151
Jan 23, 2025 09:16:49.537908077 CET	50272	23	192.168.2.23	62.114.246.97
Jan 23, 2025 09:16:49.537920952 CET	50272	23	192.168.2.23	80.189.50.93
Jan 23, 2025 09:16:49.537920952 CET	50272	23	192.168.2.23	53.147.156.76
Jan 23, 2025 09:16:49.537944078 CET	50272	23	192.168.2.23	210.155.231.129
Jan 23, 2025 09:16:49.537950039 CET	50272	23	192.168.2.23	156.85.129.24
Jan 23, 2025 09:16:49.537978888 CET	50272	23	192.168.2.23	51.4.35.95
Jan 23, 2025 09:16:49.537981033 CET	50272	23	192.168.2.23	193.39.127.75
Jan 23, 2025 09:16:49.541127920 CET	58032	2323	192.168.2.23	196.141.189.118
Jan 23, 2025 09:16:49.541198015 CET	23	50272	77.78.139.179	192.168.2.23
Jan 23, 2025 09:16:49.541261911 CET	50272	23	192.168.2.23	77.78.139.179
Jan 23, 2025 09:16:49.541311979 CET	23	50272	4.229.48.31	192.168.2.23
Jan 23, 2025 09:16:49.541342020 CET	23	50272	163.198.213.231	192.168.2.23
Jan 23, 2025 09:16:49.541349888 CET	50272	23	192.168.2.23	4.229.48.31
Jan 23, 2025 09:16:49.541371107 CET	23	50272	4.63.52.28	192.168.2.23
Jan 23, 2025 09:16:49.541399956 CET	23	50272	46.87.209.222	192.168.2.23
Jan 23, 2025 09:16:49.541408062 CET	50272	23	192.168.2.23	163.198.213.231
Jan 23, 2025 09:16:49.541408062 CET	50272	23	192.168.2.23	4.63.52.28
Jan 23, 2025 09:16:49.541435003 CET	50272	23	192.168.2.23	46.87.209.222
Jan 23, 2025 09:16:49.541450977 CET	23	50272	71.70.91.237	192.168.2.23
Jan 23, 2025 09:16:49.541480064 CET	2323	50272	92.122.74.133	192.168.2.23
Jan 23, 2025 09:16:49.541501999 CET	50272	23	192.168.2.23	71.70.91.237
Jan 23, 2025 09:16:49.541507959 CET	23	50272	38.248.229.232	192.168.2.23
Jan 23, 2025 09:16:49.541529894 CET	50272	2323	192.168.2.23	92.122.74.133
Jan 23, 2025 09:16:49.541537046 CET	23	50272	81.110.29.45	192.168.2.23
Jan 23, 2025 09:16:49.541563034 CET	50272	23	192.168.2.23	38.248.229.232
Jan 23, 2025 09:16:49.541564941 CET	23	50272	119.3.202.237	192.168.2.23
Jan 23, 2025 09:16:49.541579962 CET	50272	23	192.168.2.23	81.110.29.45
Jan 23, 2025 09:16:49.541591883 CET	23	50272	192.175.74.21	192.168.2.23
Jan 23, 2025 09:16:49.541623116 CET	50272	23	192.168.2.23	119.3.202.237
Jan 23, 2025 09:16:49.541650057 CET	50272	23	192.168.2.23	192.175.74.21
Jan 23, 2025 09:16:49.546495914 CET	23	50272	65.190.187.130	192.168.2.23
Jan 23, 2025 09:16:49.546561956 CET	50272	23	192.168.2.23	65.190.187.130
Jan 23, 2025 09:16:49.546593904 CET	2323	50272	116.14.98.54	192.168.2.23
Jan 23, 2025 09:16:49.546623945 CET	23	50272	177.60.105.94	192.168.2.23
Jan 23, 2025 09:16:49.546629906 CET	50272	2323	192.168.2.23	116.14.98.54
Jan 23, 2025 09:16:49.546655893 CET	23	50272	38.11.94.92	192.168.2.23
Jan 23, 2025 09:16:49.546674013 CET	50272	23	192.168.2.23	177.60.105.94
Jan 23, 2025 09:16:49.546684980 CET	23	50272	14.163.58.144	192.168.2.23
Jan 23, 2025 09:16:49.546704054 CET	50272	23	192.168.2.23	38.11.94.92
Jan 23, 2025 09:16:49.546713114 CET	23	50272	149.223.127.202	192.168.2.23
Jan 23, 2025 09:16:49.546741009 CET	50272	23	192.168.2.23	14.163.58.144
Jan 23, 2025 09:16:49.546741962 CET	23	50272	116.42.26.205	192.168.2.23
Jan 23, 2025 09:16:49.546765089 CET	50272	23	192.168.2.23	149.223.127.202
Jan 23, 2025 09:16:49.546797037 CET	50272	23	192.168.2.23	116.42.26.205
Jan 23, 2025 09:16:49.546796083 CET	23	50272	192.76.189.169	192.168.2.23
Jan 23, 2025 09:16:49.546827078 CET	23	50272	41.112.50.10	192.168.2.23
Jan 23, 2025 09:16:49.546844959 CET	50272	23	192.168.2.23	192.76.189.169
Jan 23, 2025 09:16:49.546855927 CET	23	50272	58.162.242.38	192.168.2.23
Jan 23, 2025 09:16:49.546884060 CET	2323	50272	156.124.141.92	192.168.2.23
Jan 23, 2025 09:16:49.546885014 CET	50272	23	192.168.2.23	41.112.50.10
Jan 23, 2025 09:16:49.546896935 CET	50272	23	192.168.2.23	58.162.242.38
Jan 23, 2025 09:16:49.546911955 CET	23	50272	36.23.22.1	192.168.2.23
Jan 23, 2025 09:16:49.546940088 CET	23	50272	2.69.168.55	192.168.2.23
Jan 23, 2025 09:16:49.546943903 CET	50272	2323	192.168.2.23	156.124.141.92
Jan 23, 2025 09:16:49.546971083 CET	23	50272	212.143.62.194	192.168.2.23
Jan 23, 2025 09:16:49.546983004 CET	50272	23	192.168.2.23	36.23.22.1
Jan 23, 2025 09:16:49.546983004 CET	50272	23	192.168.2.23	2.69.168.55
Jan 23, 2025 09:16:49.546998024 CET	23	50272	63.91.239.135	192.168.2.23
Jan 23, 2025 09:16:49.547010899 CET	23	50272	141.240.125.130	192.168.2.23
Jan 23, 2025 09:16:49.547023058 CET	23	50272	121.78.215.74	192.168.2.23
Jan 23, 2025 09:16:49.547035933 CET	23	50272	157.200.83.125	192.168.2.23
Jan 23, 2025 09:16:49.547055960 CET	50272	23	192.168.2.23	212.143.62.194
Jan 23, 2025 09:16:49.547055960 CET	50272	23	192.168.2.23	63.91.239.135
Jan 23, 2025 09:16:49.547064066 CET	23	50272	184.69.149.59	192.168.2.23
Jan 23, 2025 09:16:49.547065020 CET	50272	23	192.168.2.23	141.240.125.130
Jan 23, 2025 09:16:49.547094107 CET	50272	23	192.168.2.23	157.200.83.125
Jan 23, 2025 09:16:49.547095060 CET	23	50272	183.217.200.226	192.168.2.23
Jan 23, 2025 09:16:49.547122002 CET	50272	23	192.168.2.23	184.69.149.59
Jan 23, 2025 09:16:49.547122955 CET	2323	50272	110.202.87.179	192.168.2.23
Jan 23, 2025 09:16:49.547142029 CET	50272	23	192.168.2.23	183.217.200.226
Jan 23, 2025 09:16:49.547152996 CET	23	50272	202.136.242.58	192.168.2.23
Jan 23, 2025 09:16:49.547166109 CET	50272	2323	192.168.2.23	110.202.87.179
Jan 23, 2025 09:16:49.547172070 CET	50272	23	192.168.2.23	121.78.215.74
Jan 23, 2025 09:16:49.547183037 CET	23	50272	98.59.248.120	192.168.2.23
Jan 23, 2025 09:16:49.547194004 CET	50272	23	192.168.2.23	202.136.242.58
Jan 23, 2025 09:16:49.547210932 CET	23	50272	123.14.112.56	192.168.2.23
Jan 23, 2025 09:16:49.547221899 CET	50272	23	192.168.2.23	98.59.248.120
Jan 23, 2025 09:16:49.547240019 CET	23	50272	124.192.132.151	192.168.2.23
Jan 23, 2025 09:16:49.547262907 CET	50272	23	192.168.2.23	123.14.112.56
Jan 23, 2025 09:16:49.547267914 CET	23	50272	73.163.188.50	192.168.2.23
Jan 23, 2025 09:16:49.547275066 CET	50272	23	192.168.2.23	124.192.132.151
Jan 23, 2025 09:16:49.547295094 CET	23	50272	153.93.168.229	192.168.2.23
Jan 23, 2025 09:16:49.547305107 CET	50272	23	192.168.2.23	73.163.188.50
Jan 23, 2025 09:16:49.547350883 CET	23	50272	133.128.146.225	192.168.2.23
Jan 23, 2025 09:16:49.547379017 CET	50272	23	192.168.2.23	153.93.168.229
Jan 23, 2025 09:16:49.547393084 CET	50272	23	192.168.2.23	133.128.146.225
Jan 23, 2025 09:16:49.547404051 CET	23	50272	8.184.25.151	192.168.2.23
Jan 23, 2025 09:16:49.547432899 CET	2323	50272	159.88.189.24	192.168.2.23
Jan 23, 2025 09:16:49.547447920 CET	50272	23	192.168.2.23	8.184.25.151
Jan 23, 2025 09:16:49.547460079 CET	23	50272	175.80.95.161	192.168.2.23
Jan 23, 2025 09:16:49.547487020 CET	23	50272	58.197.249.213	192.168.2.23
Jan 23, 2025 09:16:49.547502995 CET	50272	2323	192.168.2.23	159.88.189.24
Jan 23, 2025 09:16:49.547502995 CET	50272	23	192.168.2.23	175.80.95.161
Jan 23, 2025 09:16:49.547514915 CET	23	50272	58.182.169.34	192.168.2.23
Jan 23, 2025 09:16:49.547544003 CET	23	50272	83.93.61.118	192.168.2.23
Jan 23, 2025 09:16:49.547552109 CET	50272	23	192.168.2.23	58.197.249.213
Jan 23, 2025 09:16:49.547570944 CET	50272	23	192.168.2.23	58.182.169.34
Jan 23, 2025 09:16:49.547573090 CET	23	50272	44.126.218.32	192.168.2.23
Jan 23, 2025 09:16:49.547593117 CET	50272	23	192.168.2.23	83.93.61.118
Jan 23, 2025 09:16:49.547600985 CET	23	50272	189.55.125.66	192.168.2.23
Jan 23, 2025 09:16:49.547614098 CET	50272	23	192.168.2.23	44.126.218.32
Jan 23, 2025 09:16:49.547629118 CET	23	50272	211.198.99.150	192.168.2.23
Jan 23, 2025 09:16:49.547645092 CET	50272	23	192.168.2.23	189.55.125.66
Jan 23, 2025 09:16:49.547656059 CET	23	50272	95.160.123.149	192.168.2.23
Jan 23, 2025 09:16:49.547683954 CET	23	50272	124.96.108.134	192.168.2.23
Jan 23, 2025 09:16:49.547698975 CET	50272	23	192.168.2.23	211.198.99.150
Jan 23, 2025 09:16:49.547703028 CET	50272	23	192.168.2.23	95.160.123.149
Jan 23, 2025 09:16:49.547709942 CET	2323	50272	187.104.208.102	192.168.2.23
Jan 23, 2025 09:16:49.547734976 CET	50272	23	192.168.2.23	124.96.108.134
Jan 23, 2025 09:16:49.547738075 CET	23	50272	90.160.158.180	192.168.2.23
Jan 23, 2025 09:16:49.547765970 CET	23	50272	97.6.15.59	192.168.2.23
Jan 23, 2025 09:16:49.547780991 CET	50272	2323	192.168.2.23	187.104.208.102
Jan 23, 2025 09:16:49.547791004 CET	50272	23	192.168.2.23	90.160.158.180
Jan 23, 2025 09:16:49.547791004 CET	50272	23	192.168.2.23	97.6.15.59
Jan 23, 2025 09:16:49.547792912 CET	23	50272	136.67.79.7	192.168.2.23
Jan 23, 2025 09:16:49.547821045 CET	23	50272	189.194.151.198	192.168.2.23
Jan 23, 2025 09:16:49.547837019 CET	50272	23	192.168.2.23	136.67.79.7
Jan 23, 2025 09:16:49.547847033 CET	23	50272	192.143.168.104	192.168.2.23
Jan 23, 2025 09:16:49.547849894 CET	50272	23	192.168.2.23	189.194.151.198
Jan 23, 2025 09:16:49.547875881 CET	23	50272	193.0.133.124	192.168.2.23
Jan 23, 2025 09:16:49.547895908 CET	50272	23	192.168.2.23	192.143.168.104
Jan 23, 2025 09:16:49.547904015 CET	23	50272	76.158.161.130	192.168.2.23
Jan 23, 2025 09:16:49.547933102 CET	23	50272	60.158.5.141	192.168.2.23
Jan 23, 2025 09:16:49.547941923 CET	50272	23	192.168.2.23	193.0.133.124
Jan 23, 2025 09:16:49.547941923 CET	50272	23	192.168.2.23	76.158.161.130
Jan 23, 2025 09:16:49.547961950 CET	50272	23	192.168.2.23	60.158.5.141
Jan 23, 2025 09:16:49.547962904 CET	23	50272	209.137.236.32	192.168.2.23
Jan 23, 2025 09:16:49.547991037 CET	2323	50272	23.216.84.200	192.168.2.23
Jan 23, 2025 09:16:49.548032999 CET	50272	23	192.168.2.23	209.137.236.32
Jan 23, 2025 09:16:49.548033953 CET	50272	2323	192.168.2.23	23.216.84.200
Jan 23, 2025 09:16:49.548038960 CET	23	50272	111.194.176.200	192.168.2.23
Jan 23, 2025 09:16:49.548079967 CET	23	50272	94.220.44.215	192.168.2.23
Jan 23, 2025 09:16:49.548085928 CET	50272	23	192.168.2.23	111.194.176.200
Jan 23, 2025 09:16:49.548108101 CET	23	50272	188.252.157.223	192.168.2.23
Jan 23, 2025 09:16:49.548122883 CET	50272	23	192.168.2.23	94.220.44.215
Jan 23, 2025 09:16:49.548135996 CET	23	50272	32.157.79.249	192.168.2.23
Jan 23, 2025 09:16:49.548146963 CET	50272	23	192.168.2.23	188.252.157.223
Jan 23, 2025 09:16:49.548163891 CET	23	50272	53.214.191.118	192.168.2.23
Jan 23, 2025 09:16:49.548191071 CET	23	50272	34.4.123.5	192.168.2.23
Jan 23, 2025 09:16:49.548197031 CET	50272	23	192.168.2.23	32.157.79.249
Jan 23, 2025 09:16:49.548219919 CET	23	50272	9.12.79.160	192.168.2.23
Jan 23, 2025 09:16:49.548221111 CET	50272	23	192.168.2.23	34.4.123.5
Jan 23, 2025 09:16:49.548248053 CET	23	50272	23.91.54.48	192.168.2.23
Jan 23, 2025 09:16:49.548264027 CET	50272	23	192.168.2.23	9.12.79.160
Jan 23, 2025 09:16:49.548273087 CET	50272	23	192.168.2.23	53.214.191.118
Jan 23, 2025 09:16:49.548274040 CET	2323	50272	42.68.188.79	192.168.2.23
Jan 23, 2025 09:16:49.548301935 CET	23	50272	27.137.129.29	192.168.2.23
Jan 23, 2025 09:16:49.548305035 CET	50272	23	192.168.2.23	23.91.54.48
Jan 23, 2025 09:16:49.548316002 CET	50272	2323	192.168.2.23	42.68.188.79
Jan 23, 2025 09:16:49.548330069 CET	23	50272	103.7.133.182	192.168.2.23
Jan 23, 2025 09:16:49.548336029 CET	52076	23	192.168.2.23	97.186.231.114
Jan 23, 2025 09:16:49.548353910 CET	50272	23	192.168.2.23	27.137.129.29
Jan 23, 2025 09:16:49.548357010 CET	23	50272	206.106.41.88	192.168.2.23
Jan 23, 2025 09:16:49.548382044 CET	50272	23	192.168.2.23	103.7.133.182
Jan 23, 2025 09:16:49.548386097 CET	23	50272	42.136.103.80	192.168.2.23
Jan 23, 2025 09:16:49.548394918 CET	50272	23	192.168.2.23	206.106.41.88
Jan 23, 2025 09:16:49.548413992 CET	23	50272	95.90.205.244	192.168.2.23
Jan 23, 2025 09:16:49.548423052 CET	50272	23	192.168.2.23	42.136.103.80
Jan 23, 2025 09:16:49.548441887 CET	23	50272	17.184.179.110	192.168.2.23
Jan 23, 2025 09:16:49.548465014 CET	50272	23	192.168.2.23	95.90.205.244
Jan 23, 2025 09:16:49.548469067 CET	23	50272	84.16.98.214	192.168.2.23
Jan 23, 2025 09:16:49.548480988 CET	50272	23	192.168.2.23	17.184.179.110
Jan 23, 2025 09:16:49.548497915 CET	23	50272	170.197.24.155	192.168.2.23
Jan 23, 2025 09:16:49.548522949 CET	50272	23	192.168.2.23	84.16.98.214
Jan 23, 2025 09:16:49.548525095 CET	23	50272	58.115.33.71	192.168.2.23
Jan 23, 2025 09:16:49.548537016 CET	50272	23	192.168.2.23	170.197.24.155
Jan 23, 2025 09:16:49.548553944 CET	23	50272	143.235.49.84	192.168.2.23
Jan 23, 2025 09:16:49.548574924 CET	50272	23	192.168.2.23	58.115.33.71
Jan 23, 2025 09:16:49.548582077 CET	2323	50272	171.61.94.162	192.168.2.23
Jan 23, 2025 09:16:49.548609972 CET	23	50272	92.255.224.146	192.168.2.23
Jan 23, 2025 09:16:49.548624992 CET	50272	2323	192.168.2.23	171.61.94.162
Jan 23, 2025 09:16:49.548636913 CET	23	50272	220.1.83.56	192.168.2.23
Jan 23, 2025 09:16:49.548646927 CET	50272	23	192.168.2.23	92.255.224.146
Jan 23, 2025 09:16:49.548665047 CET	23	50272	192.37.239.212	192.168.2.23
Jan 23, 2025 09:16:49.548671007 CET	50272	23	192.168.2.23	143.235.49.84
Jan 23, 2025 09:16:49.548676014 CET	50272	23	192.168.2.23	220.1.83.56
Jan 23, 2025 09:16:49.548696041 CET	23	50272	191.104.33.85	192.168.2.23
Jan 23, 2025 09:16:49.548703909 CET	50272	23	192.168.2.23	192.37.239.212
Jan 23, 2025 09:16:49.548746109 CET	50272	23	192.168.2.23	191.104.33.85
Jan 23, 2025 09:16:49.548748016 CET	23	50272	116.114.135.44	192.168.2.23
Jan 23, 2025 09:16:49.548775911 CET	23	50272	133.242.244.63	192.168.2.23
Jan 23, 2025 09:16:49.548791885 CET	50272	23	192.168.2.23	116.114.135.44
Jan 23, 2025 09:16:49.548804998 CET	23	50272	20.197.68.171	192.168.2.23
Jan 23, 2025 09:16:49.548823118 CET	50272	23	192.168.2.23	133.242.244.63
Jan 23, 2025 09:16:49.548832893 CET	23	50272	40.15.228.222	192.168.2.23
Jan 23, 2025 09:16:49.548850060 CET	50272	23	192.168.2.23	20.197.68.171
Jan 23, 2025 09:16:49.548860073 CET	23	50272	211.78.202.182	192.168.2.23
Jan 23, 2025 09:16:49.548871040 CET	50272	23	192.168.2.23	40.15.228.222
Jan 23, 2025 09:16:49.548887968 CET	23	50272	222.195.55.165	192.168.2.23
Jan 23, 2025 09:16:49.548914909 CET	23	50272	27.37.69.204	192.168.2.23
Jan 23, 2025 09:16:49.548919916 CET	50272	23	192.168.2.23	211.78.202.182
Jan 23, 2025 09:16:49.548932076 CET	50272	23	192.168.2.23	222.195.55.165
Jan 23, 2025 09:16:49.548943043 CET	2323	50272	84.253.214.90	192.168.2.23
Jan 23, 2025 09:16:49.548964977 CET	50272	23	192.168.2.23	27.37.69.204
Jan 23, 2025 09:16:49.548971891 CET	23	50272	125.10.250.89	192.168.2.23
Jan 23, 2025 09:16:49.548998117 CET	50272	2323	192.168.2.23	84.253.214.90
Jan 23, 2025 09:16:49.549000025 CET	23	50272	202.26.175.139	192.168.2.23
Jan 23, 2025 09:16:49.549011946 CET	50272	23	192.168.2.23	125.10.250.89
Jan 23, 2025 09:16:49.549047947 CET	50272	23	192.168.2.23	202.26.175.139
Jan 23, 2025 09:16:49.549053907 CET	23	50272	95.76.253.190	192.168.2.23
Jan 23, 2025 09:16:49.549082994 CET	23	50272	208.52.160.101	192.168.2.23
Jan 23, 2025 09:16:49.549112082 CET	23	50272	183.147.166.175	192.168.2.23
Jan 23, 2025 09:16:49.549139023 CET	23	50272	141.255.22.104	192.168.2.23
Jan 23, 2025 09:16:49.549151897 CET	50272	23	192.168.2.23	95.76.253.190
Jan 23, 2025 09:16:49.549151897 CET	50272	23	192.168.2.23	208.52.160.101
Jan 23, 2025 09:16:49.549156904 CET	50272	23	192.168.2.23	183.147.166.175
Jan 23, 2025 09:16:49.549168110 CET	23	50272	220.47.32.40	192.168.2.23
Jan 23, 2025 09:16:49.549186945 CET	50272	23	192.168.2.23	141.255.22.104
Jan 23, 2025 09:16:49.549196005 CET	23	50272	211.205.66.62	192.168.2.23
Jan 23, 2025 09:16:49.549211025 CET	50272	23	192.168.2.23	220.47.32.40
Jan 23, 2025 09:16:49.549222946 CET	2323	50272	206.27.105.171	192.168.2.23
Jan 23, 2025 09:16:49.549249887 CET	23	50272	115.232.205.165	192.168.2.23
Jan 23, 2025 09:16:49.549258947 CET	50272	23	192.168.2.23	211.205.66.62
Jan 23, 2025 09:16:49.549257994 CET	50272	2323	192.168.2.23	206.27.105.171
