Linux Analysis Report
firmware.i686.elf

Overview

General Information

Sample name:	firmware.i686.elf
Analysis ID:	1502462
MD5:	2cb5cdc62ece570034995dd68e7ce0b8
SHA1:	4b67160529b4cfb453edb044d1bbc72354a8a6fd
SHA256:	8d23109f3365229684e31928b371aecb9d3fbd1e70dad90f27faf620a51be444
Tags:	elffirmware
Infos:

Detection

Score:	96
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Drops files in suspicious directories

Executes the "crontab" command typically for achieving persistence

Machine Learning detection for dropped file

Machine Learning detection for sample

Sample tries to persist itself using cron

Tries to resolve many domain names, but no domain seems valid

Connects to many different domains

Detected TCP or UDP traffic on non-standard ports

Executes commands using a shell command-line interpreter

Executes massive DNS lookups (> 100)

Executes the "hostname" command used to retrieve the computers name

HTTP GET or POST without a user agent

Sample has stripped symbol table

Sample tries to set the executable flag

Writes ELF files to disk

Yara signature match

Classification

Signatures

AV Detection

Antivirus / Scanner detection for submitted sample

Source: firmware.i686.elf

Avira: detected

Antivirus detection for dropped file

Source: /usr/bin/myirnra

Avira: detection malicious, Label: EXP/ELF.Mirai.L

Multi AV Scanner detection for submitted file

Source: firmware.i686.elf	ReversingLabs: Detection: 55%
Source: firmware.i686.elf	Virustotal: Detection: 55%			Perma Link

Machine Learning detection for dropped file

Source: /usr/bin/myirnra

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: firmware.i686.elf

Joe Sandbox ML: detected

Networking

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: www.akak.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.beac.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lkcb.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: ffle.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: aedb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.ebak.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: llba.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.kcld.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eaad.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.baeb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ebak.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.llkf.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkca.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.fkke.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.fefl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cfle.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: blll.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: ebak.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: fdad.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: beac.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fkke.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.kcfl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aekd.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.kkca.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aekd.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.abba.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: leba.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: llba.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.llba.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cfkk.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.fdad.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.klcb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.caal.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.blll.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.eaad.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.alaa.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cbbl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.fdad.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lldb.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.fcee.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: beac.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: kcld.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.lldb.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: abkl.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: lkcb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.cfkk.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fefl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aaec.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.beac.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.lldk.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aedb.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: llkf.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cfle.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.kabf.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.cfle.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.cfle.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aedb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.lkcb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aakd.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aakd.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.kkca.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: cbll.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.cbll.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.cbbl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fcee.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.abkl.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: kcfl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lldk.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akak.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.leba.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.ffle.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kabf.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aaad.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.ebak.ru replaycode: Name error (3)

Connects to many different domains

Source: unknown

Network traffic detected: DNS query count 276

Detected TCP or UDP traffic on non-standard ports

Source: global traffic	TCP traffic: 192.168.2.15:49380 -> 48.46.49.0:8202
Source: global traffic	TCP traffic: 192.168.2.15:50088 -> 48.46.49.51:0
Source: global traffic	TCP traffic: 192.168.2.15:43220 -> 48.46.50.53:0
Source: global traffic	TCP traffic: 192.168.2.15:55276 -> 8.8.8.8:81

Executes massive DNS lookups (> 100)

Source: global traffic

DNS traffic detected: number of DNS queries: 276

HTTP GET or POST without a user agent

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.198.43Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 81.200.116.145Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 81.200.116.145Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.120.250.185Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.156.201.102Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 151.101.65.195Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 151.101.1.195Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close