Jan 23, 2025 09:16:49.549277067 CET	23	50272	108.122.129.102	192.168.2.23
Jan 23, 2025 09:16:49.549282074 CET	50272	23	192.168.2.23	115.232.205.165
Jan 23, 2025 09:16:49.549304962 CET	23	50272	193.171.112.35	192.168.2.23
Jan 23, 2025 09:16:49.549318075 CET	50272	23	192.168.2.23	108.122.129.102
Jan 23, 2025 09:16:49.549333096 CET	23	50272	58.10.10.114	192.168.2.23
Jan 23, 2025 09:16:49.549360037 CET	50272	23	192.168.2.23	193.171.112.35
Jan 23, 2025 09:16:49.549360991 CET	23	50272	71.95.233.180	192.168.2.23
Jan 23, 2025 09:16:49.549384117 CET	50272	23	192.168.2.23	58.10.10.114
Jan 23, 2025 09:16:49.549388885 CET	23	50272	45.25.114.236	192.168.2.23
Jan 23, 2025 09:16:49.549402952 CET	50272	23	192.168.2.23	71.95.233.180
Jan 23, 2025 09:16:49.549417973 CET	23	50272	18.73.172.90	192.168.2.23
Jan 23, 2025 09:16:49.549432993 CET	50272	23	192.168.2.23	45.25.114.236
Jan 23, 2025 09:16:49.549446106 CET	23	50272	146.159.231.184	192.168.2.23
Jan 23, 2025 09:16:49.549465895 CET	50272	23	192.168.2.23	18.73.172.90
Jan 23, 2025 09:16:49.549474001 CET	2323	50272	174.66.154.45	192.168.2.23
Jan 23, 2025 09:16:49.549501896 CET	23	50272	32.29.119.182	192.168.2.23
Jan 23, 2025 09:16:49.549501896 CET	50272	23	192.168.2.23	146.159.231.184
Jan 23, 2025 09:16:49.549515963 CET	50272	2323	192.168.2.23	174.66.154.45
Jan 23, 2025 09:16:49.549530983 CET	23	50272	181.25.137.111	192.168.2.23
Jan 23, 2025 09:16:49.549535990 CET	50272	23	192.168.2.23	32.29.119.182
Jan 23, 2025 09:16:49.549557924 CET	23	50272	87.55.219.202	192.168.2.23
Jan 23, 2025 09:16:49.549597025 CET	50272	23	192.168.2.23	87.55.219.202
Jan 23, 2025 09:16:49.549604893 CET	50272	23	192.168.2.23	181.25.137.111
Jan 23, 2025 09:16:49.549612045 CET	23	50272	166.156.119.23	192.168.2.23
Jan 23, 2025 09:16:49.549639940 CET	23	50272	1.132.37.89	192.168.2.23
Jan 23, 2025 09:16:49.549663067 CET	50272	23	192.168.2.23	166.156.119.23
Jan 23, 2025 09:16:49.549666882 CET	23	50272	179.14.114.224	192.168.2.23
Jan 23, 2025 09:16:49.549683094 CET	50272	23	192.168.2.23	1.132.37.89
Jan 23, 2025 09:16:49.549794912 CET	23	50272	45.22.24.155	192.168.2.23
Jan 23, 2025 09:16:49.549818993 CET	50272	23	192.168.2.23	179.14.114.224
Jan 23, 2025 09:16:49.549823999 CET	23	50272	59.204.245.45	192.168.2.23
Jan 23, 2025 09:16:49.549838066 CET	23	50272	65.48.112.3	192.168.2.23
Jan 23, 2025 09:16:49.549858093 CET	50272	23	192.168.2.23	45.22.24.155
Jan 23, 2025 09:16:49.549864054 CET	2323	50272	78.107.82.49	192.168.2.23
Jan 23, 2025 09:16:49.549865961 CET	50272	23	192.168.2.23	65.48.112.3
Jan 23, 2025 09:16:49.549890995 CET	23	50272	58.42.30.128	192.168.2.23
Jan 23, 2025 09:16:49.549915075 CET	50272	2323	192.168.2.23	78.107.82.49
Jan 23, 2025 09:16:49.549917936 CET	23	50272	114.203.216.22	192.168.2.23
Jan 23, 2025 09:16:49.549940109 CET	50272	23	192.168.2.23	58.42.30.128
Jan 23, 2025 09:16:49.549943924 CET	50272	23	192.168.2.23	59.204.245.45
Jan 23, 2025 09:16:49.549946070 CET	23	50272	37.210.225.87	192.168.2.23
Jan 23, 2025 09:16:49.549973965 CET	23	50272	151.104.252.128	192.168.2.23
Jan 23, 2025 09:16:49.549974918 CET	50272	23	192.168.2.23	114.203.216.22
Jan 23, 2025 09:16:49.549999952 CET	23	50272	197.59.244.206	192.168.2.23
Jan 23, 2025 09:16:49.550002098 CET	50272	23	192.168.2.23	37.210.225.87
Jan 23, 2025 09:16:49.550025940 CET	50272	23	192.168.2.23	151.104.252.128
Jan 23, 2025 09:16:49.550041914 CET	50272	23	192.168.2.23	197.59.244.206
Jan 23, 2025 09:16:49.550050974 CET	23	50272	70.172.206.4	192.168.2.23
Jan 23, 2025 09:16:49.550080061 CET	23	50272	149.250.162.251	192.168.2.23
Jan 23, 2025 09:16:49.550096035 CET	50272	23	192.168.2.23	70.172.206.4
Jan 23, 2025 09:16:49.550107002 CET	23	50272	222.181.10.174	192.168.2.23
Jan 23, 2025 09:16:49.550124884 CET	50272	23	192.168.2.23	149.250.162.251
Jan 23, 2025 09:16:49.550132990 CET	23	50272	13.136.13.227	192.168.2.23
Jan 23, 2025 09:16:49.550148010 CET	50272	23	192.168.2.23	222.181.10.174
Jan 23, 2025 09:16:49.550160885 CET	23	50272	75.244.254.162	192.168.2.23
Jan 23, 2025 09:16:49.550179005 CET	50272	23	192.168.2.23	13.136.13.227
Jan 23, 2025 09:16:49.550188065 CET	23	50272	84.42.71.219	192.168.2.23
Jan 23, 2025 09:16:49.550205946 CET	50272	23	192.168.2.23	75.244.254.162
Jan 23, 2025 09:16:49.550215006 CET	23	50272	83.15.59.67	192.168.2.23
Jan 23, 2025 09:16:49.550240993 CET	50272	23	192.168.2.23	84.42.71.219
Jan 23, 2025 09:16:49.550242901 CET	2323	50272	159.178.67.189	192.168.2.23
Jan 23, 2025 09:16:49.550271034 CET	23	50272	47.157.132.147	192.168.2.23
Jan 23, 2025 09:16:49.550271988 CET	50272	23	192.168.2.23	83.15.59.67
Jan 23, 2025 09:16:49.550292015 CET	50272	2323	192.168.2.23	159.178.67.189
Jan 23, 2025 09:16:49.550298929 CET	23	50272	205.179.41.228	192.168.2.23
Jan 23, 2025 09:16:49.550306082 CET	50272	23	192.168.2.23	47.157.132.147
Jan 23, 2025 09:16:49.550327063 CET	23	50272	78.196.14.68	192.168.2.23
Jan 23, 2025 09:16:49.550340891 CET	50272	23	192.168.2.23	205.179.41.228
Jan 23, 2025 09:16:49.550354958 CET	23	50272	202.4.193.193	192.168.2.23
Jan 23, 2025 09:16:49.550369978 CET	50272	23	192.168.2.23	78.196.14.68
Jan 23, 2025 09:16:49.550381899 CET	23	50272	212.84.68.219	192.168.2.23
Jan 23, 2025 09:16:49.550409079 CET	2323	50272	141.112.145.91	192.168.2.23
Jan 23, 2025 09:16:49.550409079 CET	50272	23	192.168.2.23	202.4.193.193
Jan 23, 2025 09:16:49.550436020 CET	23	50272	116.150.151.155	192.168.2.23
Jan 23, 2025 09:16:49.550436974 CET	50272	23	192.168.2.23	212.84.68.219
Jan 23, 2025 09:16:49.550451994 CET	50272	2323	192.168.2.23	141.112.145.91
Jan 23, 2025 09:16:49.550465107 CET	23	50272	146.141.107.68	192.168.2.23
Jan 23, 2025 09:16:49.550477028 CET	50272	23	192.168.2.23	116.150.151.155
Jan 23, 2025 09:16:49.550493956 CET	23	50272	118.5.226.231	192.168.2.23
Jan 23, 2025 09:16:49.550513029 CET	50272	23	192.168.2.23	146.141.107.68
Jan 23, 2025 09:16:49.550520897 CET	23	50272	35.92.205.16	192.168.2.23
Jan 23, 2025 09:16:49.550532103 CET	50272	23	192.168.2.23	118.5.226.231
Jan 23, 2025 09:16:49.550549030 CET	23	50272	184.127.30.54	192.168.2.23
Jan 23, 2025 09:16:49.550575972 CET	23	50272	153.74.202.50	192.168.2.23
Jan 23, 2025 09:16:49.550578117 CET	50272	23	192.168.2.23	35.92.205.16
Jan 23, 2025 09:16:49.550604105 CET	23	50272	8.72.139.90	192.168.2.23
Jan 23, 2025 09:16:49.550632954 CET	23	50272	193.23.24.148	192.168.2.23
Jan 23, 2025 09:16:49.550632954 CET	50272	23	192.168.2.23	184.127.30.54
Jan 23, 2025 09:16:49.550636053 CET	50272	23	192.168.2.23	153.74.202.50
Jan 23, 2025 09:16:49.550647020 CET	50272	23	192.168.2.23	8.72.139.90
Jan 23, 2025 09:16:49.550662994 CET	23	50272	202.132.44.241	192.168.2.23
Jan 23, 2025 09:16:49.550683022 CET	50272	23	192.168.2.23	193.23.24.148
Jan 23, 2025 09:16:49.550709963 CET	50272	23	192.168.2.23	202.132.44.241
Jan 23, 2025 09:16:49.550718069 CET	23	50272	97.242.191.3	192.168.2.23
Jan 23, 2025 09:16:49.550746918 CET	2323	50272	46.219.144.159	192.168.2.23
Jan 23, 2025 09:16:49.550754070 CET	50272	23	192.168.2.23	97.242.191.3
Jan 23, 2025 09:16:49.550774097 CET	23	50272	27.100.14.39	192.168.2.23
Jan 23, 2025 09:16:49.550797939 CET	50272	2323	192.168.2.23	46.219.144.159
Jan 23, 2025 09:16:49.550801992 CET	23	50272	81.140.62.151	192.168.2.23
Jan 23, 2025 09:16:49.550813913 CET	50272	23	192.168.2.23	27.100.14.39
Jan 23, 2025 09:16:49.550829887 CET	23	50272	62.114.246.97	192.168.2.23
Jan 23, 2025 09:16:49.550846100 CET	50272	23	192.168.2.23	81.140.62.151
Jan 23, 2025 09:16:49.550856113 CET	23	50272	80.189.50.93	192.168.2.23
Jan 23, 2025 09:16:49.550873995 CET	50272	23	192.168.2.23	62.114.246.97
Jan 23, 2025 09:16:49.550884008 CET	23	50272	53.147.156.76	192.168.2.23
Jan 23, 2025 09:16:49.550910950 CET	23	50272	210.155.231.129	192.168.2.23
Jan 23, 2025 09:16:49.550937891 CET	23	50272	156.85.129.24	192.168.2.23
Jan 23, 2025 09:16:49.550947905 CET	50272	23	192.168.2.23	210.155.231.129
Jan 23, 2025 09:16:49.550962925 CET	50272	23	192.168.2.23	80.189.50.93
Jan 23, 2025 09:16:49.550962925 CET	50272	23	192.168.2.23	53.147.156.76
Jan 23, 2025 09:16:49.550966978 CET	23	50272	51.4.35.95	192.168.2.23
Jan 23, 2025 09:16:49.550992012 CET	50272	23	192.168.2.23	156.85.129.24
Jan 23, 2025 09:16:49.550993919 CET	23	50272	193.39.127.75	192.168.2.23
Jan 23, 2025 09:16:49.551009893 CET	50272	23	192.168.2.23	51.4.35.95
Jan 23, 2025 09:16:49.551023006 CET	2323	58032	196.141.189.118	192.168.2.23
Jan 23, 2025 09:16:49.551033020 CET	50272	23	192.168.2.23	193.39.127.75
Jan 23, 2025 09:16:49.551081896 CET	58032	2323	192.168.2.23	196.141.189.118
Jan 23, 2025 09:16:49.555145025 CET	39056	23	192.168.2.23	211.195.85.118
Jan 23, 2025 09:16:49.557343960 CET	23	52076	97.186.231.114	192.168.2.23
Jan 23, 2025 09:16:49.557385921 CET	52076	23	192.168.2.23	97.186.231.114
Jan 23, 2025 09:16:49.560444117 CET	23	39056	211.195.85.118	192.168.2.23
Jan 23, 2025 09:16:49.560492039 CET	39056	23	192.168.2.23	211.195.85.118
Jan 23, 2025 09:16:49.562045097 CET	56360	23	192.168.2.23	48.18.12.117
Jan 23, 2025 09:16:49.566864014 CET	23	56360	48.18.12.117	192.168.2.23
Jan 23, 2025 09:16:49.566915989 CET	56360	23	192.168.2.23	48.18.12.117
Jan 23, 2025 09:16:49.569941998 CET	57832	23	192.168.2.23	200.171.149.173
Jan 23, 2025 09:16:49.574829102 CET	23	57832	200.171.149.173	192.168.2.23
Jan 23, 2025 09:16:49.574894905 CET	57832	23	192.168.2.23	200.171.149.173
Jan 23, 2025 09:16:49.580782890 CET	57838	23	192.168.2.23	197.172.253.241
Jan 23, 2025 09:16:49.585772991 CET	23	57838	197.172.253.241	192.168.2.23
Jan 23, 2025 09:16:49.585998058 CET	57838	23	192.168.2.23	197.172.253.241
Jan 23, 2025 09:16:49.594851017 CET	49570	23	192.168.2.23	206.31.17.34
Jan 23, 2025 09:16:49.599792957 CET	23	49570	206.31.17.34	192.168.2.23
Jan 23, 2025 09:16:49.599853992 CET	49570	23	192.168.2.23	206.31.17.34
Jan 23, 2025 09:16:49.609981060 CET	51682	23	192.168.2.23	88.102.244.6
Jan 23, 2025 09:16:49.614877939 CET	23	51682	88.102.244.6	192.168.2.23
Jan 23, 2025 09:16:49.614950895 CET	51682	23	192.168.2.23	88.102.244.6
Jan 23, 2025 09:16:49.620351076 CET	39618	23	192.168.2.23	93.183.69.95
Jan 23, 2025 09:16:49.625250101 CET	23	39618	93.183.69.95	192.168.2.23
Jan 23, 2025 09:16:49.625303030 CET	39618	23	192.168.2.23	93.183.69.95
Jan 23, 2025 09:16:49.628429890 CET	41452	2323	192.168.2.23	143.2.43.122
Jan 23, 2025 09:16:49.633294106 CET	2323	41452	143.2.43.122	192.168.2.23
Jan 23, 2025 09:16:49.633339882 CET	41452	2323	192.168.2.23	143.2.43.122
Jan 23, 2025 09:16:49.636545897 CET	52058	23	192.168.2.23	72.200.82.66
Jan 23, 2025 09:16:49.641426086 CET	23	52058	72.200.82.66	192.168.2.23
Jan 23, 2025 09:16:49.641478062 CET	52058	23	192.168.2.23	72.200.82.66
Jan 23, 2025 09:16:49.643548012 CET	40112	23	192.168.2.23	94.245.17.145
Jan 23, 2025 09:16:49.648358107 CET	23	40112	94.245.17.145	192.168.2.23
Jan 23, 2025 09:16:49.648402929 CET	40112	23	192.168.2.23	94.245.17.145
Jan 23, 2025 09:16:49.651210070 CET	60372	23	192.168.2.23	64.58.178.135
Jan 23, 2025 09:16:49.656033039 CET	23	60372	64.58.178.135	192.168.2.23
Jan 23, 2025 09:16:49.656095982 CET	60372	23	192.168.2.23	64.58.178.135
Jan 23, 2025 09:16:49.658482075 CET	47616	23	192.168.2.23	45.102.176.42
Jan 23, 2025 09:16:49.663357973 CET	23	47616	45.102.176.42	192.168.2.23
Jan 23, 2025 09:16:49.663408041 CET	47616	23	192.168.2.23	45.102.176.42
Jan 23, 2025 09:16:49.668266058 CET	50588	23	192.168.2.23	187.201.17.218
Jan 23, 2025 09:16:49.673083067 CET	23	50588	187.201.17.218	192.168.2.23
Jan 23, 2025 09:16:49.673302889 CET	50588	23	192.168.2.23	187.201.17.218
Jan 23, 2025 09:16:49.675821066 CET	32806	23	192.168.2.23	125.61.105.63
Jan 23, 2025 09:16:49.680711985 CET	23	32806	125.61.105.63	192.168.2.23
Jan 23, 2025 09:16:49.680762053 CET	32806	23	192.168.2.23	125.61.105.63
Jan 23, 2025 09:16:49.684184074 CET	60362	23	192.168.2.23	99.227.235.32
Jan 23, 2025 09:16:49.689023018 CET	23	60362	99.227.235.32	192.168.2.23
Jan 23, 2025 09:16:49.689064026 CET	60362	23	192.168.2.23	99.227.235.32
Jan 23, 2025 09:16:49.692507982 CET	48868	2323	192.168.2.23	212.156.20.233
Jan 23, 2025 09:16:49.697379112 CET	2323	48868	212.156.20.233	192.168.2.23
Jan 23, 2025 09:16:49.697463036 CET	48868	2323	192.168.2.23	212.156.20.233
Jan 23, 2025 09:16:49.701226950 CET	53218	23	192.168.2.23	161.12.196.244
Jan 23, 2025 09:16:49.706131935 CET	23	53218	161.12.196.244	192.168.2.23
Jan 23, 2025 09:16:49.707675934 CET	53218	23	192.168.2.23	161.12.196.244
Jan 23, 2025 09:16:49.717600107 CET	40872	23	192.168.2.23	96.185.164.155
Jan 23, 2025 09:16:49.722477913 CET	23	40872	96.185.164.155	192.168.2.23
Jan 23, 2025 09:16:49.722538948 CET	40872	23	192.168.2.23	96.185.164.155
Jan 23, 2025 09:16:49.727221012 CET	37854	23	192.168.2.23	98.78.158.48
Jan 23, 2025 09:16:49.732137918 CET	23	37854	98.78.158.48	192.168.2.23
Jan 23, 2025 09:16:49.732192039 CET	37854	23	192.168.2.23	98.78.158.48
Jan 23, 2025 09:16:49.737976074 CET	55154	23	192.168.2.23	125.77.231.210
Jan 23, 2025 09:16:49.742834091 CET	23	55154	125.77.231.210	192.168.2.23
Jan 23, 2025 09:16:49.742891073 CET	55154	23	192.168.2.23	125.77.231.210
Jan 23, 2025 09:16:49.746965885 CET	33638	23	192.168.2.23	177.51.54.140
Jan 23, 2025 09:16:49.751827955 CET	23	33638	177.51.54.140	192.168.2.23
Jan 23, 2025 09:16:49.751879930 CET	33638	23	192.168.2.23	177.51.54.140
Jan 23, 2025 09:16:49.755505085 CET	40290	23	192.168.2.23	107.55.131.162
Jan 23, 2025 09:16:49.760346889 CET	23	40290	107.55.131.162	192.168.2.23
Jan 23, 2025 09:16:49.760390043 CET	40290	23	192.168.2.23	107.55.131.162
Jan 23, 2025 09:16:49.766805887 CET	49314	23	192.168.2.23	59.185.227.66
Jan 23, 2025 09:16:49.771723032 CET	23	49314	59.185.227.66	192.168.2.23
Jan 23, 2025 09:16:49.771771908 CET	49314	23	192.168.2.23	59.185.227.66
Jan 23, 2025 09:16:49.776874065 CET	40348	23	192.168.2.23	185.43.6.116
Jan 23, 2025 09:16:49.781723976 CET	23	40348	185.43.6.116	192.168.2.23
Jan 23, 2025 09:16:49.781765938 CET	40348	23	192.168.2.23	185.43.6.116
Jan 23, 2025 09:16:49.789886951 CET	43186	23	192.168.2.23	136.110.250.16
Jan 23, 2025 09:16:49.794774055 CET	23	43186	136.110.250.16	192.168.2.23
Jan 23, 2025 09:16:49.794836044 CET	43186	23	192.168.2.23	136.110.250.16
Jan 23, 2025 09:16:49.801315069 CET	34394	23	192.168.2.23	100.168.84.229
Jan 23, 2025 09:16:49.806195021 CET	23	34394	100.168.84.229	192.168.2.23
Jan 23, 2025 09:16:49.806257010 CET	34394	23	192.168.2.23	100.168.84.229
Jan 23, 2025 09:16:49.810337067 CET	39220	23	192.168.2.23	109.160.208.5
Jan 23, 2025 09:16:49.815182924 CET	23	39220	109.160.208.5	192.168.2.23
Jan 23, 2025 09:16:49.815229893 CET	39220	23	192.168.2.23	109.160.208.5
Jan 23, 2025 09:16:49.818737030 CET	50314	23	192.168.2.23	150.207.182.54
Jan 23, 2025 09:16:49.823520899 CET	23	50314	150.207.182.54	192.168.2.23
Jan 23, 2025 09:16:49.823589087 CET	50314	23	192.168.2.23	150.207.182.54
Jan 23, 2025 09:16:49.826293945 CET	49808	2323	192.168.2.23	61.84.150.152
Jan 23, 2025 09:16:49.831154108 CET	2323	49808	61.84.150.152	192.168.2.23
Jan 23, 2025 09:16:49.831191063 CET	49808	2323	192.168.2.23	61.84.150.152
Jan 23, 2025 09:16:49.832773924 CET	45838	23	192.168.2.23	145.148.180.100
Jan 23, 2025 09:16:49.837562084 CET	23	45838	145.148.180.100	192.168.2.23
Jan 23, 2025 09:16:49.837604046 CET	45838	23	192.168.2.23	145.148.180.100
Jan 23, 2025 09:16:49.839575052 CET	43408	23	192.168.2.23	142.244.58.124
Jan 23, 2025 09:16:49.844469070 CET	23	43408	142.244.58.124	192.168.2.23
Jan 23, 2025 09:16:49.844528913 CET	43408	23	192.168.2.23	142.244.58.124
Jan 23, 2025 09:16:49.846523046 CET	33774	23	192.168.2.23	65.238.238.169
Jan 23, 2025 09:16:49.851455927 CET	23	33774	65.238.238.169	192.168.2.23
Jan 23, 2025 09:16:49.851511955 CET	33774	23	192.168.2.23	65.238.238.169