Source: unknown	TCP traffic detected without corresponding DNS query: 38.96.64.194
Source: unknown	TCP traffic detected without corresponding DNS query: 136.113.0.3
Source: unknown	TCP traffic detected without corresponding DNS query: 90.155.29.21
Source: unknown	TCP traffic detected without corresponding DNS query: 57.14.103.92
Source: unknown	TCP traffic detected without corresponding DNS query: 207.178.80.81
Source: unknown	TCP traffic detected without corresponding DNS query: 93.225.172.157
Source: unknown	TCP traffic detected without corresponding DNS query: 25.208.0.53
Source: unknown	TCP traffic detected without corresponding DNS query: 78.86.146.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.39.32.52
Source: unknown	TCP traffic detected without corresponding DNS query: 199.213.197.206
Source: unknown	TCP traffic detected without corresponding DNS query: 39.196.109.136
Source: unknown	TCP traffic detected without corresponding DNS query: 181.61.71.171
Source: unknown	TCP traffic detected without corresponding DNS query: 188.16.184.179
Source: unknown	TCP traffic detected without corresponding DNS query: 157.177.76.127
Source: unknown	TCP traffic detected without corresponding DNS query: 66.108.11.141
Source: unknown	TCP traffic detected without corresponding DNS query: 192.204.120.218
Source: unknown	TCP traffic detected without corresponding DNS query: 2.234.17.40
Source: unknown	TCP traffic detected without corresponding DNS query: 44.108.142.0
Source: unknown	TCP traffic detected without corresponding DNS query: 205.25.209.230
Source: unknown	TCP traffic detected without corresponding DNS query: 78.14.125.236
Source: unknown	TCP traffic detected without corresponding DNS query: 32.184.249.120
Source: unknown	TCP traffic detected without corresponding DNS query: 156.50.25.234
Source: unknown	TCP traffic detected without corresponding DNS query: 71.224.115.115
Source: unknown	TCP traffic detected without corresponding DNS query: 155.216.208.247
Source: unknown	TCP traffic detected without corresponding DNS query: 220.25.170.101
Source: unknown	TCP traffic detected without corresponding DNS query: 20.197.36.169
Source: unknown	TCP traffic detected without corresponding DNS query: 92.235.125.168
Source: unknown	TCP traffic detected without corresponding DNS query: 128.127.61.241
Source: unknown	TCP traffic detected without corresponding DNS query: 81.203.161.72
Source: unknown	TCP traffic detected without corresponding DNS query: 126.58.131.220
Source: unknown	TCP traffic detected without corresponding DNS query: 154.98.200.154
Source: unknown	TCP traffic detected without corresponding DNS query: 180.9.234.47
Source: unknown	TCP traffic detected without corresponding DNS query: 101.119.247.109
Source: unknown	TCP traffic detected without corresponding DNS query: 136.224.94.159
Source: unknown	TCP traffic detected without corresponding DNS query: 72.219.215.120
Source: unknown	TCP traffic detected without corresponding DNS query: 66.62.144.2
Source: unknown	TCP traffic detected without corresponding DNS query: 142.157.36.203
Source: unknown	TCP traffic detected without corresponding DNS query: 205.41.242.15
Source: unknown	TCP traffic detected without corresponding DNS query: 104.24.36.64
Source: unknown	TCP traffic detected without corresponding DNS query: 222.232.49.190
Source: unknown	TCP traffic detected without corresponding DNS query: 211.30.197.113
Source: unknown	TCP traffic detected without corresponding DNS query: 145.56.129.134
Source: unknown	TCP traffic detected without corresponding DNS query: 31.20.212.158
Source: unknown	TCP traffic detected without corresponding DNS query: 107.7.235.153
Source: unknown	TCP traffic detected without corresponding DNS query: 60.19.214.95
Source: unknown	TCP traffic detected without corresponding DNS query: 131.98.127.207
Source: unknown	TCP traffic detected without corresponding DNS query: 126.56.0.89
Source: unknown	TCP traffic detected without corresponding DNS query: 25.91.219.137
Source: unknown	TCP traffic detected without corresponding DNS query: 79.142.108.212
Source: unknown	TCP traffic detected without corresponding DNS query: 12.173.29.24

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.198.43Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 81.200.116.145Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 81.200.116.145Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.120.250.185Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.156.201.102Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 151.101.65.195Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 151.101.1.195Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close

Source: global traffic	DNS traffic detected: DNS query: akak.ru
Source: global traffic	DNS traffic detected: DNS query: www.akak.ru
Source: global traffic	DNS traffic detected: DNS query: ekac.ru
Source: global traffic	DNS traffic detected: DNS query: www.ekac.ru
Source: global traffic	DNS traffic detected: DNS query: ecda.ru
Source: global traffic	DNS traffic detected: DNS query: www.ecda.ru
Source: global traffic	DNS traffic detected: DNS query: ckea.ru
Source: global traffic	DNS traffic detected: DNS query: www.ckea.ru
Source: global traffic	DNS traffic detected: DNS query: ebak.ru
Source: global traffic	DNS traffic detected: DNS query: www.ebak.ru
Source: global traffic	DNS traffic detected: DNS query: bkfc.ru
Source: global traffic	DNS traffic detected: DNS query: www.bkfc.ru
Source: global traffic	DNS traffic detected: DNS query: baea.ru
Source: global traffic	DNS traffic detected: DNS query: www.baea.ru
Source: global traffic	DNS traffic detected: DNS query: cdaf.ru
Source: global traffic	DNS traffic detected: DNS query: www.cdaf.ru
Source: global traffic	DNS traffic detected: DNS query: edce.ru
Source: global traffic	DNS traffic detected: DNS query: www.edce.ru
Source: global traffic	DNS traffic detected: DNS query: aaec.ru
Source: global traffic	DNS traffic detected: DNS query: www.aaec.ru
Source: global traffic	DNS traffic detected: DNS query: fdbk.ru
Source: global traffic	DNS traffic detected: DNS query: www.fdbk.ru
Source: global traffic	DNS traffic detected: DNS query: kece.ru
Source: global traffic	DNS traffic detected: DNS query: www.kece.ru
Source: global traffic	DNS traffic detected: DNS query: alea.ru
Source: global traffic	DNS traffic detected: DNS query: www.alea.ru
Source: global traffic	DNS traffic detected: DNS query: ffaa.ru
Source: global traffic	DNS traffic detected: DNS query: www.ffaa.ru
Source: global traffic	DNS traffic detected: DNS query: leba.ru
Source: global traffic	DNS traffic detected: DNS query: www.leba.ru
Source: global traffic	DNS traffic detected: DNS query: aall.ru
Source: global traffic	DNS traffic detected: DNS query: www.aall.ru
Source: global traffic	DNS traffic detected: DNS query: akkk.ru
Source: global traffic	DNS traffic detected: DNS query: www.akkk.ru
Source: global traffic	DNS traffic detected: DNS query: bkdc.ru
Source: global traffic	DNS traffic detected: DNS query: www.bkdc.ru
Source: global traffic	DNS traffic detected: DNS query: dfeb.ru
Source: global traffic	DNS traffic detected: DNS query: www.dfeb.ru
Source: global traffic	DNS traffic detected: DNS query: llba.ru
Source: global traffic	DNS traffic detected: DNS query: www.llba.ru
Source: global traffic	DNS traffic detected: DNS query: eaec.ru
Source: global traffic	DNS traffic detected: DNS query: www.eaec.ru
Source: global traffic	DNS traffic detected: DNS query: caal.ru
Source: global traffic	DNS traffic detected: DNS query: www.caal.ru
Source: global traffic	DNS traffic detected: DNS query: balf.ru
Source: global traffic	DNS traffic detected: DNS query: www.balf.ru