Jan 23, 2025 09:16:49.854269028 CET	52716	23	192.168.2.23	17.93.63.111
Jan 23, 2025 09:16:49.859106064 CET	23	52716	17.93.63.111	192.168.2.23
Jan 23, 2025 09:16:49.859152079 CET	52716	23	192.168.2.23	17.93.63.111
Jan 23, 2025 09:16:49.861149073 CET	51560	23	192.168.2.23	68.121.179.77
Jan 23, 2025 09:16:49.865957022 CET	23	51560	68.121.179.77	192.168.2.23
Jan 23, 2025 09:16:49.866012096 CET	51560	23	192.168.2.23	68.121.179.77
Jan 23, 2025 09:16:49.867520094 CET	52986	23	192.168.2.23	208.190.194.185
Jan 23, 2025 09:16:49.872287035 CET	23	52986	208.190.194.185	192.168.2.23
Jan 23, 2025 09:16:49.872324944 CET	52986	23	192.168.2.23	208.190.194.185
Jan 23, 2025 09:16:49.875338078 CET	33602	23	192.168.2.23	116.216.55.163
Jan 23, 2025 09:16:49.880105019 CET	23	33602	116.216.55.163	192.168.2.23
Jan 23, 2025 09:16:49.880145073 CET	33602	23	192.168.2.23	116.216.55.163
Jan 23, 2025 09:16:49.883429050 CET	43642	23	192.168.2.23	99.123.180.10
Jan 23, 2025 09:16:49.888772964 CET	23	43642	99.123.180.10	192.168.2.23
Jan 23, 2025 09:16:49.888823986 CET	43642	23	192.168.2.23	99.123.180.10
Jan 23, 2025 09:16:49.889731884 CET	41508	23	192.168.2.23	69.158.114.117
Jan 23, 2025 09:16:49.895220041 CET	23	41508	69.158.114.117	192.168.2.23
Jan 23, 2025 09:16:49.895270109 CET	41508	23	192.168.2.23	69.158.114.117
Jan 23, 2025 09:16:49.896946907 CET	59018	2323	192.168.2.23	148.252.65.112
Jan 23, 2025 09:16:49.901779890 CET	2323	59018	148.252.65.112	192.168.2.23
Jan 23, 2025 09:16:49.901823997 CET	59018	2323	192.168.2.23	148.252.65.112
Jan 23, 2025 09:16:49.904253960 CET	37928	23	192.168.2.23	192.126.211.160
Jan 23, 2025 09:16:49.909156084 CET	23	37928	192.126.211.160	192.168.2.23
Jan 23, 2025 09:16:49.909198046 CET	37928	23	192.168.2.23	192.126.211.160
Jan 23, 2025 09:16:49.911767960 CET	34086	23	192.168.2.23	195.124.16.222
Jan 23, 2025 09:16:49.916521072 CET	23	34086	195.124.16.222	192.168.2.23
Jan 23, 2025 09:16:49.916568041 CET	34086	23	192.168.2.23	195.124.16.222
Jan 23, 2025 09:16:49.918649912 CET	38322	23	192.168.2.23	99.33.216.12
Jan 23, 2025 09:16:49.923549891 CET	23	38322	99.33.216.12	192.168.2.23
Jan 23, 2025 09:16:49.923599005 CET	38322	23	192.168.2.23	99.33.216.12
Jan 23, 2025 09:16:49.924830914 CET	36682	23	192.168.2.23	96.28.75.65
Jan 23, 2025 09:16:49.929709911 CET	23	36682	96.28.75.65	192.168.2.23
Jan 23, 2025 09:16:49.929763079 CET	36682	23	192.168.2.23	96.28.75.65
Jan 23, 2025 09:16:49.931875944 CET	37614	23	192.168.2.23	184.252.46.94
Jan 23, 2025 09:16:49.936742067 CET	23	37614	184.252.46.94	192.168.2.23
Jan 23, 2025 09:16:49.936789989 CET	37614	23	192.168.2.23	184.252.46.94
Jan 23, 2025 09:16:49.938299894 CET	44114	23	192.168.2.23	181.51.113.194
Jan 23, 2025 09:16:49.943227053 CET	23	44114	181.51.113.194	192.168.2.23
Jan 23, 2025 09:16:49.943280935 CET	44114	23	192.168.2.23	181.51.113.194
Jan 23, 2025 09:16:49.945167065 CET	47274	23	192.168.2.23	106.35.237.41
Jan 23, 2025 09:16:49.949999094 CET	23	47274	106.35.237.41	192.168.2.23
Jan 23, 2025 09:16:49.950053930 CET	47274	23	192.168.2.23	106.35.237.41
Jan 23, 2025 09:16:49.950603008 CET	44422	23	192.168.2.23	1.170.219.33
Jan 23, 2025 09:16:49.955436945 CET	23	44422	1.170.219.33	192.168.2.23
Jan 23, 2025 09:16:49.955481052 CET	44422	23	192.168.2.23	1.170.219.33
Jan 23, 2025 09:16:49.958539009 CET	39912	23	192.168.2.23	183.213.145.189
Jan 23, 2025 09:16:49.963371038 CET	23	39912	183.213.145.189	192.168.2.23
Jan 23, 2025 09:16:49.963423014 CET	39912	23	192.168.2.23	183.213.145.189
Jan 23, 2025 09:16:49.971918106 CET	33124	2323	192.168.2.23	166.2.208.55
Jan 23, 2025 09:16:49.978051901 CET	2323	33124	166.2.208.55	192.168.2.23
Jan 23, 2025 09:16:49.978106976 CET	33124	2323	192.168.2.23	166.2.208.55
Jan 23, 2025 09:16:49.980420113 CET	52992	23	192.168.2.23	40.243.50.78
Jan 23, 2025 09:16:49.985963106 CET	23	52992	40.243.50.78	192.168.2.23
Jan 23, 2025 09:16:49.986020088 CET	52992	23	192.168.2.23	40.243.50.78
Jan 23, 2025 09:16:49.988432884 CET	53992	23	192.168.2.23	159.159.29.92
Jan 23, 2025 09:16:49.994283915 CET	23	53992	159.159.29.92	192.168.2.23
Jan 23, 2025 09:16:49.994400978 CET	53992	23	192.168.2.23	159.159.29.92
Jan 23, 2025 09:16:50.005162001 CET	63645	49068	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:50.005259991 CET	49068	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.005260944 CET	49068	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.007921934 CET	45914	23	192.168.2.23	78.233.172.130
Jan 23, 2025 09:16:50.009540081 CET	49178	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.012721062 CET	23	45914	78.233.172.130	192.168.2.23
Jan 23, 2025 09:16:50.012769938 CET	45914	23	192.168.2.23	78.233.172.130
Jan 23, 2025 09:16:50.013616085 CET	48440	23	192.168.2.23	17.32.113.124
Jan 23, 2025 09:16:50.014385939 CET	63645	49178	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:50.014441013 CET	49178	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.018451929 CET	23	48440	17.32.113.124	192.168.2.23
Jan 23, 2025 09:16:50.018502951 CET	48440	23	192.168.2.23	17.32.113.124
Jan 23, 2025 09:16:50.023760080 CET	39024	23	192.168.2.23	166.214.203.255
Jan 23, 2025 09:16:50.027286053 CET	49178	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.028669119 CET	23	39024	166.214.203.255	192.168.2.23
Jan 23, 2025 09:16:50.028717041 CET	39024	23	192.168.2.23	166.214.203.255
Jan 23, 2025 09:16:50.032114029 CET	63645	49178	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:50.032165051 CET	49178	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.033315897 CET	45708	23	192.168.2.23	60.239.92.18
Jan 23, 2025 09:16:50.036983013 CET	63645	49178	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:50.038167953 CET	23	45708	60.239.92.18	192.168.2.23
Jan 23, 2025 09:16:50.038223028 CET	45708	23	192.168.2.23	60.239.92.18
Jan 23, 2025 09:16:50.047437906 CET	54498	23	192.168.2.23	161.117.166.26
Jan 23, 2025 09:16:50.052012920 CET	59552	23	192.168.2.23	2.217.90.203
Jan 23, 2025 09:16:50.052277088 CET	23	54498	161.117.166.26	192.168.2.23
Jan 23, 2025 09:16:50.052331924 CET	54498	23	192.168.2.23	161.117.166.26
Jan 23, 2025 09:16:50.056845903 CET	23	59552	2.217.90.203	192.168.2.23
Jan 23, 2025 09:16:50.056898117 CET	59552	23	192.168.2.23	2.217.90.203
Jan 23, 2025 09:16:50.057881117 CET	50020	23	192.168.2.23	136.114.209.125
Jan 23, 2025 09:16:50.062040091 CET	40486	2323	192.168.2.23	119.115.23.153
Jan 23, 2025 09:16:50.062712908 CET	23	50020	136.114.209.125	192.168.2.23
Jan 23, 2025 09:16:50.062757969 CET	50020	23	192.168.2.23	136.114.209.125
Jan 23, 2025 09:16:50.067461014 CET	2323	40486	119.115.23.153	192.168.2.23
Jan 23, 2025 09:16:50.067524910 CET	40486	2323	192.168.2.23	119.115.23.153
Jan 23, 2025 09:16:50.069320917 CET	48002	23	192.168.2.23	155.235.21.6
Jan 23, 2025 09:16:50.074353933 CET	23	48002	155.235.21.6	192.168.2.23
Jan 23, 2025 09:16:50.074403048 CET	48002	23	192.168.2.23	155.235.21.6
Jan 23, 2025 09:16:50.093964100 CET	43162	23	192.168.2.23	192.44.212.165
Jan 23, 2025 09:16:50.098638058 CET	43396	23	192.168.2.23	40.180.227.242
Jan 23, 2025 09:16:50.098844051 CET	23	43162	192.44.212.165	192.168.2.23
Jan 23, 2025 09:16:50.098891020 CET	43162	23	192.168.2.23	192.44.212.165
Jan 23, 2025 09:16:50.103435993 CET	23	43396	40.180.227.242	192.168.2.23
Jan 23, 2025 09:16:50.103473902 CET	43396	23	192.168.2.23	40.180.227.242
Jan 23, 2025 09:16:50.104749918 CET	56602	23	192.168.2.23	32.153.160.0
Jan 23, 2025 09:16:50.109529018 CET	23	56602	32.153.160.0	192.168.2.23
Jan 23, 2025 09:16:50.109572887 CET	56602	23	192.168.2.23	32.153.160.0
Jan 23, 2025 09:16:50.109920979 CET	34438	23	192.168.2.23	170.243.78.66
Jan 23, 2025 09:16:50.114826918 CET	23	34438	170.243.78.66	192.168.2.23
Jan 23, 2025 09:16:50.114876986 CET	34438	23	192.168.2.23	170.243.78.66
Jan 23, 2025 09:16:50.116025925 CET	46378	23	192.168.2.23	113.139.184.124
Jan 23, 2025 09:16:50.120874882 CET	23	46378	113.139.184.124	192.168.2.23
Jan 23, 2025 09:16:50.120930910 CET	46378	23	192.168.2.23	113.139.184.124
Jan 23, 2025 09:16:50.121210098 CET	39354	23	192.168.2.23	8.177.86.56
Jan 23, 2025 09:16:50.126008034 CET	23	39354	8.177.86.56	192.168.2.23
Jan 23, 2025 09:16:50.126054049 CET	39354	23	192.168.2.23	8.177.86.56
Jan 23, 2025 09:16:50.128928900 CET	55974	23	192.168.2.23	94.77.78.64
Jan 23, 2025 09:16:50.133780003 CET	23	55974	94.77.78.64	192.168.2.23
Jan 23, 2025 09:16:50.133822918 CET	55974	23	192.168.2.23	94.77.78.64
Jan 23, 2025 09:16:50.136467934 CET	42588	23	192.168.2.23	12.0.90.115
Jan 23, 2025 09:16:50.141375065 CET	23	42588	12.0.90.115	192.168.2.23
Jan 23, 2025 09:16:50.141428947 CET	42588	23	192.168.2.23	12.0.90.115
Jan 23, 2025 09:16:50.145689964 CET	48912	2323	192.168.2.23	164.175.186.39
Jan 23, 2025 09:16:50.150552988 CET	2323	48912	164.175.186.39	192.168.2.23
Jan 23, 2025 09:16:50.150616884 CET	48912	2323	192.168.2.23	164.175.186.39
Jan 23, 2025 09:16:50.157143116 CET	53554	23	192.168.2.23	92.180.178.145
Jan 23, 2025 09:16:50.162029982 CET	23	53554	92.180.178.145	192.168.2.23
Jan 23, 2025 09:16:50.162086010 CET	53554	23	192.168.2.23	92.180.178.145
Jan 23, 2025 09:16:50.167267084 CET	48054	23	192.168.2.23	182.147.1.134
Jan 23, 2025 09:16:50.172175884 CET	23	48054	182.147.1.134	192.168.2.23
Jan 23, 2025 09:16:50.172238111 CET	48054	23	192.168.2.23	182.147.1.134
Jan 23, 2025 09:16:50.174644947 CET	57262	23	192.168.2.23	72.80.235.126
Jan 23, 2025 09:16:50.179524899 CET	23	57262	72.80.235.126	192.168.2.23
Jan 23, 2025 09:16:50.179574013 CET	57262	23	192.168.2.23	72.80.235.126
Jan 23, 2025 09:16:50.184271097 CET	36334	23	192.168.2.23	71.225.94.90
Jan 23, 2025 09:16:50.189100981 CET	23	36334	71.225.94.90	192.168.2.23
Jan 23, 2025 09:16:50.189157009 CET	36334	23	192.168.2.23	71.225.94.90
Jan 23, 2025 09:16:50.191241980 CET	33116	23	192.168.2.23	108.165.254.216
Jan 23, 2025 09:16:50.196120977 CET	23	33116	108.165.254.216	192.168.2.23
Jan 23, 2025 09:16:50.196202040 CET	33116	23	192.168.2.23	108.165.254.216
Jan 23, 2025 09:16:50.199290037 CET	44728	23	192.168.2.23	41.136.32.37
Jan 23, 2025 09:16:50.204170942 CET	23	44728	41.136.32.37	192.168.2.23
Jan 23, 2025 09:16:50.204225063 CET	44728	23	192.168.2.23	41.136.32.37
Jan 23, 2025 09:16:50.205254078 CET	51512	23	192.168.2.23	27.62.70.131
Jan 23, 2025 09:16:50.210059881 CET	23	51512	27.62.70.131	192.168.2.23
Jan 23, 2025 09:16:50.210114956 CET	51512	23	192.168.2.23	27.62.70.131
Jan 23, 2025 09:16:50.213551044 CET	40404	23	192.168.2.23	101.15.84.149
Jan 23, 2025 09:16:50.218400955 CET	23	40404	101.15.84.149	192.168.2.23
Jan 23, 2025 09:16:50.218492985 CET	40404	23	192.168.2.23	101.15.84.149
Jan 23, 2025 09:16:50.234241009 CET	37442	2323	192.168.2.23	98.110.241.160
Jan 23, 2025 09:16:50.239083052 CET	2323	37442	98.110.241.160	192.168.2.23
Jan 23, 2025 09:16:50.239131927 CET	37442	2323	192.168.2.23	98.110.241.160
Jan 23, 2025 09:16:50.249708891 CET	59130	23	192.168.2.23	196.172.79.51
Jan 23, 2025 09:16:50.254513025 CET	23	59130	196.172.79.51	192.168.2.23
Jan 23, 2025 09:16:50.254573107 CET	59130	23	192.168.2.23	196.172.79.51
Jan 23, 2025 09:16:50.262629986 CET	34730	23	192.168.2.23	211.140.252.154
Jan 23, 2025 09:16:50.267524004 CET	23	34730	211.140.252.154	192.168.2.23
Jan 23, 2025 09:16:50.267585993 CET	34730	23	192.168.2.23	211.140.252.154
Jan 23, 2025 09:16:50.275573015 CET	32974	23	192.168.2.23	88.184.74.37
Jan 23, 2025 09:16:50.280421972 CET	23	32974	88.184.74.37	192.168.2.23
Jan 23, 2025 09:16:50.280495882 CET	32974	23	192.168.2.23	88.184.74.37
Jan 23, 2025 09:16:50.287683010 CET	57982	23	192.168.2.23	123.25.214.65
Jan 23, 2025 09:16:50.292633057 CET	23	57982	123.25.214.65	192.168.2.23
Jan 23, 2025 09:16:50.292690039 CET	57982	23	192.168.2.23	123.25.214.65
Jan 23, 2025 09:16:50.300931931 CET	34266	23	192.168.2.23	71.158.129.125
Jan 23, 2025 09:16:50.305854082 CET	23	34266	71.158.129.125	192.168.2.23
Jan 23, 2025 09:16:50.305907965 CET	34266	23	192.168.2.23	71.158.129.125
Jan 23, 2025 09:16:50.312979937 CET	33802	23	192.168.2.23	96.125.72.38
Jan 23, 2025 09:16:50.317888975 CET	23	33802	96.125.72.38	192.168.2.23
Jan 23, 2025 09:16:50.317945957 CET	33802	23	192.168.2.23	96.125.72.38
Jan 23, 2025 09:16:50.323481083 CET	59732	23	192.168.2.23	18.191.255.15
Jan 23, 2025 09:16:50.328356981 CET	23	59732	18.191.255.15	192.168.2.23
Jan 23, 2025 09:16:50.328407049 CET	59732	23	192.168.2.23	18.191.255.15
Jan 23, 2025 09:16:50.335796118 CET	57522	23	192.168.2.23	40.240.52.92
Jan 23, 2025 09:16:50.340655088 CET	23	57522	40.240.52.92	192.168.2.23
Jan 23, 2025 09:16:50.340699911 CET	57522	23	192.168.2.23	40.240.52.92
Jan 23, 2025 09:16:50.347795010 CET	39016	23	192.168.2.23	84.59.39.203
Jan 23, 2025 09:16:50.352710009 CET	23	39016	84.59.39.203	192.168.2.23
Jan 23, 2025 09:16:50.352761984 CET	39016	23	192.168.2.23	84.59.39.203
Jan 23, 2025 09:16:50.356331110 CET	60930	2323	192.168.2.23	222.80.110.111
Jan 23, 2025 09:16:50.361210108 CET	2323	60930	222.80.110.111	192.168.2.23
Jan 23, 2025 09:16:50.361268044 CET	60930	2323	192.168.2.23	222.80.110.111
Jan 23, 2025 09:16:50.364401102 CET	41534	23	192.168.2.23	41.106.35.230
Jan 23, 2025 09:16:50.369276047 CET	23	41534	41.106.35.230	192.168.2.23
Jan 23, 2025 09:16:50.369328976 CET	41534	23	192.168.2.23	41.106.35.230
Jan 23, 2025 09:16:50.375025988 CET	33398	23	192.168.2.23	19.121.94.109
Jan 23, 2025 09:16:50.379949093 CET	23	33398	19.121.94.109	192.168.2.23
Jan 23, 2025 09:16:50.379996061 CET	33398	23	192.168.2.23	19.121.94.109
Jan 23, 2025 09:16:50.384156942 CET	40650	23	192.168.2.23	104.223.165.54
Jan 23, 2025 09:16:50.388969898 CET	23	40650	104.223.165.54	192.168.2.23
Jan 23, 2025 09:16:50.389019966 CET	40650	23	192.168.2.23	104.223.165.54
Jan 23, 2025 09:16:50.391649961 CET	43986	23	192.168.2.23	163.68.191.124
Jan 23, 2025 09:16:50.396514893 CET	23	43986	163.68.191.124	192.168.2.23
Jan 23, 2025 09:16:50.396564007 CET	43986	23	192.168.2.23	163.68.191.124
Jan 23, 2025 09:16:50.400290012 CET	53328	23	192.168.2.23	194.47.6.250
Jan 23, 2025 09:16:50.405159950 CET	23	53328	194.47.6.250	192.168.2.23
Jan 23, 2025 09:16:50.405208111 CET	53328	23	192.168.2.23	194.47.6.250
Jan 23, 2025 09:16:50.408559084 CET	42170	23	192.168.2.23	168.46.209.30
Jan 23, 2025 09:16:50.413454056 CET	23	42170	168.46.209.30	192.168.2.23
Jan 23, 2025 09:16:50.413505077 CET	42170	23	192.168.2.23	168.46.209.30
Jan 23, 2025 09:16:50.416416883 CET	45952	23	192.168.2.23	152.182.209.76
Jan 23, 2025 09:16:50.421262026 CET	23	45952	152.182.209.76	192.168.2.23
Jan 23, 2025 09:16:50.421308041 CET	45952	23	192.168.2.23	152.182.209.76
Jan 23, 2025 09:16:50.424149990 CET	33004	23	192.168.2.23	180.119.159.55
Jan 23, 2025 09:16:50.429007053 CET	23	33004	180.119.159.55	192.168.2.23
Jan 23, 2025 09:16:50.429054976 CET	33004	23	192.168.2.23	180.119.159.55
Jan 23, 2025 09:16:50.431884050 CET	47718	2323	192.168.2.23	107.122.40.63
Jan 23, 2025 09:16:50.436722994 CET	2323	47718	107.122.40.63	192.168.2.23
Jan 23, 2025 09:16:50.436770916 CET	47718	2323	192.168.2.23	107.122.40.63
Jan 23, 2025 09:16:50.439425945 CET	50272	2323	192.168.2.23	158.116.95.80
Jan 23, 2025 09:16:50.439444065 CET	50272	23	192.168.2.23	47.113.231.180
Jan 23, 2025 09:16:50.439445972 CET	50272	23	192.168.2.23	96.167.99.206
Jan 23, 2025 09:16:50.439449072 CET	50272	23	192.168.2.23	121.46.67.229
Jan 23, 2025 09:16:50.439466953 CET	50272	23	192.168.2.23	76.146.236.139
Jan 23, 2025 09:16:50.439485073 CET	50272	23	192.168.2.23	170.6.91.87
Jan 23, 2025 09:16:50.439485073 CET	50272	23	192.168.2.23	68.6.215.7
Jan 23, 2025 09:16:50.439486027 CET	50272	23	192.168.2.23	93.236.236.194
Jan 23, 2025 09:16:50.439500093 CET	50272	23	192.168.2.23	58.2.155.254
Jan 23, 2025 09:16:50.439503908 CET	50272	23	192.168.2.23	167.240.180.157
Jan 23, 2025 09:16:50.439512014 CET	50272	2323	192.168.2.23	181.75.111.114
Jan 23, 2025 09:16:50.439573050 CET	50272	23	192.168.2.23	181.230.127.83
Jan 23, 2025 09:16:50.439575911 CET	50272	23	192.168.2.23	186.112.60.225
Jan 23, 2025 09:16:50.439577103 CET	50272	23	192.168.2.23	19.30.209.254
Jan 23, 2025 09:16:50.439577103 CET	50272	23	192.168.2.23	93.209.228.32
Jan 23, 2025 09:16:50.439598083 CET	50272	23	192.168.2.23	103.115.218.182
Jan 23, 2025 09:16:50.439599037 CET	50272	23	192.168.2.23	91.227.237.125
Jan 23, 2025 09:16:50.439646959 CET	50272	23	192.168.2.23	74.41.54.242
Jan 23, 2025 09:16:50.439646959 CET	50272	23	192.168.2.23	200.32.78.87
Jan 23, 2025 09:16:50.439665079 CET	50272	2323	192.168.2.23	159.88.98.119
Jan 23, 2025 09:16:50.439666033 CET	50272	23	192.168.2.23	152.7.97.35
Jan 23, 2025 09:16:50.439691067 CET	50272	23	192.168.2.23	97.113.173.150
Jan 23, 2025 09:16:50.439692020 CET	50272	23	192.168.2.23	223.103.128.193
Jan 23, 2025 09:16:50.439718962 CET	50272	23	192.168.2.23	148.34.0.116
Jan 23, 2025 09:16:50.439719915 CET	50272	23	192.168.2.23	118.190.158.87
Jan 23, 2025 09:16:50.439732075 CET	50272	23	192.168.2.23	196.35.39.89
Jan 23, 2025 09:16:50.439734936 CET	50272	23	192.168.2.23	94.72.19.112
Jan 23, 2025 09:16:50.439755917 CET	50272	23	192.168.2.23	90.187.124.9
Jan 23, 2025 09:16:50.439800978 CET	50272	23	192.168.2.23	156.15.160.10
Jan 23, 2025 09:16:50.439801931 CET	50272	23	192.168.2.23	207.129.4.42
Jan 23, 2025 09:16:50.439816952 CET	50272	23	192.168.2.23	80.33.69.172
Jan 23, 2025 09:16:50.439817905 CET	50272	2323	192.168.2.23	213.184.255.242
Jan 23, 2025 09:16:50.439821005 CET	50272	23	192.168.2.23	123.70.244.222
Jan 23, 2025 09:16:50.439837933 CET	50272	23	192.168.2.23	168.101.12.239
Jan 23, 2025 09:16:50.439866066 CET	50272	23	192.168.2.23	219.15.27.81
Jan 23, 2025 09:16:50.439877033 CET	50272	23	192.168.2.23	107.240.225.37
Jan 23, 2025 09:16:50.439884901 CET	50272	23	192.168.2.23	12.120.30.131
Jan 23, 2025 09:16:50.439889908 CET	50272	23	192.168.2.23	84.185.131.193
Jan 23, 2025 09:16:50.439896107 CET	50272	23	192.168.2.23	216.190.191.45
Jan 23, 2025 09:16:50.439908028 CET	50272	2323	192.168.2.23	23.211.233.172
Jan 23, 2025 09:16:50.439908028 CET	50272	23	192.168.2.23	62.51.151.112
Jan 23, 2025 09:16:50.439908981 CET	50272	23	192.168.2.23	45.219.122.151
Jan 23, 2025 09:16:50.439924955 CET	50272	23	192.168.2.23	99.249.141.82
Jan 23, 2025 09:16:50.439925909 CET	50272	23	192.168.2.23	115.45.222.76
Jan 23, 2025 09:16:50.439960957 CET	50272	23	192.168.2.23	212.208.35.220
Jan 23, 2025 09:16:50.439961910 CET	50272	23	192.168.2.23	213.51.93.171
Jan 23, 2025 09:16:50.439996958 CET	50272	23	192.168.2.23	73.15.254.182
Jan 23, 2025 09:16:50.439996958 CET	50272	23	192.168.2.23	218.221.65.74
Jan 23, 2025 09:16:50.440007925 CET	50272	23	192.168.2.23	146.37.190.2
Jan 23, 2025 09:16:50.440017939 CET	50272	2323	192.168.2.23	222.239.241.43
Jan 23, 2025 09:16:50.440023899 CET	50272	23	192.168.2.23	212.243.42.50
Jan 23, 2025 09:16:50.440026045 CET	50272	23	192.168.2.23	191.236.80.200
Jan 23, 2025 09:16:50.440040112 CET	50272	23	192.168.2.23	193.156.171.57
Jan 23, 2025 09:16:50.440040112 CET	50272	23	192.168.2.23	73.122.225.78
Jan 23, 2025 09:16:50.440058947 CET	50272	23	192.168.2.23	203.98.27.75
Jan 23, 2025 09:16:50.440077066 CET	50272	23	192.168.2.23	100.202.174.181
Jan 23, 2025 09:16:50.440088034 CET	50272	23	192.168.2.23	219.246.33.150
Jan 23, 2025 09:16:50.440095901 CET	50272	23	192.168.2.23	213.146.119.80
Jan 23, 2025 09:16:50.440133095 CET	50272	23	192.168.2.23	79.8.236.11
Jan 23, 2025 09:16:50.440174103 CET	50272	23	192.168.2.23	210.92.37.171
Jan 23, 2025 09:16:50.440256119 CET	50272	2323	192.168.2.23	95.174.166.201
Jan 23, 2025 09:16:50.440280914 CET	50272	23	192.168.2.23	204.151.206.243
Jan 23, 2025 09:16:50.440298080 CET	50272	23	192.168.2.23	210.68.29.182
Jan 23, 2025 09:16:50.440299034 CET	50272	23	192.168.2.23	99.29.105.195
Jan 23, 2025 09:16:50.440299034 CET	50272	23	192.168.2.23	171.248.91.164
Jan 23, 2025 09:16:50.440330029 CET	50272	23	192.168.2.23	14.154.228.199
Jan 23, 2025 09:16:50.440330029 CET	50272	23	192.168.2.23	110.129.227.11
Jan 23, 2025 09:16:50.440342903 CET	50272	23	192.168.2.23	1.27.128.84
Jan 23, 2025 09:16:50.440356016 CET	50272	23	192.168.2.23	85.48.125.91
Jan 23, 2025 09:16:50.440359116 CET	50272	23	192.168.2.23	219.30.183.6
Jan 23, 2025 09:16:50.440360069 CET	50272	2323	192.168.2.23	110.179.176.180
Jan 23, 2025 09:16:50.440367937 CET	50272	23	192.168.2.23	188.82.221.130
Jan 23, 2025 09:16:50.440377951 CET	50272	23	192.168.2.23	188.183.82.192
Jan 23, 2025 09:16:50.440385103 CET	50272	23	192.168.2.23	205.123.200.25
Jan 23, 2025 09:16:50.440385103 CET	50272	23	192.168.2.23	154.196.233.239
Jan 23, 2025 09:16:50.440403938 CET	50272	23	192.168.2.23	110.189.210.205
Jan 23, 2025 09:16:50.440404892 CET	50272	23	192.168.2.23	171.72.199.139
Jan 23, 2025 09:16:50.440443993 CET	50272	23	192.168.2.23	71.113.81.203
Jan 23, 2025 09:16:50.440445900 CET	50272	23	192.168.2.23	87.241.28.12
Jan 23, 2025 09:16:50.440459013 CET	50272	23	192.168.2.23	98.104.150.156
Jan 23, 2025 09:16:50.440466881 CET	50272	23	192.168.2.23	184.185.252.165
Jan 23, 2025 09:16:50.440469980 CET	50272	23	192.168.2.23	101.197.183.227
Jan 23, 2025 09:16:50.440474987 CET	50272	2323	192.168.2.23	1.28.106.155
Jan 23, 2025 09:16:50.440500021 CET	50272	23	192.168.2.23	109.83.42.85
Jan 23, 2025 09:16:50.440504074 CET	50272	23	192.168.2.23	200.212.244.174
Jan 23, 2025 09:16:50.440504074 CET	50272	23	192.168.2.23	216.100.22.201
Jan 23, 2025 09:16:50.440504074 CET	50272	23	192.168.2.23	161.243.5.159
Jan 23, 2025 09:16:50.440506935 CET	50272	23	192.168.2.23	119.73.60.29
Jan 23, 2025 09:16:50.440522909 CET	50272	23	192.168.2.23	147.22.197.80
Jan 23, 2025 09:16:50.440524101 CET	50272	23	192.168.2.23	61.207.67.192
Jan 23, 2025 09:16:50.440524101 CET	50272	2323	192.168.2.23	20.245.83.110
Jan 23, 2025 09:16:50.440536976 CET	50272	23	192.168.2.23	165.141.33.250
Jan 23, 2025 09:16:50.440553904 CET	50272	23	192.168.2.23	69.242.25.49
Jan 23, 2025 09:16:50.440557957 CET	50272	23	192.168.2.23	63.123.250.202
Jan 23, 2025 09:16:50.440560102 CET	50272	23	192.168.2.23	111.210.19.102
Jan 23, 2025 09:16:50.440577984 CET	50272	23	192.168.2.23	147.27.201.19
Jan 23, 2025 09:16:50.440577984 CET	50272	23	192.168.2.23	183.252.100.223
Jan 23, 2025 09:16:50.440579891 CET	50272	23	192.168.2.23	83.181.252.71
Jan 23, 2025 09:16:50.440617085 CET	50272	23	192.168.2.23	5.5.178.31
Jan 23, 2025 09:16:50.440624952 CET	50272	23	192.168.2.23	219.80.167.200
Jan 23, 2025 09:16:50.440644026 CET	50272	23	192.168.2.23	61.11.186.92
Jan 23, 2025 09:16:50.440648079 CET	50272	23	192.168.2.23	170.10.248.181
Jan 23, 2025 09:16:50.440655947 CET	50272	23	192.168.2.23	189.106.150.58
Jan 23, 2025 09:16:50.440663099 CET	50272	23	192.168.2.23	195.191.50.105
Jan 23, 2025 09:16:50.440681934 CET	50272	2323	192.168.2.23	210.230.216.254
Jan 23, 2025 09:16:50.440689087 CET	50272	23	192.168.2.23	176.145.6.95
Jan 23, 2025 09:16:50.440689087 CET	50272	23	192.168.2.23	104.174.101.195
Jan 23, 2025 09:16:50.440690994 CET	50272	23	192.168.2.23	40.170.222.73
Jan 23, 2025 09:16:50.440701962 CET	50272	23	192.168.2.23	195.82.78.161
Jan 23, 2025 09:16:50.440720081 CET	50272	23	192.168.2.23	84.216.188.206
Jan 23, 2025 09:16:50.440735102 CET	50272	2323	192.168.2.23	178.200.155.233
Jan 23, 2025 09:16:50.440741062 CET	50272	23	192.168.2.23	156.88.174.192
Jan 23, 2025 09:16:50.440741062 CET	50272	23	192.168.2.23	18.167.132.79
Jan 23, 2025 09:16:50.440749884 CET	50272	23	192.168.2.23	179.166.184.146
Jan 23, 2025 09:16:50.440751076 CET	50272	23	192.168.2.23	122.40.152.198
Jan 23, 2025 09:16:50.440773010 CET	50272	23	192.168.2.23	133.139.172.41
Jan 23, 2025 09:16:50.440774918 CET	50272	23	192.168.2.23	139.210.165.183
Jan 23, 2025 09:16:50.440794945 CET	50272	23	192.168.2.23	59.129.53.124
Jan 23, 2025 09:16:50.440798044 CET	50272	2323	192.168.2.23	36.216.115.228
Jan 23, 2025 09:16:50.440798998 CET	50272	23	192.168.2.23	71.76.129.6
Jan 23, 2025 09:16:50.440798998 CET	50272	23	192.168.2.23	133.26.185.203
Jan 23, 2025 09:16:50.440798998 CET	50272	23	192.168.2.23	8.178.110.8
Jan 23, 2025 09:16:50.440814972 CET	50272	23	192.168.2.23	113.190.212.211
Jan 23, 2025 09:16:50.440814972 CET	50272	23	192.168.2.23	40.86.120.96
Jan 23, 2025 09:16:50.440831900 CET	50272	23	192.168.2.23	187.207.119.88
Jan 23, 2025 09:16:50.440831900 CET	50272	23	192.168.2.23	39.9.235.61
Jan 23, 2025 09:16:50.440840960 CET	50272	23	192.168.2.23	180.243.224.195
Jan 23, 2025 09:16:50.440841913 CET	50272	23	192.168.2.23	153.45.10.125
Jan 23, 2025 09:16:50.440855980 CET	50272	23	192.168.2.23	32.203.185.6
Jan 23, 2025 09:16:50.440865040 CET	50272	2323	192.168.2.23	164.38.8.134
Jan 23, 2025 09:16:50.440871000 CET	50272	23	192.168.2.23	59.75.81.237
Jan 23, 2025 09:16:50.440875053 CET	50272	23	192.168.2.23	70.196.138.184
Jan 23, 2025 09:16:50.440875053 CET	50272	23	192.168.2.23	184.31.23.201
Jan 23, 2025 09:16:50.440891981 CET	50272	23	192.168.2.23	119.43.242.48
Jan 23, 2025 09:16:50.440896988 CET	50272	23	192.168.2.23	17.138.68.236
Jan 23, 2025 09:16:50.440901041 CET	50272	23	192.168.2.23	68.202.105.110
Jan 23, 2025 09:16:50.440906048 CET	50272	23	192.168.2.23	72.248.208.23
Jan 23, 2025 09:16:50.440911055 CET	50272	23	192.168.2.23	42.154.39.74
Jan 23, 2025 09:16:50.440927029 CET	50272	23	192.168.2.23	101.96.29.237
Jan 23, 2025 09:16:50.440936089 CET	50272	23	192.168.2.23	118.234.107.19
Jan 23, 2025 09:16:50.440938950 CET	50272	2323	192.168.2.23	96.175.224.100
Jan 23, 2025 09:16:50.440948963 CET	50272	23	192.168.2.23	110.43.24.203
Jan 23, 2025 09:16:50.440948963 CET	50272	23	192.168.2.23	104.62.23.15
Jan 23, 2025 09:16:50.440968037 CET	50272	23	192.168.2.23	123.186.26.224
Jan 23, 2025 09:16:50.440973997 CET	50272	23	192.168.2.23	146.31.68.39
Jan 23, 2025 09:16:50.440982103 CET	50272	23	192.168.2.23	58.60.254.48
Jan 23, 2025 09:16:50.440990925 CET	50272	23	192.168.2.23	27.152.173.224
Jan 23, 2025 09:16:50.441011906 CET	50272	23	192.168.2.23	43.38.110.201
Jan 23, 2025 09:16:50.441013098 CET	50272	23	192.168.2.23	103.233.152.122
Jan 23, 2025 09:16:50.441015005 CET	50272	23	192.168.2.23	203.93.15.194
Jan 23, 2025 09:16:50.441015005 CET	50272	2323	192.168.2.23	154.52.153.86
Jan 23, 2025 09:16:50.441028118 CET	50272	23	192.168.2.23	74.139.178.54
Jan 23, 2025 09:16:50.441040039 CET	50272	23	192.168.2.23	48.165.226.202
Jan 23, 2025 09:16:50.441045046 CET	50272	23	192.168.2.23	70.65.12.255
Jan 23, 2025 09:16:50.441045046 CET	50272	23	192.168.2.23	210.36.229.124
Jan 23, 2025 09:16:50.441047907 CET	50272	23	192.168.2.23	177.177.25.57
Jan 23, 2025 09:16:50.441061020 CET	50272	23	192.168.2.23	168.75.237.109
Jan 23, 2025 09:16:50.441061974 CET	50272	23	192.168.2.23	206.193.96.205
Jan 23, 2025 09:16:50.441075087 CET	50272	23	192.168.2.23	179.38.161.16
Jan 23, 2025 09:16:50.441077948 CET	50272	23	192.168.2.23	79.37.37.176
Jan 23, 2025 09:16:50.444343090 CET	2323	50272	158.116.95.80	192.168.2.23
Jan 23, 2025 09:16:50.444375038 CET	23	50272	121.46.67.229	192.168.2.23
Jan 23, 2025 09:16:50.444397926 CET	50272	2323	192.168.2.23	158.116.95.80
Jan 23, 2025 09:16:50.444402933 CET	23	50272	96.167.99.206	192.168.2.23
Jan 23, 2025 09:16:50.444427967 CET	50272	23	192.168.2.23	121.46.67.229
Jan 23, 2025 09:16:50.444444895 CET	50272	23	192.168.2.23	96.167.99.206
Jan 23, 2025 09:16:50.444596052 CET	23	50272	47.113.231.180	192.168.2.23
Jan 23, 2025 09:16:50.444626093 CET	23	50272	170.6.91.87	192.168.2.23
Jan 23, 2025 09:16:50.444653034 CET	23	50272	93.236.236.194	192.168.2.23
Jan 23, 2025 09:16:50.444657087 CET	50272	23	192.168.2.23	47.113.231.180
Jan 23, 2025 09:16:50.444668055 CET	50272	23	192.168.2.23	170.6.91.87
Jan 23, 2025 09:16:50.444683075 CET	23	50272	76.146.236.139	192.168.2.23
Jan 23, 2025 09:16:50.444691896 CET	50272	23	192.168.2.23	93.236.236.194
Jan 23, 2025 09:16:50.444710970 CET	23	50272	68.6.215.7	192.168.2.23
Jan 23, 2025 09:16:50.444721937 CET	50272	23	192.168.2.23	76.146.236.139
Jan 23, 2025 09:16:50.444740057 CET	23	50272	58.2.155.254	192.168.2.23
Jan 23, 2025 09:16:50.444752932 CET	50272	23	192.168.2.23	68.6.215.7
Jan 23, 2025 09:16:50.444768906 CET	23	50272	167.240.180.157	192.168.2.23
Jan 23, 2025 09:16:50.444782019 CET	50272	23	192.168.2.23	58.2.155.254
Jan 23, 2025 09:16:50.444808006 CET	50272	23	192.168.2.23	167.240.180.157
Jan 23, 2025 09:16:50.444818020 CET	2323	50272	181.75.111.114	192.168.2.23
Jan 23, 2025 09:16:50.444847107 CET	23	50272	181.230.127.83	192.168.2.23
Jan 23, 2025 09:16:50.444859028 CET	50272	2323	192.168.2.23	181.75.111.114
Jan 23, 2025 09:16:50.444875002 CET	23	50272	186.112.60.225	192.168.2.23
Jan 23, 2025 09:16:50.444885969 CET	50272	23	192.168.2.23	181.230.127.83
Jan 23, 2025 09:16:50.444902897 CET	23	50272	93.209.228.32	192.168.2.23
Jan 23, 2025 09:16:50.444917917 CET	50272	23	192.168.2.23	186.112.60.225
Jan 23, 2025 09:16:50.444941044 CET	50272	23	192.168.2.23	93.209.228.32
Jan 23, 2025 09:16:50.445626974 CET	23	50272	19.30.209.254	192.168.2.23
Jan 23, 2025 09:16:50.445656061 CET	23	50272	103.115.218.182	192.168.2.23
Jan 23, 2025 09:16:50.445684910 CET	23	50272	91.227.237.125	192.168.2.23
Jan 23, 2025 09:16:50.445696115 CET	50272	23	192.168.2.23	103.115.218.182
Jan 23, 2025 09:16:50.445713043 CET	23	50272	74.41.54.242	192.168.2.23
Jan 23, 2025 09:16:50.445727110 CET	50272	23	192.168.2.23	91.227.237.125
Jan 23, 2025 09:16:50.445729971 CET	50272	23	192.168.2.23	19.30.209.254
Jan 23, 2025 09:16:50.445741892 CET	23	50272	152.7.97.35	192.168.2.23
Jan 23, 2025 09:16:50.445753098 CET	50272	23	192.168.2.23	74.41.54.242
Jan 23, 2025 09:16:50.445769072 CET	23	50272	200.32.78.87	192.168.2.23
Jan 23, 2025 09:16:50.445781946 CET	50272	23	192.168.2.23	152.7.97.35
Jan 23, 2025 09:16:50.445796967 CET	2323	50272	159.88.98.119	192.168.2.23
Jan 23, 2025 09:16:50.445816994 CET	50272	23	192.168.2.23	200.32.78.87
Jan 23, 2025 09:16:50.445823908 CET	23	50272	97.113.173.150	192.168.2.23
Jan 23, 2025 09:16:50.445836067 CET	50272	2323	192.168.2.23	159.88.98.119
Jan 23, 2025 09:16:50.445851088 CET	23	50272	223.103.128.193	192.168.2.23
Jan 23, 2025 09:16:50.445857048 CET	50272	23	192.168.2.23	97.113.173.150
Jan 23, 2025 09:16:50.445878029 CET	23	50272	148.34.0.116	192.168.2.23
Jan 23, 2025 09:16:50.445898056 CET	50272	23	192.168.2.23	223.103.128.193
Jan 23, 2025 09:16:50.445905924 CET	23	50272	196.35.39.89	192.168.2.23
Jan 23, 2025 09:16:50.445918083 CET	50272	23	192.168.2.23	148.34.0.116
Jan 23, 2025 09:16:50.445934057 CET	23	50272	118.190.158.87	192.168.2.23
Jan 23, 2025 09:16:50.445947886 CET	50272	23	192.168.2.23	196.35.39.89
Jan 23, 2025 09:16:50.445976019 CET	50272	23	192.168.2.23	118.190.158.87
Jan 23, 2025 09:16:50.445979118 CET	23	50272	94.72.19.112	192.168.2.23
Jan 23, 2025 09:16:50.446007967 CET	23	50272	90.187.124.9	192.168.2.23
Jan 23, 2025 09:16:50.446019888 CET	50272	23	192.168.2.23	94.72.19.112
Jan 23, 2025 09:16:50.446036100 CET	23	50272	156.15.160.10	192.168.2.23
Jan 23, 2025 09:16:50.446049929 CET	50272	23	192.168.2.23	90.187.124.9
Jan 23, 2025 09:16:50.446063042 CET	23	50272	207.129.4.42	192.168.2.23
Jan 23, 2025 09:16:50.446074009 CET	50272	23	192.168.2.23	156.15.160.10
Jan 23, 2025 09:16:50.446090937 CET	23	50272	80.33.69.172	192.168.2.23
Jan 23, 2025 09:16:50.446103096 CET	50272	23	192.168.2.23	207.129.4.42
Jan 23, 2025 09:16:50.446118116 CET	2323	50272	213.184.255.242	192.168.2.23