Source: global traffic	DNS traffic detected: DNS query: bklk.ru
Source: global traffic	DNS traffic detected: DNS query: www.bklk.ru
Source: global traffic	DNS traffic detected: DNS query: bkkd.ru
Source: global traffic	DNS traffic detected: DNS query: www.bkkd.ru
Source: global traffic	DNS traffic detected: DNS query: lacb.ru
Source: global traffic	DNS traffic detected: DNS query: www.lacb.ru
Source: global traffic	DNS traffic detected: DNS query: dfbe.ru
Source: global traffic	DNS traffic detected: DNS query: www.dfbe.ru
Source: global traffic	DNS traffic detected: DNS query: aekd.ru
Source: global traffic	DNS traffic detected: DNS query: www.aekd.ru
Source: global traffic	DNS traffic detected: DNS query: lkcb.ru
Source: global traffic	DNS traffic detected: DNS query: www.lkcb.ru
Source: global traffic	DNS traffic detected: DNS query: dakk.ru
Source: global traffic	DNS traffic detected: DNS query: www.dakk.ru
Source: global traffic	DNS traffic detected: DNS query: ffka.ru
Source: global traffic	DNS traffic detected: DNS query: www.ffka.ru
Source: global traffic	DNS traffic detected: DNS query: eafl.ru
Source: global traffic	DNS traffic detected: DNS query: www.eafl.ru
Source: global traffic	DNS traffic detected: DNS query: ebfa.ru
Source: global traffic	DNS traffic detected: DNS query: www.ebfa.ru
Source: global traffic	DNS traffic detected: DNS query: bead.ru
Source: global traffic	DNS traffic detected: DNS query: www.bead.ru
Source: global traffic	DNS traffic detected: DNS query: llkf.ru
Source: global traffic	DNS traffic detected: DNS query: www.llkf.ru
Source: global traffic	DNS traffic detected: DNS query: klcb.ru
Source: global traffic	DNS traffic detected: DNS query: www.klcb.ru
Source: global traffic	DNS traffic detected: DNS query: kadb.ru
Source: global traffic	DNS traffic detected: DNS query: www.kadb.ru
Source: global traffic	DNS traffic detected: DNS query: baac.ru
Source: global traffic	DNS traffic detected: DNS query: www.baac.ru
Source: global traffic	DNS traffic detected: DNS query: bdfa.ru
Source: global traffic	DNS traffic detected: DNS query: www.bdfa.ru
Source: global traffic	DNS traffic detected: DNS query: kkca.ru
Source: global traffic	DNS traffic detected: DNS query: www.kkca.ru
Source: global traffic	DNS traffic detected: DNS query: fdfa.ru
Source: global traffic	DNS traffic detected: DNS query: www.fdfa.ru
Source: global traffic	DNS traffic detected: DNS query: kalb.ru
Source: global traffic	DNS traffic detected: DNS query: www.kalb.ru
Source: global traffic	DNS traffic detected: DNS query: keba.ru
Source: global traffic	DNS traffic detected: DNS query: www.keba.ru
Source: global traffic	DNS traffic detected: DNS query: lafc.ru
Source: global traffic	DNS traffic detected: DNS query: www.lafc.ru
Source: global traffic	DNS traffic detected: DNS query: lldk.ru
Source: global traffic	DNS traffic detected: DNS query: www.lldk.ru
Source: global traffic	DNS traffic detected: DNS query: akfb.ru
Source: global traffic	DNS traffic detected: DNS query: www.akfb.ru
Source: global traffic	DNS traffic detected: DNS query: ckef.ru
Source: global traffic	DNS traffic detected: DNS query: www.ckef.ru
Source: global traffic	DNS traffic detected: DNS query: flad.ru
Source: global traffic	DNS traffic detected: DNS query: www.flad.ru
Source: global traffic	DNS traffic detected: DNS query: abkb.ru
Source: global traffic	DNS traffic detected: DNS query: www.abkb.ru
Source: global traffic	DNS traffic detected: DNS query: fefl.ru
Source: global traffic	DNS traffic detected: DNS query: www.fefl.ru