Jan 23, 2025 09:16:50.446126938 CET	50272	23	192.168.2.23	80.33.69.172
Jan 23, 2025 09:16:50.446146011 CET	23	50272	123.70.244.222	192.168.2.23
Jan 23, 2025 09:16:50.446155071 CET	50272	2323	192.168.2.23	213.184.255.242
Jan 23, 2025 09:16:50.446173906 CET	23	50272	168.101.12.239	192.168.2.23
Jan 23, 2025 09:16:50.446185112 CET	50272	23	192.168.2.23	123.70.244.222
Jan 23, 2025 09:16:50.446201086 CET	23	50272	219.15.27.81	192.168.2.23
Jan 23, 2025 09:16:50.446216106 CET	50272	23	192.168.2.23	168.101.12.239
Jan 23, 2025 09:16:50.446228981 CET	23	50272	107.240.225.37	192.168.2.23
Jan 23, 2025 09:16:50.446239948 CET	50272	23	192.168.2.23	219.15.27.81
Jan 23, 2025 09:16:50.446269035 CET	50272	23	192.168.2.23	107.240.225.37
Jan 23, 2025 09:16:50.446278095 CET	23	50272	84.185.131.193	192.168.2.23
Jan 23, 2025 09:16:50.446310997 CET	23	50272	12.120.30.131	192.168.2.23
Jan 23, 2025 09:16:50.446321011 CET	50272	23	192.168.2.23	84.185.131.193
Jan 23, 2025 09:16:50.446338892 CET	23	50272	216.190.191.45	192.168.2.23
Jan 23, 2025 09:16:50.446356058 CET	50272	23	192.168.2.23	12.120.30.131
Jan 23, 2025 09:16:50.446366072 CET	2323	50272	23.211.233.172	192.168.2.23
Jan 23, 2025 09:16:50.446371078 CET	50272	23	192.168.2.23	216.190.191.45
Jan 23, 2025 09:16:50.446393013 CET	23	50272	45.219.122.151	192.168.2.23
Jan 23, 2025 09:16:50.446408033 CET	50272	2323	192.168.2.23	23.211.233.172
Jan 23, 2025 09:16:50.446419001 CET	23	50272	62.51.151.112	192.168.2.23
Jan 23, 2025 09:16:50.446439028 CET	50272	23	192.168.2.23	45.219.122.151
Jan 23, 2025 09:16:50.446445942 CET	23	50272	99.249.141.82	192.168.2.23
Jan 23, 2025 09:16:50.446466923 CET	50272	23	192.168.2.23	62.51.151.112
Jan 23, 2025 09:16:50.446472883 CET	23	50272	115.45.222.76	192.168.2.23
Jan 23, 2025 09:16:50.446477890 CET	50272	23	192.168.2.23	99.249.141.82
Jan 23, 2025 09:16:50.446501017 CET	23	50272	213.51.93.171	192.168.2.23
Jan 23, 2025 09:16:50.446510077 CET	50272	23	192.168.2.23	115.45.222.76
Jan 23, 2025 09:16:50.446527958 CET	23	50272	212.208.35.220	192.168.2.23
Jan 23, 2025 09:16:50.446541071 CET	50272	23	192.168.2.23	213.51.93.171
Jan 23, 2025 09:16:50.446556091 CET	23	50272	73.15.254.182	192.168.2.23
Jan 23, 2025 09:16:50.446578979 CET	50272	23	192.168.2.23	212.208.35.220
Jan 23, 2025 09:16:50.446583986 CET	23	50272	218.221.65.74	192.168.2.23
Jan 23, 2025 09:16:50.446594000 CET	50272	23	192.168.2.23	73.15.254.182
Jan 23, 2025 09:16:50.446611881 CET	23	50272	146.37.190.2	192.168.2.23
Jan 23, 2025 09:16:50.446626902 CET	50272	23	192.168.2.23	218.221.65.74
Jan 23, 2025 09:16:50.446640015 CET	2323	50272	222.239.241.43	192.168.2.23
Jan 23, 2025 09:16:50.446666956 CET	23	50272	212.243.42.50	192.168.2.23
Jan 23, 2025 09:16:50.446693897 CET	23	50272	191.236.80.200	192.168.2.23
Jan 23, 2025 09:16:50.446711063 CET	50272	23	192.168.2.23	212.243.42.50
Jan 23, 2025 09:16:50.446721077 CET	23	50272	193.156.171.57	192.168.2.23
Jan 23, 2025 09:16:50.446748018 CET	23	50272	73.122.225.78	192.168.2.23
Jan 23, 2025 09:16:50.446763039 CET	50272	23	192.168.2.23	193.156.171.57
Jan 23, 2025 09:16:50.446775913 CET	23	50272	203.98.27.75	192.168.2.23
Jan 23, 2025 09:16:50.446803093 CET	23	50272	100.202.174.181	192.168.2.23
Jan 23, 2025 09:16:50.446829081 CET	23	50272	219.246.33.150	192.168.2.23
Jan 23, 2025 09:16:50.446855068 CET	23	50272	213.146.119.80	192.168.2.23
Jan 23, 2025 09:16:50.446867943 CET	50272	23	192.168.2.23	219.246.33.150
Jan 23, 2025 09:16:50.446882963 CET	23	50272	79.8.236.11	192.168.2.23
Jan 23, 2025 09:16:50.446886063 CET	50272	2323	192.168.2.23	222.239.241.43
Jan 23, 2025 09:16:50.446887016 CET	50272	23	192.168.2.23	146.37.190.2
Jan 23, 2025 09:16:50.446887970 CET	50272	23	192.168.2.23	191.236.80.200
Jan 23, 2025 09:16:50.446892977 CET	50272	23	192.168.2.23	73.122.225.78
Jan 23, 2025 09:16:50.446908951 CET	50272	23	192.168.2.23	213.146.119.80
Jan 23, 2025 09:16:50.446908951 CET	50272	23	192.168.2.23	203.98.27.75
Jan 23, 2025 09:16:50.446913004 CET	50272	23	192.168.2.23	100.202.174.181
Jan 23, 2025 09:16:50.446924925 CET	50272	23	192.168.2.23	79.8.236.11
Jan 23, 2025 09:16:50.446932077 CET	23	50272	210.92.37.171	192.168.2.23
Jan 23, 2025 09:16:50.446966887 CET	50272	23	192.168.2.23	210.92.37.171
Jan 23, 2025 09:16:50.446968079 CET	2323	50272	95.174.166.201	192.168.2.23
Jan 23, 2025 09:16:50.446995020 CET	23	50272	204.151.206.243	192.168.2.23
Jan 23, 2025 09:16:50.447009087 CET	50272	2323	192.168.2.23	95.174.166.201
Jan 23, 2025 09:16:50.447022915 CET	23	50272	210.68.29.182	192.168.2.23
Jan 23, 2025 09:16:50.447037935 CET	50272	23	192.168.2.23	204.151.206.243
Jan 23, 2025 09:16:50.447050095 CET	23	50272	14.154.228.199	192.168.2.23
Jan 23, 2025 09:16:50.447057962 CET	50272	23	192.168.2.23	210.68.29.182
Jan 23, 2025 09:16:50.447076082 CET	23	50272	110.129.227.11	192.168.2.23
Jan 23, 2025 09:16:50.447088957 CET	50272	23	192.168.2.23	14.154.228.199
Jan 23, 2025 09:16:50.447103024 CET	23	50272	99.29.105.195	192.168.2.23
Jan 23, 2025 09:16:50.447118044 CET	50272	23	192.168.2.23	110.129.227.11
Jan 23, 2025 09:16:50.447129965 CET	23	50272	171.248.91.164	192.168.2.23
Jan 23, 2025 09:16:50.447154045 CET	50272	23	192.168.2.23	99.29.105.195
Jan 23, 2025 09:16:50.447156906 CET	23	50272	1.27.128.84	192.168.2.23
Jan 23, 2025 09:16:50.447177887 CET	50272	23	192.168.2.23	171.248.91.164
Jan 23, 2025 09:16:50.447185040 CET	23	50272	85.48.125.91	192.168.2.23
Jan 23, 2025 09:16:50.447190046 CET	50272	23	192.168.2.23	1.27.128.84
Jan 23, 2025 09:16:50.447211981 CET	2323	50272	110.179.176.180	192.168.2.23
Jan 23, 2025 09:16:50.447220087 CET	50272	23	192.168.2.23	85.48.125.91
Jan 23, 2025 09:16:50.447240114 CET	23	50272	219.30.183.6	192.168.2.23
Jan 23, 2025 09:16:50.447253942 CET	50272	2323	192.168.2.23	110.179.176.180
Jan 23, 2025 09:16:50.447268009 CET	23	50272	188.82.221.130	192.168.2.23
Jan 23, 2025 09:16:50.447278976 CET	50272	23	192.168.2.23	219.30.183.6
Jan 23, 2025 09:16:50.447297096 CET	23	50272	188.183.82.192	192.168.2.23
Jan 23, 2025 09:16:50.447305918 CET	50272	23	192.168.2.23	188.82.221.130
Jan 23, 2025 09:16:50.447340012 CET	50272	23	192.168.2.23	188.183.82.192
Jan 23, 2025 09:16:50.447344065 CET	23	50272	205.123.200.25	192.168.2.23
Jan 23, 2025 09:16:50.447371960 CET	23	50272	154.196.233.239	192.168.2.23
Jan 23, 2025 09:16:50.447384119 CET	50272	23	192.168.2.23	205.123.200.25
Jan 23, 2025 09:16:50.447400093 CET	23	50272	110.189.210.205	192.168.2.23
Jan 23, 2025 09:16:50.447407007 CET	50272	23	192.168.2.23	154.196.233.239
Jan 23, 2025 09:16:50.447428942 CET	23	50272	171.72.199.139	192.168.2.23
Jan 23, 2025 09:16:50.447437048 CET	50272	23	192.168.2.23	110.189.210.205
Jan 23, 2025 09:16:50.447457075 CET	23	50272	71.113.81.203	192.168.2.23
Jan 23, 2025 09:16:50.447484970 CET	23	50272	98.104.150.156	192.168.2.23
Jan 23, 2025 09:16:50.447493076 CET	50272	23	192.168.2.23	71.113.81.203
Jan 23, 2025 09:16:50.447511911 CET	23	50272	87.241.28.12	192.168.2.23
Jan 23, 2025 09:16:50.447520018 CET	50272	23	192.168.2.23	98.104.150.156
Jan 23, 2025 09:16:50.447539091 CET	23	50272	101.197.183.227	192.168.2.23
Jan 23, 2025 09:16:50.447549105 CET	50272	23	192.168.2.23	87.241.28.12
Jan 23, 2025 09:16:50.447566032 CET	23	50272	184.185.252.165	192.168.2.23
Jan 23, 2025 09:16:50.447573900 CET	50272	23	192.168.2.23	101.197.183.227
Jan 23, 2025 09:16:50.447596073 CET	50272	23	192.168.2.23	171.72.199.139
Jan 23, 2025 09:16:50.447596073 CET	2323	50272	1.28.106.155	192.168.2.23
Jan 23, 2025 09:16:50.447596073 CET	50272	23	192.168.2.23	184.185.252.165
Jan 23, 2025 09:16:50.447632074 CET	23	50272	109.83.42.85	192.168.2.23
Jan 23, 2025 09:16:50.447634935 CET	50272	2323	192.168.2.23	1.28.106.155
Jan 23, 2025 09:16:50.447666883 CET	23	50272	216.100.22.201	192.168.2.23
Jan 23, 2025 09:16:50.447675943 CET	50272	23	192.168.2.23	109.83.42.85
Jan 23, 2025 09:16:50.447694063 CET	23	50272	119.73.60.29	192.168.2.23
Jan 23, 2025 09:16:50.447705984 CET	50272	23	192.168.2.23	216.100.22.201
Jan 23, 2025 09:16:50.447721958 CET	23	50272	200.212.244.174	192.168.2.23
Jan 23, 2025 09:16:50.447750092 CET	23	50272	161.243.5.159	192.168.2.23
Jan 23, 2025 09:16:50.447765112 CET	50272	23	192.168.2.23	200.212.244.174
Jan 23, 2025 09:16:50.447768927 CET	50272	23	192.168.2.23	119.73.60.29
Jan 23, 2025 09:16:50.447839022 CET	23	50272	147.22.197.80	192.168.2.23
Jan 23, 2025 09:16:50.447846889 CET	50272	23	192.168.2.23	161.243.5.159
Jan 23, 2025 09:16:50.447866917 CET	23	50272	61.207.67.192	192.168.2.23
Jan 23, 2025 09:16:50.447880030 CET	50272	23	192.168.2.23	147.22.197.80
Jan 23, 2025 09:16:50.447896004 CET	2323	50272	20.245.83.110	192.168.2.23
Jan 23, 2025 09:16:50.447923899 CET	23	50272	165.141.33.250	192.168.2.23
Jan 23, 2025 09:16:50.447933912 CET	50272	23	192.168.2.23	61.207.67.192
Jan 23, 2025 09:16:50.447933912 CET	50272	2323	192.168.2.23	20.245.83.110
Jan 23, 2025 09:16:50.447952032 CET	23	50272	69.242.25.49	192.168.2.23
Jan 23, 2025 09:16:50.447962999 CET	50272	23	192.168.2.23	165.141.33.250
Jan 23, 2025 09:16:50.447981119 CET	23	50272	63.123.250.202	192.168.2.23
Jan 23, 2025 09:16:50.447988033 CET	50272	23	192.168.2.23	69.242.25.49
Jan 23, 2025 09:16:50.448009014 CET	23	50272	111.210.19.102	192.168.2.23
Jan 23, 2025 09:16:50.448016882 CET	50272	23	192.168.2.23	63.123.250.202
Jan 23, 2025 09:16:50.448035955 CET	23	50272	83.181.252.71	192.168.2.23
Jan 23, 2025 09:16:50.448046923 CET	50272	23	192.168.2.23	111.210.19.102
Jan 23, 2025 09:16:50.448065996 CET	23	50272	147.27.201.19	192.168.2.23
Jan 23, 2025 09:16:50.448091984 CET	50272	23	192.168.2.23	83.181.252.71
Jan 23, 2025 09:16:50.448092937 CET	23	50272	183.252.100.223	192.168.2.23
Jan 23, 2025 09:16:50.448102951 CET	50272	23	192.168.2.23	147.27.201.19
Jan 23, 2025 09:16:50.448120117 CET	23	50272	5.5.178.31	192.168.2.23
Jan 23, 2025 09:16:50.448128939 CET	50272	23	192.168.2.23	183.252.100.223
Jan 23, 2025 09:16:50.448148012 CET	23	50272	219.80.167.200	192.168.2.23
Jan 23, 2025 09:16:50.448157072 CET	50272	23	192.168.2.23	5.5.178.31
Jan 23, 2025 09:16:50.448174953 CET	23	50272	61.11.186.92	192.168.2.23
Jan 23, 2025 09:16:50.448184967 CET	50272	23	192.168.2.23	219.80.167.200
Jan 23, 2025 09:16:50.448201895 CET	23	50272	170.10.248.181	192.168.2.23
Jan 23, 2025 09:16:50.448210001 CET	50272	23	192.168.2.23	61.11.186.92
Jan 23, 2025 09:16:50.448230028 CET	23	50272	189.106.150.58	192.168.2.23
Jan 23, 2025 09:16:50.448254108 CET	50272	23	192.168.2.23	170.10.248.181
Jan 23, 2025 09:16:50.448256969 CET	23	50272	195.191.50.105	192.168.2.23
Jan 23, 2025 09:16:50.448265076 CET	50272	23	192.168.2.23	189.106.150.58
Jan 23, 2025 09:16:50.448283911 CET	2323	50272	210.230.216.254	192.168.2.23
Jan 23, 2025 09:16:50.448293924 CET	50272	23	192.168.2.23	195.191.50.105
Jan 23, 2025 09:16:50.448314905 CET	23	50272	40.170.222.73	192.168.2.23
Jan 23, 2025 09:16:50.448323965 CET	50272	2323	192.168.2.23	210.230.216.254
Jan 23, 2025 09:16:50.448350906 CET	23	50272	176.145.6.95	192.168.2.23
Jan 23, 2025 09:16:50.448352098 CET	50272	23	192.168.2.23	40.170.222.73
Jan 23, 2025 09:16:50.448379993 CET	23	50272	104.174.101.195	192.168.2.23
Jan 23, 2025 09:16:50.448390007 CET	50272	23	192.168.2.23	176.145.6.95
Jan 23, 2025 09:16:50.448406935 CET	23	50272	195.82.78.161	192.168.2.23
Jan 23, 2025 09:16:50.448421001 CET	50272	23	192.168.2.23	104.174.101.195
Jan 23, 2025 09:16:50.448436022 CET	23	50272	84.216.188.206	192.168.2.23
Jan 23, 2025 09:16:50.448445082 CET	50272	23	192.168.2.23	195.82.78.161
Jan 23, 2025 09:16:50.448463917 CET	2323	50272	178.200.155.233	192.168.2.23
Jan 23, 2025 09:16:50.448476076 CET	50272	23	192.168.2.23	84.216.188.206
Jan 23, 2025 09:16:50.448492050 CET	23	50272	156.88.174.192	192.168.2.23
Jan 23, 2025 09:16:50.448519945 CET	23	50272	18.167.132.79	192.168.2.23
Jan 23, 2025 09:16:50.448533058 CET	50272	23	192.168.2.23	156.88.174.192
Jan 23, 2025 09:16:50.448549032 CET	23	50272	179.166.184.146	192.168.2.23
Jan 23, 2025 09:16:50.448559999 CET	50272	23	192.168.2.23	18.167.132.79
Jan 23, 2025 09:16:50.448575974 CET	23	50272	122.40.152.198	192.168.2.23
Jan 23, 2025 09:16:50.448585033 CET	50272	23	192.168.2.23	179.166.184.146
Jan 23, 2025 09:16:50.448604107 CET	23	50272	133.139.172.41	192.168.2.23
Jan 23, 2025 09:16:50.448605061 CET	50272	2323	192.168.2.23	178.200.155.233
Jan 23, 2025 09:16:50.448632002 CET	23	50272	139.210.165.183	192.168.2.23
Jan 23, 2025 09:16:50.448642015 CET	50272	23	192.168.2.23	133.139.172.41
Jan 23, 2025 09:16:50.448657990 CET	50272	23	192.168.2.23	122.40.152.198
Jan 23, 2025 09:16:50.448658943 CET	23	50272	59.129.53.124	192.168.2.23
Jan 23, 2025 09:16:50.448678970 CET	50272	23	192.168.2.23	139.210.165.183
Jan 23, 2025 09:16:50.448685884 CET	2323	50272	36.216.115.228	192.168.2.23
Jan 23, 2025 09:16:50.448694944 CET	50272	23	192.168.2.23	59.129.53.124
Jan 23, 2025 09:16:50.448713064 CET	23	50272	71.76.129.6	192.168.2.23
Jan 23, 2025 09:16:50.448721886 CET	50272	2323	192.168.2.23	36.216.115.228
Jan 23, 2025 09:16:50.448740005 CET	23	50272	133.26.185.203	192.168.2.23
Jan 23, 2025 09:16:50.448750973 CET	50272	23	192.168.2.23	71.76.129.6
Jan 23, 2025 09:16:50.448766947 CET	23	50272	8.178.110.8	192.168.2.23
Jan 23, 2025 09:16:50.448793888 CET	23	50272	113.190.212.211	192.168.2.23
Jan 23, 2025 09:16:50.448802948 CET	50272	23	192.168.2.23	133.26.185.203
Jan 23, 2025 09:16:50.448802948 CET	50272	23	192.168.2.23	8.178.110.8
Jan 23, 2025 09:16:50.448821068 CET	23	50272	40.86.120.96	192.168.2.23
Jan 23, 2025 09:16:50.448848009 CET	23	50272	39.9.235.61	192.168.2.23
Jan 23, 2025 09:16:50.448856115 CET	50272	23	192.168.2.23	113.190.212.211
Jan 23, 2025 09:16:50.448856115 CET	50272	23	192.168.2.23	40.86.120.96
Jan 23, 2025 09:16:50.448874950 CET	23	50272	187.207.119.88	192.168.2.23
Jan 23, 2025 09:16:50.448885918 CET	50272	23	192.168.2.23	39.9.235.61
Jan 23, 2025 09:16:50.448901892 CET	23	50272	180.243.224.195	192.168.2.23
Jan 23, 2025 09:16:50.448909044 CET	50272	23	192.168.2.23	187.207.119.88
Jan 23, 2025 09:16:50.448929071 CET	23	50272	153.45.10.125	192.168.2.23
Jan 23, 2025 09:16:50.448945999 CET	50272	23	192.168.2.23	180.243.224.195
Jan 23, 2025 09:16:50.448960066 CET	23	50272	32.203.185.6	192.168.2.23
Jan 23, 2025 09:16:50.448966980 CET	50272	23	192.168.2.23	153.45.10.125
Jan 23, 2025 09:16:50.448996067 CET	2323	50272	164.38.8.134	192.168.2.23
Jan 23, 2025 09:16:50.448997021 CET	50272	23	192.168.2.23	32.203.185.6
Jan 23, 2025 09:16:50.449023008 CET	23	50272	59.75.81.237	192.168.2.23
Jan 23, 2025 09:16:50.449033022 CET	50272	2323	192.168.2.23	164.38.8.134
Jan 23, 2025 09:16:50.449049950 CET	23	50272	70.196.138.184	192.168.2.23
Jan 23, 2025 09:16:50.449059010 CET	50272	23	192.168.2.23	59.75.81.237
Jan 23, 2025 09:16:50.449076891 CET	23	50272	184.31.23.201	192.168.2.23
Jan 23, 2025 09:16:50.449090004 CET	50272	23	192.168.2.23	70.196.138.184
Jan 23, 2025 09:16:50.449104071 CET	23	50272	119.43.242.48	192.168.2.23
Jan 23, 2025 09:16:50.449126959 CET	50272	23	192.168.2.23	184.31.23.201
Jan 23, 2025 09:16:50.449131012 CET	23	50272	68.202.105.110	192.168.2.23
Jan 23, 2025 09:16:50.449139118 CET	50272	23	192.168.2.23	119.43.242.48
Jan 23, 2025 09:16:50.449158907 CET	23	50272	17.138.68.236	192.168.2.23
Jan 23, 2025 09:16:50.449167967 CET	50272	23	192.168.2.23	68.202.105.110
Jan 23, 2025 09:16:50.449186087 CET	23	50272	72.248.208.23	192.168.2.23
Jan 23, 2025 09:16:50.449193001 CET	50272	23	192.168.2.23	17.138.68.236
Jan 23, 2025 09:16:50.449213982 CET	23	50272	42.154.39.74	192.168.2.23
Jan 23, 2025 09:16:50.449225903 CET	50272	23	192.168.2.23	72.248.208.23
Jan 23, 2025 09:16:50.449240923 CET	23	50272	101.96.29.237	192.168.2.23
Jan 23, 2025 09:16:50.449249029 CET	50272	23	192.168.2.23	42.154.39.74
Jan 23, 2025 09:16:50.449268103 CET	23	50272	118.234.107.19	192.168.2.23
Jan 23, 2025 09:16:50.449275970 CET	50272	23	192.168.2.23	101.96.29.237
Jan 23, 2025 09:16:50.449296951 CET	2323	50272	96.175.224.100	192.168.2.23
Jan 23, 2025 09:16:50.449306965 CET	50272	23	192.168.2.23	118.234.107.19
Jan 23, 2025 09:16:50.449325085 CET	23	50272	110.43.24.203	192.168.2.23
Jan 23, 2025 09:16:50.449335098 CET	50272	2323	192.168.2.23	96.175.224.100
Jan 23, 2025 09:16:50.449352026 CET	23	50272	104.62.23.15	192.168.2.23
Jan 23, 2025 09:16:50.449366093 CET	50272	23	192.168.2.23	110.43.24.203
Jan 23, 2025 09:16:50.449379921 CET	23	50272	123.186.26.224	192.168.2.23
Jan 23, 2025 09:16:50.449388981 CET	50272	23	192.168.2.23	104.62.23.15
Jan 23, 2025 09:16:50.449407101 CET	23	50272	146.31.68.39	192.168.2.23
Jan 23, 2025 09:16:50.449418068 CET	50272	23	192.168.2.23	123.186.26.224
Jan 23, 2025 09:16:50.449435949 CET	23	50272	58.60.254.48	192.168.2.23
Jan 23, 2025 09:16:50.449445963 CET	50272	23	192.168.2.23	146.31.68.39
Jan 23, 2025 09:16:50.449462891 CET	23	50272	27.152.173.224	192.168.2.23
Jan 23, 2025 09:16:50.449475050 CET	50272	23	192.168.2.23	58.60.254.48
Jan 23, 2025 09:16:50.449491024 CET	23	50272	43.38.110.201	192.168.2.23
Jan 23, 2025 09:16:50.449501991 CET	50272	23	192.168.2.23	27.152.173.224
Jan 23, 2025 09:16:50.449512959 CET	50272	23	192.168.2.23	43.38.110.201
Jan 23, 2025 09:16:50.449517965 CET	23	50272	203.93.15.194	192.168.2.23
Jan 23, 2025 09:16:50.449546099 CET	2323	50272	154.52.153.86	192.168.2.23
Jan 23, 2025 09:16:50.449563026 CET	50272	23	192.168.2.23	203.93.15.194
Jan 23, 2025 09:16:50.449572086 CET	23	50272	103.233.152.122	192.168.2.23
Jan 23, 2025 09:16:50.449590921 CET	50272	2323	192.168.2.23	154.52.153.86
Jan 23, 2025 09:16:50.449603081 CET	23	50272	74.139.178.54	192.168.2.23
Jan 23, 2025 09:16:50.449611902 CET	50272	23	192.168.2.23	103.233.152.122
Jan 23, 2025 09:16:50.449635983 CET	23	50272	48.165.226.202	192.168.2.23
Jan 23, 2025 09:16:50.449640989 CET	50272	23	192.168.2.23	74.139.178.54
Jan 23, 2025 09:16:50.449664116 CET	23	50272	177.177.25.57	192.168.2.23
Jan 23, 2025 09:16:50.449675083 CET	50272	23	192.168.2.23	48.165.226.202
Jan 23, 2025 09:16:50.449692965 CET	23	50272	70.65.12.255	192.168.2.23
Jan 23, 2025 09:16:50.449701071 CET	50272	23	192.168.2.23	177.177.25.57
Jan 23, 2025 09:16:50.449718952 CET	23	50272	210.36.229.124	192.168.2.23
Jan 23, 2025 09:16:50.449738026 CET	50272	23	192.168.2.23	70.65.12.255
Jan 23, 2025 09:16:50.449747086 CET	23	50272	206.193.96.205	192.168.2.23
Jan 23, 2025 09:16:50.449754000 CET	50272	23	192.168.2.23	210.36.229.124
Jan 23, 2025 09:16:50.449773073 CET	23	50272	168.75.237.109	192.168.2.23
Jan 23, 2025 09:16:50.449781895 CET	50272	23	192.168.2.23	206.193.96.205
Jan 23, 2025 09:16:50.449800968 CET	23	50272	179.38.161.16	192.168.2.23
Jan 23, 2025 09:16:50.449809074 CET	50272	23	192.168.2.23	168.75.237.109
Jan 23, 2025 09:16:50.449827909 CET	23	50272	79.37.37.176	192.168.2.23
Jan 23, 2025 09:16:50.449836969 CET	50272	23	192.168.2.23	179.38.161.16
Jan 23, 2025 09:16:50.449863911 CET	50272	23	192.168.2.23	79.37.37.176
Jan 23, 2025 09:16:50.545172930 CET	33606	443	192.168.2.23	54.171.230.55
Jan 23, 2025 09:16:50.550492048 CET	443	33606	54.171.230.55	192.168.2.23
Jan 23, 2025 09:16:50.550554037 CET	33606	443	192.168.2.23	54.171.230.55
Jan 23, 2025 09:16:50.723634005 CET	63645	49178	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:50.723702908 CET	49178	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.723743916 CET	49178	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.727361917 CET	49272	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.732273102 CET	63645	49272	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:50.732321024 CET	49272	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.740783930 CET	49272	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.745672941 CET	63645	49272	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:50.745735884 CET	49272	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:50.750546932 CET	63645	49272	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:51.027990103 CET	49272	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:51.074456930 CET	63645	49272	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:51.217267036 CET	63645	49272	41.216.189.127	192.168.2.23
Jan 23, 2025 09:16:51.217582941 CET	49272	63645	192.168.2.23	41.216.189.127
Jan 23, 2025 09:16:51.359771013 CET	33004	23	192.168.2.23	180.119.159.55
Jan 23, 2025 09:16:51.359771013 CET	45952	23	192.168.2.23	152.182.209.76
Jan 23, 2025 09:16:51.359774113 CET	53328	23	192.168.2.23	194.47.6.250
Jan 23, 2025 09:16:51.359782934 CET	42170	23	192.168.2.23	168.46.209.30
Jan 23, 2025 09:16:51.359791040 CET	40650	23	192.168.2.23	104.223.165.54
Jan 23, 2025 09:16:51.359791040 CET	41534	23	192.168.2.23	41.106.35.230
Jan 23, 2025 09:16:51.359791040 CET	60930	2323	192.168.2.23	222.80.110.111
Jan 23, 2025 09:16:51.359802961 CET	39016	23	192.168.2.23	84.59.39.203
Jan 23, 2025 09:16:51.359812975 CET	43986	23	192.168.2.23	163.68.191.124
Jan 23, 2025 09:16:51.359812975 CET	57982	23	192.168.2.23	123.25.214.65
Jan 23, 2025 09:16:51.359812975 CET	33398	23	192.168.2.23	19.121.94.109
Jan 23, 2025 09:16:51.359818935 CET	32974	23	192.168.2.23	88.184.74.37
Jan 23, 2025 09:16:51.359812975 CET	57522	23	192.168.2.23	40.240.52.92
Jan 23, 2025 09:16:51.359812975 CET	34266	23	192.168.2.23	71.158.129.125
Jan 23, 2025 09:16:51.359838009 CET	59130	23	192.168.2.23	196.172.79.51
Jan 23, 2025 09:16:51.359862089 CET	47718	2323	192.168.2.23	107.122.40.63
Jan 23, 2025 09:16:51.359862089 CET	33116	23	192.168.2.23	108.165.254.216
Jan 23, 2025 09:16:51.359862089 CET	48912	2323	192.168.2.23	164.175.186.39
Jan 23, 2025 09:16:51.359864950 CET	36334	23	192.168.2.23	71.225.94.90
Jan 23, 2025 09:16:51.359869957 CET	59732	23	192.168.2.23	18.191.255.15
Jan 23, 2025 09:16:51.359869957 CET	33802	23	192.168.2.23	96.125.72.38
Jan 23, 2025 09:16:51.359869957 CET	34730	23	192.168.2.23	211.140.252.154
Jan 23, 2025 09:16:51.359869957 CET	57262	23	192.168.2.23	72.80.235.126
Jan 23, 2025 09:16:51.359869957 CET	53554	23	192.168.2.23	92.180.178.145
Jan 23, 2025 09:16:51.359889984 CET	39354	23	192.168.2.23	8.177.86.56
Jan 23, 2025 09:16:51.359889984 CET	37442	2323	192.168.2.23	98.110.241.160
Jan 23, 2025 09:16:51.359891891 CET	46378	23	192.168.2.23	113.139.184.124
Jan 23, 2025 09:16:51.359890938 CET	40404	23	192.168.2.23	101.15.84.149
Jan 23, 2025 09:16:51.359891891 CET	56602	23	192.168.2.23	32.153.160.0
Jan 23, 2025 09:16:51.359890938 CET	51512	23	192.168.2.23	27.62.70.131
Jan 23, 2025 09:16:51.359890938 CET	44728	23	192.168.2.23	41.136.32.37
Jan 23, 2025 09:16:51.359890938 CET	55974	23	192.168.2.23	94.77.78.64
Jan 23, 2025 09:16:51.359904051 CET	43396	23	192.168.2.23	40.180.227.242
Jan 23, 2025 09:16:51.359913111 CET	48054	23	192.168.2.23	182.147.1.134
Jan 23, 2025 09:16:51.359913111 CET	43162	23	192.168.2.23	192.44.212.165
Jan 23, 2025 09:16:51.359918118 CET	42588	23	192.168.2.23	12.0.90.115
Jan 23, 2025 09:16:51.359918118 CET	48002	23	192.168.2.23	155.235.21.6
Jan 23, 2025 09:16:51.359918118 CET	50020	23	192.168.2.23	136.114.209.125
Jan 23, 2025 09:16:51.359918118 CET	54498	23	192.168.2.23	161.117.166.26
Jan 23, 2025 09:16:51.359918118 CET	59552	23	192.168.2.23	2.217.90.203
Jan 23, 2025 09:16:51.359916925 CET	34438	23	192.168.2.23	170.243.78.66
Jan 23, 2025 09:16:51.359916925 CET	40486	2323	192.168.2.23	119.115.23.153
Jan 23, 2025 09:16:51.359937906 CET	48440	23	192.168.2.23	17.32.113.124
Jan 23, 2025 09:16:51.359942913 CET	39024	23	192.168.2.23	166.214.203.255
Jan 23, 2025 09:16:51.359946966 CET	45708	23	192.168.2.23	60.239.92.18
Jan 23, 2025 09:16:51.359949112 CET	53992	23	192.168.2.23	159.159.29.92
Jan 23, 2025 09:16:51.359961033 CET	45914	23	192.168.2.23	78.233.172.130
Jan 23, 2025 09:16:51.359961987 CET	52992	23	192.168.2.23	40.243.50.78
Jan 23, 2025 09:16:51.359961033 CET	33124	2323	192.168.2.23	166.2.208.55
Jan 23, 2025 09:16:51.360002041 CET	44422	23	192.168.2.23	1.170.219.33
Jan 23, 2025 09:16:51.359998941 CET	39912	23	192.168.2.23	183.213.145.189
Jan 23, 2025 09:16:51.360002041 CET	47274	23	192.168.2.23	106.35.237.41
Jan 23, 2025 09:16:51.360006094 CET	44114	23	192.168.2.23	181.51.113.194
Jan 23, 2025 09:16:51.360027075 CET	36682	23	192.168.2.23	96.28.75.65
Jan 23, 2025 09:16:51.360030890 CET	59018	2323	192.168.2.23	148.252.65.112
Jan 23, 2025 09:16:51.360033035 CET	37614	23	192.168.2.23	184.252.46.94
Jan 23, 2025 09:16:51.360033035 CET	37928	23	192.168.2.23	192.126.211.160
Jan 23, 2025 09:16:51.360034943 CET	34086	23	192.168.2.23	195.124.16.222
Jan 23, 2025 09:16:51.360039949 CET	38322	23	192.168.2.23	99.33.216.12
Jan 23, 2025 09:16:51.360039949 CET	41508	23	192.168.2.23	69.158.114.117
Jan 23, 2025 09:16:51.360039949 CET	43642	23	192.168.2.23	99.123.180.10
Jan 23, 2025 09:16:51.360050917 CET	33602	23	192.168.2.23	116.216.55.163
Jan 23, 2025 09:16:51.360050917 CET	52986	23	192.168.2.23	208.190.194.185
Jan 23, 2025 09:16:51.360059023 CET	52716	23	192.168.2.23	17.93.63.111
Jan 23, 2025 09:16:51.360068083 CET	51560	23	192.168.2.23	68.121.179.77
Jan 23, 2025 09:16:51.360068083 CET	43408	23	192.168.2.23	142.244.58.124
Jan 23, 2025 09:16:51.360070944 CET	33774	23	192.168.2.23	65.238.238.169
Jan 23, 2025 09:16:51.360070944 CET	45838	23	192.168.2.23	145.148.180.100
Jan 23, 2025 09:16:51.360080004 CET	49808	2323	192.168.2.23	61.84.150.152
Jan 23, 2025 09:16:51.360089064 CET	39220	23	192.168.2.23	109.160.208.5
Jan 23, 2025 09:16:51.360090971 CET	34394	23	192.168.2.23	100.168.84.229
Jan 23, 2025 09:16:51.360110044 CET	40348	23	192.168.2.23	185.43.6.116
Jan 23, 2025 09:16:51.360116005 CET	49314	23	192.168.2.23	59.185.227.66
Jan 23, 2025 09:16:51.360131979 CET	40290	23	192.168.2.23	107.55.131.162
Jan 23, 2025 09:16:51.360141039 CET	50314	23	192.168.2.23	150.207.182.54
Jan 23, 2025 09:16:51.360141039 CET	33638	23	192.168.2.23	177.51.54.140
Jan 23, 2025 09:16:51.360146046 CET	55154	23	192.168.2.23	125.77.231.210
Jan 23, 2025 09:16:51.360146999 CET	37854	23	192.168.2.23	98.78.158.48
Jan 23, 2025 09:16:51.360166073 CET	53218	23	192.168.2.23	161.12.196.244
Jan 23, 2025 09:16:51.360167980 CET	40872	23	192.168.2.23	96.185.164.155
Jan 23, 2025 09:16:51.360167980 CET	43186	23	192.168.2.23	136.110.250.16
Jan 23, 2025 09:16:51.360167980 CET	48868	2323	192.168.2.23	212.156.20.233
Jan 23, 2025 09:16:51.360177040 CET	60362	23	192.168.2.23	99.227.235.32
Jan 23, 2025 09:16:51.360184908 CET	32806	23	192.168.2.23	125.61.105.63
Jan 23, 2025 09:16:51.360187054 CET	47616	23	192.168.2.23	45.102.176.42
Jan 23, 2025 09:16:51.360191107 CET	60372	23	192.168.2.23	64.58.178.135
Jan 23, 2025 09:16:51.360197067 CET	52058	23	192.168.2.23	72.200.82.66
Jan 23, 2025 09:16:51.360198021 CET	41452	2323	192.168.2.23	143.2.43.122
Jan 23, 2025 09:16:51.360204935 CET	40112	23	192.168.2.23	94.245.17.145
Jan 23, 2025 09:16:51.360208035 CET	51682	23	192.168.2.23	88.102.244.6
Jan 23, 2025 09:16:51.360218048 CET	50588	23	192.168.2.23	187.201.17.218
Jan 23, 2025 09:16:51.360219955 CET	39618	23	192.168.2.23	93.183.69.95
Jan 23, 2025 09:16:51.360220909 CET	49570	23	192.168.2.23	206.31.17.34
Jan 23, 2025 09:16:51.360239983 CET	57838	23	192.168.2.23	197.172.253.241
Jan 23, 2025 09:16:51.360239983 CET	57832	23	192.168.2.23	200.171.149.173
Jan 23, 2025 09:16:51.360243082 CET	56360	23	192.168.2.23	48.18.12.117
Jan 23, 2025 09:16:51.360243082 CET	39056	23	192.168.2.23	211.195.85.118
Jan 23, 2025 09:16:51.360244036 CET	52076	23	192.168.2.23	97.186.231.114
Jan 23, 2025 09:16:51.360268116 CET	58032	2323	192.168.2.23	196.141.189.118
Jan 23, 2025 09:16:51.364703894 CET	23	53328	194.47.6.250	192.168.2.23
Jan 23, 2025 09:16:51.364758015 CET	53328	23	192.168.2.23	194.47.6.250
Jan 23, 2025 09:16:51.365255117 CET	23	33004	180.119.159.55	192.168.2.23
Jan 23, 2025 09:16:51.365266085 CET	23	45952	152.182.209.76	192.168.2.23
Jan 23, 2025 09:16:51.365276098 CET	23	39016	84.59.39.203	192.168.2.23
Jan 23, 2025 09:16:51.365287066 CET	23	32974	88.184.74.37	192.168.2.23
Jan 23, 2025 09:16:51.365298033 CET	23	40650	104.223.165.54	192.168.2.23
Jan 23, 2025 09:16:51.365302086 CET	33004	23	192.168.2.23	180.119.159.55
Jan 23, 2025 09:16:51.365302086 CET	45952	23	192.168.2.23	152.182.209.76
Jan 23, 2025 09:16:51.365309000 CET	23	41534	41.106.35.230	192.168.2.23
Jan 23, 2025 09:16:51.365319967 CET	2323	60930	222.80.110.111	192.168.2.23
Jan 23, 2025 09:16:51.365330935 CET	39016	23	192.168.2.23	84.59.39.203
Jan 23, 2025 09:16:51.365331888 CET	23	43986	163.68.191.124	192.168.2.23
Jan 23, 2025 09:16:51.365334034 CET	32974	23	192.168.2.23	88.184.74.37
Jan 23, 2025 09:16:51.365340948 CET	40650	23	192.168.2.23	104.223.165.54
Jan 23, 2025 09:16:51.365340948 CET	41534	23	192.168.2.23	41.106.35.230
Jan 23, 2025 09:16:51.365353107 CET	43986	23	192.168.2.23	163.68.191.124
Jan 23, 2025 09:16:51.365355015 CET	60930	2323	192.168.2.23	222.80.110.111
Jan 23, 2025 09:16:51.366066933 CET	23	57982	123.25.214.65	192.168.2.23
Jan 23, 2025 09:16:51.366076946 CET	23	42170	168.46.209.30	192.168.2.23
Jan 23, 2025 09:16:51.366111994 CET	42170	23	192.168.2.23	168.46.209.30
Jan 23, 2025 09:16:51.366117954 CET	23	59130	196.172.79.51	192.168.2.23
Jan 23, 2025 09:16:51.366138935 CET	57982	23	192.168.2.23	123.25.214.65
Jan 23, 2025 09:16:51.366158009 CET	59130	23	192.168.2.23	196.172.79.51
Jan 23, 2025 09:16:51.366169930 CET	23	33398	19.121.94.109	192.168.2.23
Jan 23, 2025 09:16:51.366179943 CET	23	36334	71.225.94.90	192.168.2.23
Jan 23, 2025 09:16:51.366198063 CET	23	57522	40.240.52.92	192.168.2.23
Jan 23, 2025 09:16:51.366209030 CET	23	34266	71.158.129.125	192.168.2.23
Jan 23, 2025 09:16:51.366214037 CET	36334	23	192.168.2.23	71.225.94.90
Jan 23, 2025 09:16:51.366239071 CET	33398	23	192.168.2.23	19.121.94.109
Jan 23, 2025 09:16:51.366239071 CET	57522	23	192.168.2.23	40.240.52.92
Jan 23, 2025 09:16:51.366239071 CET	34266	23	192.168.2.23	71.158.129.125
Jan 23, 2025 09:16:51.366264105 CET	2323	47718	107.122.40.63	192.168.2.23
Jan 23, 2025 09:16:51.366274118 CET	23	33116	108.165.254.216	192.168.2.23
Jan 23, 2025 09:16:51.366282940 CET	2323	48912	164.175.186.39	192.168.2.23
Jan 23, 2025 09:16:51.366303921 CET	23	59732	18.191.255.15	192.168.2.23
Jan 23, 2025 09:16:51.366312981 CET	47718	2323	192.168.2.23	107.122.40.63
Jan 23, 2025 09:16:51.366312981 CET	33116	23	192.168.2.23	108.165.254.216
Jan 23, 2025 09:16:51.366312981 CET	48912	2323	192.168.2.23	164.175.186.39
Jan 23, 2025 09:16:51.366314888 CET	23	39354	8.177.86.56	192.168.2.23
Jan 23, 2025 09:16:51.366336107 CET	23	46378	113.139.184.124	192.168.2.23
Jan 23, 2025 09:16:51.366337061 CET	59732	23	192.168.2.23	18.191.255.15
Jan 23, 2025 09:16:51.366343021 CET	39354	23	192.168.2.23	8.177.86.56
Jan 23, 2025 09:16:51.366345882 CET	23	33802	96.125.72.38	192.168.2.23
Jan 23, 2025 09:16:51.366357088 CET	23	56602	32.153.160.0	192.168.2.23
Jan 23, 2025 09:16:51.366369963 CET	46378	23	192.168.2.23	113.139.184.124
Jan 23, 2025 09:16:51.366384983 CET	33802	23	192.168.2.23	96.125.72.38
Jan 23, 2025 09:16:51.366389990 CET	56602	23	192.168.2.23	32.153.160.0
Jan 23, 2025 09:16:51.366561890 CET	23	34730	211.140.252.154	192.168.2.23
Jan 23, 2025 09:16:51.366573095 CET	2323	58032	196.141.189.118	192.168.2.23
Jan 23, 2025 09:16:51.366584063 CET	23	39056	211.195.85.118	192.168.2.23
Jan 23, 2025 09:16:51.366597891 CET	34730	23	192.168.2.23	211.140.252.154
Jan 23, 2025 09:16:51.366602898 CET	23	56360	48.18.12.117	192.168.2.23
Jan 23, 2025 09:16:51.366612911 CET	23	52076	97.186.231.114	192.168.2.23
Jan 23, 2025 09:16:51.366622925 CET	23	57832	200.171.149.173	192.168.2.23
Jan 23, 2025 09:16:51.366633892 CET	23	57838	197.172.253.241	192.168.2.23
Jan 23, 2025 09:16:51.366643906 CET	23	49570	206.31.17.34	192.168.2.23
Jan 23, 2025 09:16:51.366652012 CET	23	39618	93.183.69.95	192.168.2.23
Jan 23, 2025 09:16:51.366661072 CET	23	50588	187.201.17.218	192.168.2.23
Jan 23, 2025 09:16:51.366669893 CET	23	57262	72.80.235.126	192.168.2.23
Jan 23, 2025 09:16:51.366679907 CET	23	40112	94.245.17.145	192.168.2.23
Jan 23, 2025 09:16:51.366691113 CET	23	51682	88.102.244.6	192.168.2.23
Jan 23, 2025 09:16:51.366694927 CET	57262	23	192.168.2.23	72.80.235.126
Jan 23, 2025 09:16:51.366700888 CET	2323	41452	143.2.43.122	192.168.2.23
Jan 23, 2025 09:16:51.366709948 CET	23	52058	72.200.82.66	192.168.2.23
Jan 23, 2025 09:16:51.366719007 CET	23	53554	92.180.178.145	192.168.2.23
Jan 23, 2025 09:16:51.366728067 CET	23	60372	64.58.178.135	192.168.2.23
Jan 23, 2025 09:16:51.366738081 CET	23	32806	125.61.105.63	192.168.2.23
Jan 23, 2025 09:16:51.366750002 CET	23	47616	45.102.176.42	192.168.2.23
Jan 23, 2025 09:16:51.366749048 CET	53554	23	192.168.2.23	92.180.178.145
Jan 23, 2025 09:16:51.366759062 CET	23	60362	99.227.235.32	192.168.2.23
Jan 23, 2025 09:16:51.366767883 CET	2323	48868	212.156.20.233	192.168.2.23
Jan 23, 2025 09:16:51.366777897 CET	23	40872	96.185.164.155	192.168.2.23
Jan 23, 2025 09:16:51.366787910 CET	23	43396	40.180.227.242	192.168.2.23
Jan 23, 2025 09:16:51.366805077 CET	23	43186	136.110.250.16	192.168.2.23
Jan 23, 2025 09:16:51.366818905 CET	23	53218	161.12.196.244	192.168.2.23
Jan 23, 2025 09:16:51.366822958 CET	43396	23	192.168.2.23	40.180.227.242
Jan 23, 2025 09:16:51.366828918 CET	23	37854	98.78.158.48	192.168.2.23
Jan 23, 2025 09:16:51.366838932 CET	23	55154	125.77.231.210	192.168.2.23
Jan 23, 2025 09:16:51.366851091 CET	23	33638	177.51.54.140	192.168.2.23
Jan 23, 2025 09:16:51.366861105 CET	2323	37442	98.110.241.160	192.168.2.23
Jan 23, 2025 09:16:51.366869926 CET	23	50314	150.207.182.54	192.168.2.23
Jan 23, 2025 09:16:51.366880894 CET	23	40290	107.55.131.162	192.168.2.23
Jan 23, 2025 09:16:51.366893053 CET	23	49314	59.185.227.66	192.168.2.23
Jan 23, 2025 09:16:51.366895914 CET	37442	2323	192.168.2.23	98.110.241.160
Jan 23, 2025 09:16:51.366904020 CET	23	40348	185.43.6.116	192.168.2.23
Jan 23, 2025 09:16:51.366914988 CET	23	39220	109.160.208.5	192.168.2.23
Jan 23, 2025 09:16:51.366925955 CET	23	34394	100.168.84.229	192.168.2.23
Jan 23, 2025 09:16:51.366935015 CET	23	40404	101.15.84.149	192.168.2.23
Jan 23, 2025 09:16:51.366945982 CET	2323	49808	61.84.150.152	192.168.2.23
Jan 23, 2025 09:16:51.366957903 CET	23	45838	145.148.180.100	192.168.2.23
Jan 23, 2025 09:16:51.366969109 CET	23	33774	65.238.238.169	192.168.2.23
Jan 23, 2025 09:16:51.366980076 CET	23	43408	142.244.58.124	192.168.2.23
Jan 23, 2025 09:16:51.366980076 CET	40404	23	192.168.2.23	101.15.84.149
Jan 23, 2025 09:16:51.366991997 CET	23	51512	27.62.70.131	192.168.2.23
Jan 23, 2025 09:16:51.367002010 CET	23	51560	68.121.179.77	192.168.2.23
Jan 23, 2025 09:16:51.367011070 CET	23	52716	17.93.63.111	192.168.2.23
Jan 23, 2025 09:16:51.367022991 CET	23	52986	208.190.194.185	192.168.2.23
Jan 23, 2025 09:16:51.367036104 CET	23	44728	41.136.32.37	192.168.2.23
Jan 23, 2025 09:16:51.367039919 CET	51512	23	192.168.2.23	27.62.70.131
Jan 23, 2025 09:16:51.367054939 CET	23	33602	116.216.55.163	192.168.2.23
Jan 23, 2025 09:16:51.367065907 CET	23	43642	99.123.180.10	192.168.2.23
Jan 23, 2025 09:16:51.367078066 CET	23	41508	69.158.114.117	192.168.2.23
Jan 23, 2025 09:16:51.367078066 CET	44728	23	192.168.2.23	41.136.32.37
Jan 23, 2025 09:16:51.367088079 CET	23	38322	99.33.216.12	192.168.2.23
Jan 23, 2025 09:16:51.367098093 CET	23	34086	195.124.16.222	192.168.2.23
Jan 23, 2025 09:16:51.367108107 CET	23	55974	94.77.78.64	192.168.2.23
Jan 23, 2025 09:16:51.367119074 CET	23	37928	192.126.211.160	192.168.2.23
Jan 23, 2025 09:16:51.367127895 CET	23	37614	184.252.46.94	192.168.2.23
Jan 23, 2025 09:16:51.367136955 CET	23	36682	96.28.75.65	192.168.2.23
Jan 23, 2025 09:16:51.367146969 CET	2323	59018	148.252.65.112	192.168.2.23
Jan 23, 2025 09:16:51.367156982 CET	23	39912	183.213.145.189	192.168.2.23
Jan 23, 2025 09:16:51.367167950 CET	23	48054	182.147.1.134	192.168.2.23
Jan 23, 2025 09:16:51.367177010 CET	55974	23	192.168.2.23	94.77.78.64
Jan 23, 2025 09:16:51.367177963 CET	23	44114	181.51.113.194	192.168.2.23
Jan 23, 2025 09:16:51.367188931 CET	23	47274	106.35.237.41	192.168.2.23
Jan 23, 2025 09:16:51.367201090 CET	23	44422	1.170.219.33	192.168.2.23
Jan 23, 2025 09:16:51.367209911 CET	2323	33124	166.2.208.55	192.168.2.23
Jan 23, 2025 09:16:51.367218971 CET	23	45914	78.233.172.130	192.168.2.23
Jan 23, 2025 09:16:51.367228031 CET	23	43162	192.44.212.165	192.168.2.23
Jan 23, 2025 09:16:51.367237091 CET	23	52992	40.243.50.78	192.168.2.23
Jan 23, 2025 09:16:51.367245913 CET	23	45708	60.239.92.18	192.168.2.23
Jan 23, 2025 09:16:51.367259026 CET	23	53992	159.159.29.92	192.168.2.23
Jan 23, 2025 09:16:51.367266893 CET	48054	23	192.168.2.23	182.147.1.134
Jan 23, 2025 09:16:51.367266893 CET	43162	23	192.168.2.23	192.44.212.165
Jan 23, 2025 09:16:51.367269993 CET	23	39024	166.214.203.255	192.168.2.23
Jan 23, 2025 09:16:51.367280006 CET	23	48002	155.235.21.6	192.168.2.23
Jan 23, 2025 09:16:51.367289066 CET	23	48440	17.32.113.124	192.168.2.23
Jan 23, 2025 09:16:51.367300034 CET	2323	40486	119.115.23.153	192.168.2.23
Jan 23, 2025 09:16:51.367319107 CET	23	34438	170.243.78.66	192.168.2.23
Jan 23, 2025 09:16:51.367319107 CET	48002	23	192.168.2.23	155.235.21.6
Jan 23, 2025 09:16:51.367330074 CET	23	59552	2.217.90.203	192.168.2.23
Jan 23, 2025 09:16:51.367362976 CET	23	50020	136.114.209.125	192.168.2.23
Jan 23, 2025 09:16:51.367372036 CET	23	54498	161.117.166.26	192.168.2.23
Jan 23, 2025 09:16:51.367381096 CET	23	42588	12.0.90.115	192.168.2.23
Jan 23, 2025 09:16:51.367389917 CET	23	54498	161.117.166.26	192.168.2.23
Jan 23, 2025 09:16:51.367400885 CET	23	50020	136.114.209.125	192.168.2.23
Jan 23, 2025 09:16:51.367410898 CET	23	59552	2.217.90.203	192.168.2.23
Jan 23, 2025 09:16:51.367420912 CET	23	34438	170.243.78.66	192.168.2.23
Jan 23, 2025 09:16:51.367428064 CET	42588	23	192.168.2.23	12.0.90.115
Jan 23, 2025 09:16:51.367429018 CET	54498	23	192.168.2.23	161.117.166.26
Jan 23, 2025 09:16:51.367433071 CET	2323	40486	119.115.23.153	192.168.2.23
Jan 23, 2025 09:16:51.367444992 CET	23	48440	17.32.113.124	192.168.2.23
Jan 23, 2025 09:16:51.367455959 CET	34438	23	192.168.2.23	170.243.78.66
Jan 23, 2025 09:16:51.367456913 CET	23	39024	166.214.203.255	192.168.2.23
Jan 23, 2025 09:16:51.367468119 CET	23	53992	159.159.29.92	192.168.2.23
Jan 23, 2025 09:16:51.367472887 CET	40486	2323	192.168.2.23	119.115.23.153
Jan 23, 2025 09:16:51.367475033 CET	48440	23	192.168.2.23	17.32.113.124
Jan 23, 2025 09:16:51.367479086 CET	23	45708	60.239.92.18	192.168.2.23
Jan 23, 2025 09:16:51.367489100 CET	23	52992	40.243.50.78	192.168.2.23
Jan 23, 2025 09:16:51.367501020 CET	23	45914	78.233.172.130	192.168.2.23
Jan 23, 2025 09:16:51.367501974 CET	50020	23	192.168.2.23	136.114.209.125
Jan 23, 2025 09:16:51.367501974 CET	59552	23	192.168.2.23	2.217.90.203
Jan 23, 2025 09:16:51.367501974 CET	53992	23	192.168.2.23	159.159.29.92
Jan 23, 2025 09:16:51.367507935 CET	45708	23	192.168.2.23	60.239.92.18
Jan 23, 2025 09:16:51.367511988 CET	2323	33124	166.2.208.55	192.168.2.23
Jan 23, 2025 09:16:51.367518902 CET	52992	23	192.168.2.23	40.243.50.78
Jan 23, 2025 09:16:51.367530107 CET	23	44422	1.170.219.33	192.168.2.23
Jan 23, 2025 09:16:51.367533922 CET	39024	23	192.168.2.23	166.214.203.255
Jan 23, 2025 09:16:51.367542028 CET	23	47274	106.35.237.41	192.168.2.23
Jan 23, 2025 09:16:51.367547035 CET	45914	23	192.168.2.23	78.233.172.130
Jan 23, 2025 09:16:51.367547035 CET	33124	2323	192.168.2.23	166.2.208.55
Jan 23, 2025 09:16:51.367552042 CET	23	44114	181.51.113.194	192.168.2.23
Jan 23, 2025 09:16:51.367561102 CET	44422	23	192.168.2.23	1.170.219.33
Jan 23, 2025 09:16:51.367563009 CET	23	39912	183.213.145.189	192.168.2.23
Jan 23, 2025 09:16:51.367568970 CET	47274	23	192.168.2.23	106.35.237.41
Jan 23, 2025 09:16:51.367574930 CET	2323	59018	148.252.65.112	192.168.2.23
Jan 23, 2025 09:16:51.367582083 CET	44114	23	192.168.2.23	181.51.113.194
Jan 23, 2025 09:16:51.367585897 CET	23	36682	96.28.75.65	192.168.2.23
Jan 23, 2025 09:16:51.367593050 CET	39912	23	192.168.2.23	183.213.145.189
Jan 23, 2025 09:16:51.367597103 CET	23	37614	184.252.46.94	192.168.2.23
Jan 23, 2025 09:16:51.367603064 CET	59018	2323	192.168.2.23	148.252.65.112
Jan 23, 2025 09:16:51.367609978 CET	23	37928	192.126.211.160	192.168.2.23
Jan 23, 2025 09:16:51.367620945 CET	23	34086	195.124.16.222	192.168.2.23
Jan 23, 2025 09:16:51.367630959 CET	23	38322	99.33.216.12	192.168.2.23
Jan 23, 2025 09:16:51.367635965 CET	36682	23	192.168.2.23	96.28.75.65
Jan 23, 2025 09:16:51.367643118 CET	23	41508	69.158.114.117	192.168.2.23
Jan 23, 2025 09:16:51.367645025 CET	37614	23	192.168.2.23	184.252.46.94
Jan 23, 2025 09:16:51.367645025 CET	37928	23	192.168.2.23	192.126.211.160
Jan 23, 2025 09:16:51.367654085 CET	23	43642	99.123.180.10	192.168.2.23
Jan 23, 2025 09:16:51.367656946 CET	34086	23	192.168.2.23	195.124.16.222
Jan 23, 2025 09:16:51.367671013 CET	23	33602	116.216.55.163	192.168.2.23
Jan 23, 2025 09:16:51.367671967 CET	38322	23	192.168.2.23	99.33.216.12
Jan 23, 2025 09:16:51.367671967 CET	41508	23	192.168.2.23	69.158.114.117
Jan 23, 2025 09:16:51.367680073 CET	23	52986	208.190.194.185	192.168.2.23
Jan 23, 2025 09:16:51.367691994 CET	23	52716	17.93.63.111	192.168.2.23
Jan 23, 2025 09:16:51.367697954 CET	33602	23	192.168.2.23	116.216.55.163
Jan 23, 2025 09:16:51.367702007 CET	23	51560	68.121.179.77	192.168.2.23
Jan 23, 2025 09:16:51.367711067 CET	52986	23	192.168.2.23	208.190.194.185
Jan 23, 2025 09:16:51.367713928 CET	23	43408	142.244.58.124	192.168.2.23
Jan 23, 2025 09:16:51.367719889 CET	23	33774	65.238.238.169	192.168.2.23
Jan 23, 2025 09:16:51.367724895 CET	52716	23	192.168.2.23	17.93.63.111
Jan 23, 2025 09:16:51.367724895 CET	23	45838	145.148.180.100	192.168.2.23
Jan 23, 2025 09:16:51.367733955 CET	2323	49808	61.84.150.152	192.168.2.23
Jan 23, 2025 09:16:51.367737055 CET	43642	23	192.168.2.23	99.123.180.10
Jan 23, 2025 09:16:51.367743969 CET	23	34394	100.168.84.229	192.168.2.23
Jan 23, 2025 09:16:51.367757082 CET	33774	23	192.168.2.23	65.238.238.169
Jan 23, 2025 09:16:51.367757082 CET	43408	23	192.168.2.23	142.244.58.124
Jan 23, 2025 09:16:51.367757082 CET	49808	2323	192.168.2.23	61.84.150.152
Jan 23, 2025 09:16:51.367757082 CET	51560	23	192.168.2.23	68.121.179.77
Jan 23, 2025 09:16:51.367757082 CET	45838	23	192.168.2.23	145.148.180.100
Jan 23, 2025 09:16:51.367765903 CET	23	39220	109.160.208.5	192.168.2.23
Jan 23, 2025 09:16:51.367775917 CET	23	40348	185.43.6.116	192.168.2.23
Jan 23, 2025 09:16:51.367784977 CET	23	49314	59.185.227.66	192.168.2.23
Jan 23, 2025 09:16:51.367796898 CET	34394	23	192.168.2.23	100.168.84.229
Jan 23, 2025 09:16:51.367798090 CET	23	40290	107.55.131.162	192.168.2.23
Jan 23, 2025 09:16:51.367805958 CET	39220	23	192.168.2.23	109.160.208.5
Jan 23, 2025 09:16:51.367805958 CET	40348	23	192.168.2.23	185.43.6.116
Jan 23, 2025 09:16:51.367810011 CET	23	50314	150.207.182.54	192.168.2.23
Jan 23, 2025 09:16:51.367816925 CET	49314	23	192.168.2.23	59.185.227.66
Jan 23, 2025 09:16:51.367820024 CET	23	33638	177.51.54.140	192.168.2.23
Jan 23, 2025 09:16:51.367827892 CET	40290	23	192.168.2.23	107.55.131.162
Jan 23, 2025 09:16:51.367830038 CET	23	55154	125.77.231.210	192.168.2.23
Jan 23, 2025 09:16:51.367841959 CET	23	37854	98.78.158.48	192.168.2.23
Jan 23, 2025 09:16:51.367846012 CET	50314	23	192.168.2.23	150.207.182.54
Jan 23, 2025 09:16:51.367849112 CET	33638	23	192.168.2.23	177.51.54.140
Jan 23, 2025 09:16:51.367856026 CET	55154	23	192.168.2.23	125.77.231.210
Jan 23, 2025 09:16:51.367877007 CET	37854	23	192.168.2.23	98.78.158.48
Jan 23, 2025 09:16:51.370358944 CET	23	53218	161.12.196.244	192.168.2.23
Jan 23, 2025 09:16:51.370368958 CET	23	43186	136.110.250.16	192.168.2.23
Jan 23, 2025 09:16:51.370378017 CET	23	40872	96.185.164.155	192.168.2.23
Jan 23, 2025 09:16:51.370388985 CET	2323	48868	212.156.20.233	192.168.2.23
Jan 23, 2025 09:16:51.370399952 CET	53218	23	192.168.2.23	161.12.196.244
Jan 23, 2025 09:16:51.370400906 CET	23	60362	99.227.235.32	192.168.2.23
Jan 23, 2025 09:16:51.370404005 CET	40872	23	192.168.2.23	96.185.164.155
Jan 23, 2025 09:16:51.370413065 CET	23	47616	45.102.176.42	192.168.2.23
Jan 23, 2025 09:16:51.370414019 CET	43186	23	192.168.2.23	136.110.250.16
Jan 23, 2025 09:16:51.370424032 CET	48868	2323	192.168.2.23	212.156.20.233
Jan 23, 2025 09:16:51.370424986 CET	23	32806	125.61.105.63	192.168.2.23
Jan 23, 2025 09:16:51.370429993 CET	60362	23	192.168.2.23	99.227.235.32
Jan 23, 2025 09:16:51.370436907 CET	23	60372	64.58.178.135	192.168.2.23
Jan 23, 2025 09:16:51.370443106 CET	47616	23	192.168.2.23	45.102.176.42
Jan 23, 2025 09:16:51.370455980 CET	32806	23	192.168.2.23	125.61.105.63
Jan 23, 2025 09:16:51.370457888 CET	23	52058	72.200.82.66	192.168.2.23
Jan 23, 2025 09:16:51.370464087 CET	60372	23	192.168.2.23	64.58.178.135
Jan 23, 2025 09:16:51.370469093 CET	2323	41452	143.2.43.122	192.168.2.23
Jan 23, 2025 09:16:51.370480061 CET	23	51682	88.102.244.6	192.168.2.23
Jan 23, 2025 09:16:51.370486975 CET	52058	23	192.168.2.23	72.200.82.66
Jan 23, 2025 09:16:51.370491028 CET	23	40112	94.245.17.145	192.168.2.23
Jan 23, 2025 09:16:51.370496988 CET	23	50588	187.201.17.218	192.168.2.23
Jan 23, 2025 09:16:51.370497942 CET	41452	2323	192.168.2.23	143.2.43.122
Jan 23, 2025 09:16:51.370501041 CET	23	39618	93.183.69.95	192.168.2.23
Jan 23, 2025 09:16:51.370515108 CET	23	49570	206.31.17.34	192.168.2.23
Jan 23, 2025 09:16:51.370526075 CET	23	57838	197.172.253.241	192.168.2.23
Jan 23, 2025 09:16:51.370537996 CET	23	57832	200.171.149.173	192.168.2.23
Jan 23, 2025 09:16:51.370538950 CET	49570	23	192.168.2.23	206.31.17.34
Jan 23, 2025 09:16:51.370541096 CET	51682	23	192.168.2.23	88.102.244.6
Jan 23, 2025 09:16:51.370548964 CET	23	52076	97.186.231.114	192.168.2.23
Jan 23, 2025 09:16:51.370551109 CET	50588	23	192.168.2.23	187.201.17.218
Jan 23, 2025 09:16:51.370553017 CET	39618	23	192.168.2.23	93.183.69.95
Jan 23, 2025 09:16:51.370552063 CET	40112	23	192.168.2.23	94.245.17.145
Jan 23, 2025 09:16:51.370569944 CET	23	56360	48.18.12.117	192.168.2.23
Jan 23, 2025 09:16:51.370570898 CET	52076	23	192.168.2.23	97.186.231.114
Jan 23, 2025 09:16:51.370579958 CET	23	39056	211.195.85.118	192.168.2.23
Jan 23, 2025 09:16:51.370589018 CET	2323	58032	196.141.189.118	192.168.2.23
Jan 23, 2025 09:16:51.370609999 CET	56360	23	192.168.2.23	48.18.12.117
Jan 23, 2025 09:16:51.370610952 CET	39056	23	192.168.2.23	211.195.85.118
Jan 23, 2025 09:16:51.370620012 CET	58032	2323	192.168.2.23	196.141.189.118
Jan 23, 2025 09:16:51.370655060 CET	57838	23	192.168.2.23	197.172.253.241
Jan 23, 2025 09:16:51.370655060 CET	57832	23	192.168.2.23	200.171.149.173
Jan 23, 2025 09:16:52.104054928 CET	42836	443	192.168.2.23	91.189.91.43
Jan 23, 2025 09:16:53.123888969 CET	42516	80	192.168.2.23	109.202.202.202
Jan 23, 2025 09:17:07.714207888 CET	43928	443	192.168.2.23	91.189.91.42
Jan 23, 2025 09:17:17.952691078 CET	42836	443	192.168.2.23	91.189.91.43
Jan 23, 2025 09:17:24.095804930 CET	42516	80	192.168.2.23	109.202.202.202
Jan 23, 2025 09:17:48.668292046 CET	43928	443	192.168.2.23	91.189.91.42
Jan 23, 2025 09:18:09.145548105 CET	42836	443	192.168.2.23	91.189.91.43

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 23, 2025 09:16:54.809735060 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable
Jan 23, 2025 09:18:14.825366974 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable

System Behavior

Analysis Process: Fantazy.spc.elf PID: 6209, Parent PID: 6126

General

Start time (UTC):	08:16:47
Start date (UTC):	23/01/2025
Path:	/tmp/Fantazy.spc.elf
Arguments:	/tmp/Fantazy.spc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

File Activities

File Opened

File Read

Process Activities

Process Forked

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Listening

Socket Connecting

Chronological Activities

Analysis Process: Fantazy.spc.elf PID: 6212, Parent PID: 6209

General

Start time (UTC):	08:16:47
Start date (UTC):	23/01/2025
Path:	/tmp/Fantazy.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

File Activities

File Opened

Process Activities

Thread Sleep

Chronological Activities

Analysis Process: Fantazy.spc.elf PID: 6214, Parent PID: 6209

General

Start time (UTC):	08:16:47
Start date (UTC):	23/01/2025
Path:	/tmp/Fantazy.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Process Activities

Process Forked

Thread Sleep

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: Fantazy.spc.elf PID: 6216, Parent PID: 6214

General

Start time (UTC):	08:16:47
Start date (UTC):	23/01/2025
Path:	/tmp/Fantazy.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

File Activities

File Opened

Process Activities

Thread Sleep

Chronological Activities

Analysis Process: Fantazy.spc.elf PID: 6217, Parent PID: 6214

General

Start time (UTC):	08:16:47
Start date (UTC):	23/01/2025
Path:	/tmp/Fantazy.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

File Activities

File Opened

File Deleted

File Read

File Written

Directory Enumerated

Process Activities

Signal Sent

Thread Sleep

Chronological Activities

Analysis Process: Fantazy.spc.elf PID: 6219, Parent PID: 6214

General

Start time (UTC):	08:16:47
Start date (UTC):	23/01/2025
Path:	/tmp/Fantazy.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Process Activities

Thread Sleep

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: systemd PID: 6223, Parent PID: 1

General

Start time (UTC):	08:16:48
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: journalctl PID: 6223, Parent PID: 1

General

Start time (UTC):	08:16:48
Start date (UTC):	23/01/2025
Path:	/usr/bin/journalctl
Arguments:	/usr/bin/journalctl --smart-relinquish-var
File size:	80120 bytes
MD5 hash:	bf3a987344f3bacafc44efd882abda8b

File Activities

File Opened

File Read

Process Activities

Prctl Requested

Chronological Activities

Analysis Process: systemd PID: 6244, Parent PID: 1

General

Start time (UTC):	08:16:48
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: dbus-daemon PID: 6244, Parent PID: 1

General

Start time (UTC):	08:16:48
Start date (UTC):	23/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

File Activities

File Opened

File Read

Directory Enumerated

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: systemd PID: 6257, Parent PID: 1860

General

Start time (UTC):	08:16:48
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: pulseaudio PID: 6257, Parent PID: 1860

General

Start time (UTC):	08:16:48
Start date (UTC):	23/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

File Activities

File Opened

File Read

Directory Enumerated

Process Activities

Prctl Requested

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: systemd PID: 6258, Parent PID: 1

General

Start time (UTC):	08:16:48
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rsyslogd PID: 6258, Parent PID: 1

General

Start time (UTC):	08:16:48
Start date (UTC):	23/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

File Activities

File Opened

File Read

File Written

Directory Enumerated

Process Activities

Signal Sent

Prctl Requested

System Activities

Query System Information (uname)

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: systemd PID: 6259, Parent PID: 1

General

Start time (UTC):	08:16:49
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd-journald PID: 6259, Parent PID: 1

General

Start time (UTC):	08:16:49
Start date (UTC):	23/01/2025
Path:	/lib/systemd/systemd-journald
Arguments:	/lib/systemd/systemd-journald
File size:	162032 bytes
MD5 hash:	474667ece6cecb5e04c6eb897a1d0d9e

File Activities

File Opened

File Read

Process Activities

Prctl Requested

Chronological Activities

Analysis Process: gvfsd-fuse PID: 6260, Parent PID: 2038

General

Start time (UTC):	08:16:49
Start date (UTC):	23/01/2025
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: fusermount PID: 6260, Parent PID: 2038

General

Start time (UTC):	08:16:49
Start date (UTC):	23/01/2025
Path:	/bin/fusermount
Arguments:	fusermount -u -q -z -- /run/user/1000/gvfs
File size:	39144 bytes
MD5 hash:	576a1b135c82bdcbc97a91acea900566

File Activities

File Opened

File Read

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: systemd PID: 6273, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: dbus-daemon PID: 6273, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6274, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd-journald PID: 6274, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/lib/systemd/systemd-journald
Arguments:	/lib/systemd/systemd-journald
File size:	162032 bytes
MD5 hash:	474667ece6cecb5e04c6eb897a1d0d9e

File Activities

File Opened

Chronological Activities

Analysis Process: systemd PID: 6276, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: dbus-daemon PID: 6276, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6277, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rsyslogd PID: 6277, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6278, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd-journald PID: 6278, Parent PID: 1

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/lib/systemd/systemd-journald
Arguments:	/lib/systemd/systemd-journald
File size:	162032 bytes
MD5 hash:	474667ece6cecb5e04c6eb897a1d0d9e

File Activities

File Opened

Chronological Activities

Analysis Process: systemd PID: 6279, Parent PID: 1860

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: pulseaudio PID: 6279, Parent PID: 1860

General

Start time (UTC):	08:16:50
Start date (UTC):	23/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

File Activities

File Opened

Chronological Activities

Analysis Process: systemd PID: 6280, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: dbus-daemon PID: 6280, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6282, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd-journald PID: 6282, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/lib/systemd/systemd-journald
Arguments:	/lib/systemd/systemd-journald
File size:	162032 bytes
MD5 hash:	474667ece6cecb5e04c6eb897a1d0d9e

File Activities

File Opened

Chronological Activities

Analysis Process: systemd PID: 6283, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rsyslogd PID: 6283, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6284, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: dbus-daemon PID: 6284, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6285, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd-journald PID: 6285, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/lib/systemd/systemd-journald
Arguments:	/lib/systemd/systemd-journald
File size:	162032 bytes
MD5 hash:	474667ece6cecb5e04c6eb897a1d0d9e

File Activities

File Opened

Chronological Activities

Analysis Process: systemd PID: 6287, Parent PID: 1860

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: pulseaudio PID: 6287, Parent PID: 1860

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

File Activities

File Opened

Chronological Activities

Analysis Process: systemd PID: 6288, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rsyslogd PID: 6288, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: gdm3 PID: 6289, Parent PID: 1320

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: Default PID: 6289, Parent PID: 1320

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: gdm3 PID: 6290, Parent PID: 1320

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: Default PID: 6290, Parent PID: 1320

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: gdm3 PID: 6291, Parent PID: 1320

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: Default PID: 6291, Parent PID: 1320

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6292, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rsyslogd PID: 6292, Parent PID: 1

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

File Activities

File Opened

File Read

File Written

Directory Enumerated

Process Activities

Signal Sent

Prctl Requested

System Activities

Query System Information (uname)

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: systemd PID: 6294, Parent PID: 1860

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: pulseaudio PID: 6294, Parent PID: 1860

General

Start time (UTC):	08:16:51
Start date (UTC):	23/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

File Activities

File Opened

Chronological Activities

Analysis Process: systemd PID: 6299, Parent PID: 1

General

Start time (UTC):	08:16:52
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6299, Parent PID: 1

General

Start time (UTC):	08:16:52
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6300, Parent PID: 1

General

Start time (UTC):	08:16:52
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: generate-config PID: 6300, Parent PID: 1

General

Start time (UTC):	08:16:52
Start date (UTC):	23/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6301, Parent PID: 1

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6301, Parent PID: 1

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

File Activities

File Opened

File Deleted

File Read

File Written

Directory Enumerated

Process Activities

Process Forked

System Activities

Query System Information (uname)

Chronological Activities

Analysis Process: gpu-manager PID: 6302, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6302, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: gpu-manager PID: 6303, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6303, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Directory Enumerated

Process Activities

Process Forked

Chronological Activities

Analysis Process: sh PID: 6304, Parent PID: 6303

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: grep PID: 6304, Parent PID: 6303

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: gpu-manager PID: 6305, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6305, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

Chronological Activities

Analysis Process: gpu-manager PID: 6306, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6306, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Directory Enumerated

Process Activities

Process Forked

Chronological Activities

Analysis Process: sh PID: 6307, Parent PID: 6306

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: grep PID: 6307, Parent PID: 6306

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: gpu-manager PID: 6308, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6308, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: gpu-manager PID: 6309, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6309, Parent PID: 6301

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Directory Enumerated

Process Activities

Process Forked

Chronological Activities

Analysis Process: sh PID: 6310, Parent PID: 6309

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: grep PID: 6310, Parent PID: 6309

General

Start time (UTC):	08:16:54
Start date (UTC):	23/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: gpu-manager PID: 6311, Parent PID: 6301

General

Start time (UTC):	08:16:55
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6311, Parent PID: 6301

General

Start time (UTC):	08:16:55
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: gpu-manager PID: 6314, Parent PID: 6301

General

Start time (UTC):	08:16:55
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6314, Parent PID: 6301

General

Start time (UTC):	08:16:55
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Directory Enumerated

Process Activities

Process Forked

Chronological Activities

Analysis Process: sh PID: 6315, Parent PID: 6314

General

Start time (UTC):	08:16:55
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: grep PID: 6315, Parent PID: 6314

General

Start time (UTC):	08:16:55
Start date (UTC):	23/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: systemd PID: 6316, Parent PID: 1

General

Start time (UTC):	08:16:56
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: generate-config PID: 6316, Parent PID: 1

General

Start time (UTC):	08:16:56
Start date (UTC):	23/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Directory Enumerated

Process Activities

Process Forked

Chronological Activities

Analysis Process: generate-config PID: 6317, Parent PID: 6316

General

Start time (UTC):	08:16:56
Start date (UTC):	23/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: pkill PID: 6317, Parent PID: 6316

General

Start time (UTC):	08:16:56
Start date (UTC):	23/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

File Activities

File Opened

File Read

Directory Enumerated

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: systemd PID: 6318, Parent PID: 1

General

Start time (UTC):	08:16:59
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gdm-wait-for-drm PID: 6318, Parent PID: 1

General

Start time (UTC):	08:16:59
Start date (UTC):	23/01/2025
Path:	/usr/lib/gdm3/gdm-wait-for-drm
Arguments:	/usr/lib/gdm3/gdm-wait-for-drm
File size:	14640 bytes
MD5 hash:	82043ba752c6930b4e6aaea2f7747545

File Activities

File Opened

File Read

Directory Enumerated

Chronological Activities

Analysis Process: systemd PID: 6320, Parent PID: 1

General

Start time (UTC):	08:17:10
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd PID: 6321, Parent PID: 1

General

Start time (UTC):	08:17:10
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: generate-config PID: 6321, Parent PID: 1

General

Start time (UTC):	08:17:10
Start date (UTC):	23/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: systemd PID: 6322, Parent PID: 1

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6322, Parent PID: 1

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

File Activities

File Opened

File Deleted

File Read

File Written

Directory Enumerated

Process Activities

Process Forked

System Activities

Query System Information (uname)

Chronological Activities

Analysis Process: gpu-manager PID: 6323, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6323, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gpu-manager PID: 6324, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6324, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gpu-manager PID: 6325, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6326, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: sh PID: 6326, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gpu-manager PID: 6327, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: gpu-manager PID: 6328, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: gpu-manager PID: 6329, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6330, Parent PID: 6322

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd PID: 6331, Parent PID: 1

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: generate-config PID: 6331, Parent PID: 1

General

Start time (UTC):	08:17:12
Start date (UTC):	23/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: systemd PID: 6332, Parent PID: 1

General

Start time (UTC):	08:17:13
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6332, Parent PID: 1

General

Start time (UTC):	08:17:13
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

File Activities

File Opened

File Deleted

File Read

File Written

Directory Enumerated

Process Activities

Process Forked

System Activities

Query System Information (uname)

Chronological Activities

Analysis Process: gpu-manager PID: 6333, Parent PID: 6332

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6334, Parent PID: 6332

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: gpu-manager PID: 6335, Parent PID: 6332

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: gpu-manager PID: 6336, Parent PID: 6332

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6337, Parent PID: 6332

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: gpu-manager PID: 6338, Parent PID: 6332

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: gpu-manager PID: 6339, Parent PID: 6332

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: gpu-manager PID: 6340, Parent PID: 6332

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd PID: 6341, Parent PID: 1

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: generate-config PID: 6341, Parent PID: 1

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

File Read

Directory Enumerated

Process Activities

Process Forked

Chronological Activities

Analysis Process: generate-config PID: 6342, Parent PID: 6341

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd PID: 6343, Parent PID: 1

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gdm-wait-for-drm PID: 6343, Parent PID: 1

General

Start time (UTC):	08:17:14
Start date (UTC):	23/01/2025
Path:	/usr/lib/gdm3/gdm-wait-for-drm
Arguments:	/usr/lib/gdm3/gdm-wait-for-drm
File size:	14640 bytes
MD5 hash:	82043ba752c6930b4e6aaea2f7747545

Analysis Process: systemd PID: 6344, Parent PID: 1

General

Start time (UTC):	08:17:15
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6344, Parent PID: 1

General

Start time (UTC):	08:17:15
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: systemd PID: 6345, Parent PID: 1

General

Start time (UTC):	08:17:15
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: generate-config PID: 6345, Parent PID: 1

General

Start time (UTC):	08:17:15
Start date (UTC):	23/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

File Activities

File Opened

Chronological Activities

Analysis Process: systemd PID: 6346, Parent PID: 1

General

Start time (UTC):	08:17:16
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: gpu-manager PID: 6346, Parent PID: 1

General

Start time (UTC):	08:17:16
Start date (UTC):	23/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: systemd PID: 6347, Parent PID: 1

General

Start time (UTC):	08:17:16
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: systemd PID: 6348, Parent PID: 1

General

Start time (UTC):	08:17:18
Start date (UTC):	23/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: plymouth PID: 6348, Parent PID: 1

General

Start time (UTC):	08:17:18
Start date (UTC):	23/01/2025
Path:	/bin/plymouth
Arguments:	/bin/plymouth quit
File size:	51352 bytes
MD5 hash:	87003efd8dad470042f5e75360a8f49f

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete or modify artifacts generated within systems to remove evidence of their presence or hinder defenses. Various artifacts may be created by an adversary or something that can be attributed to an adversary’s actions. Typically these artifacts are used as defensive indicators related to monitored events, such as strings from downloaded files, logs that are generated from user actions, and other data analyzed by defenders. Location, format, and type of artifact (such as command or login history) are often specific to each platform.
Tactics:	Defense Evasion
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Deletion, File: File Metadata, File: File Modification, Firewall: Firewall Rule Modification, Network Traffic: Network Traffic Content, Process: OS API Execution, Process: Process Creation, Scheduled Job: Scheduled Job Modification, User Account: User Account Authentication, User Account: User Account Deletion, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, Google Workspace, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Fantazy.spc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.OCi03h (deleted)

/var/lib/ubuntu-drivers-common/last_gfx_boot

/var/log/gpu-manager.log

/var/log/kern.log

/var/log/syslog

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

ICMP Packets

System Behavior

Analysis Process: Fantazy.spc.elf PID: 6209, Parent PID: 6126

General

File Activities

File Opened

File Read

Process Activities

Process Forked

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Listening

Socket Connecting

Chronological Activities

Analysis Process: Fantazy.spc.elf PID: 6212, Parent PID: 6209

General

File Activities

File Opened

Linux Analysis Report
Fantazy.spc.elf