System Summary

Malicious sample detected (through community Yara rule)

Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_24c5b7d6 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_24c5b7d6 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_24c5b7d6 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_24c5b7d6 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth

Sample has stripped symbol table

Source: ELF static info symbol of initial sample

.symtab present: no

Yara signature match

Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_24c5b7d6 reference_sample = 7c2f8ba2d6f1e67d1b4a3a737a449429c322d945d49dafb9e8c66608ab2154c4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3411b624f02dd1c7a0e663f1f119c8d5e47a81892bb7c445b7695c605b0b8ee2, id = 24c5b7d6-1aa8-4d8e-9983-c7234f57c3de, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_24c5b7d6 reference_sample = 7c2f8ba2d6f1e67d1b4a3a737a449429c322d945d49dafb9e8c66608ab2154c4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3411b624f02dd1c7a0e663f1f119c8d5e47a81892bb7c445b7695c605b0b8ee2, id = 24c5b7d6-1aa8-4d8e-9983-c7234f57c3de, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_24c5b7d6 reference_sample = 7c2f8ba2d6f1e67d1b4a3a737a449429c322d945d49dafb9e8c66608ab2154c4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3411b624f02dd1c7a0e663f1f119c8d5e47a81892bb7c445b7695c605b0b8ee2, id = 24c5b7d6-1aa8-4d8e-9983-c7234f57c3de, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_24c5b7d6 reference_sample = 7c2f8ba2d6f1e67d1b4a3a737a449429c322d945d49dafb9e8c66608ab2154c4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3411b624f02dd1c7a0e663f1f119c8d5e47a81892bb7c445b7695c605b0b8ee2, id = 24c5b7d6-1aa8-4d8e-9983-c7234f57c3de, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: dropped/myirnra, type: DROPPED	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b

Source: classification engine

Classification label: mal96.troj.evad.linELF@0/24@2492/0

Persistence and Installation Behavior

Executes the "crontab" command typically for achieving persistence

Source: /bin/sh (PID: 5659)	Crontab executable: /usr/bin/crontab -> crontab /var/spool/cron/crontabs/root			Jump to behavior
Source: /bin/sh (PID: 5658)	Crontab executable: /usr/bin/crontab -> crontab /var/spool/cron/crontabs/root			Jump to behavior

Sample tries to persist itself using cron

Source: /tmp/firmware.i686.elf (PID: 5635)	File: /var/spool/cron/crontabs/root	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5636)	File: /var/spool/cron/crontabs/root	Jump to behavior
Source: /usr/bin/crontab (PID: 5659)	File: /var/spool/cron/crontabs/tmp.tiEfc5	Jump to behavior
Source: /usr/bin/crontab (PID: 5659)	File: /var/spool/cron/crontabs/root	Jump to behavior
Source: /usr/bin/crontab (PID: 5658)	File: /var/spool/cron/crontabs/tmp.Y9ZHp2	Jump to behavior
Source: /usr/bin/crontab (PID: 5658)	File: /var/spool/cron/crontabs/root	Jump to behavior

Executes commands using a shell command-line interpreter

Source: /tmp/firmware.i686.elf (PID: 5646)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5671)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5700)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5709)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5719)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5729)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5738)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5748)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5755)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5765)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5773)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5783)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5791)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5651)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5662)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5666)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5758)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5657)	Shell command executed: sh -c "crontab /var/spool/cron/crontabs/root"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5644)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5672)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5701)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5708)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5720)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5730)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5737)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5746)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5754)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5764)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5775)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5785)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5793)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5649)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5664)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5714)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5656)	Shell command executed: sh -c "crontab /var/spool/cron/crontabs/root"	Jump to behavior

Executes the "hostname" command used to retrieve the computers name

Source: /bin/sh (PID: 5652)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5673)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5702)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5710)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5721)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5732)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5740)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5749)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5757)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5767)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5774)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5784)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5792)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5653)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5663)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5667)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5759)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5654)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5674)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5703)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5711)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5722)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5731)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5739)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5747)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5756)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5766)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5776)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5786)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5794)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5655)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5665)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5715)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior

Sample tries to set the executable flag

Source: /tmp/firmware.i686.elf (PID: 5635)	File: /bin/myirnra (bits: - usr: rx grp: rx all: rwx)			Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5636)	File: /bin/myirnra (bits: - usr: rx grp: rx all: rwx)			Jump to behavior

Writes ELF files to disk

Source: /tmp/firmware.i686.elf (PID: 5635)	File written: /usr/bin/myirnra
Source: /tmp/firmware.i686.elf (PID: 5636)	File written: /usr/bin/myirnra			Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Drops files in suspicious directories

Source: /tmp/firmware.i686.elf (PID: 5635)	File: /usr/bin/myirnra
Source: /tmp/firmware.i686.elf (PID: 5636)	File: /usr/bin/myirnra			Jump to dropped file

Screenshots

No Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.66.215.63	unknown	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
152.193.145.120	unknown	United States	701	UUNETUS	false
206.99.213.220	unknown	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
178.111.0.90	unknown	United Kingdom	12576	EELtdGB	false
82.254.63.89	unknown	France	12322	PROXADFR	false
97.132.71.227	unknown	United States	6167	CELLCO-PARTUS	false
82.139.19.84	unknown	Poland	29314	VECTRANET-ASAlZwyciestwa25381-525GdyniaPolandPL	false
36.138.53.66	unknown	China	56044	CMNET-AS-LIAONINGChinaMobilecommunicationscorporationC	false
137.91.147.18	unknown	United States	33350	APS---ARIZONA-PUBLIC-SERVICE-CORPORATIONUS	false
98.169.236.218	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
137.172.32.60	unknown	Australia	3549	LVLT-3549US	false
78.90.114.223	unknown	Bulgaria	35141	MEGALANBG	false
197.74.23.196	unknown	South Africa	16637	MTNNS-ASZA	false
174.40.156.240	unknown	United States	6167	CELLCO-PARTUS	false
128.226.179.163	unknown	United States	4190	BINGHAMTON-UUS	false
186.92.151.159	unknown	Venezuela	8048	CANTVServiciosVenezuelaVE	false
48.198.247.20	unknown	United States	2686	ATGS-MMD-ASUS	false
119.255.209.43	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
165.254.178.121	unknown	United States	174	COGENT-174US	false
206.156.198.186	unknown	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
140.65.94.15	unknown	United States	23700	FASTNET-AS-IDLinknet-FastnetASNID	false
31.150.140.37	unknown	Germany	9145	EWETELCloppenburgerStrasse310DE	false
68.4.66.139	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
139.111.106.20	unknown	Norway	5619	EVRY-NO	false
82.41.175.78	unknown	United Kingdom	5089	NTLGB	false
116.83.154.239	unknown	Japan	2510	INFOWEBFUJITSULIMITEDJP	false
35.32.155.24	unknown	United States	36375	UMICH-AS-5US	false
43.103.185.11	unknown	Japan	4249	LILLY-ASUS	false
199.19.226.246	unknown	United States	53667	PONYNETUS	false
184.61.245.103	unknown	United States	4181	TDS-ASUS	false
98.113.155.255	unknown	United States	701	UUNETUS	false
86.84.176.161	unknown	Netherlands	1136	KPNKPNNationalEU	false
175.234.255.110	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
37.125.147.153	unknown	Saudi Arabia	35819	MOBILY-ASEtihadEtisalatCompanyMobilySA	false
120.73.10.239	unknown	Korea Republic of	9761	KUMHO-ASKUMHOKR	false
185.65.144.50	unknown	United Kingdom	201358	FNZ-UKGB	false
106.35.116.203	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
123.16.108.8	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
190.100.12.214	unknown	Chile	22047	VTRBANDAANCHASACL	false
90.230.170.29	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
53.68.184.32	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
80.5.214.186	unknown	United Kingdom	5089	NTLGB	false
27.98.176.63	unknown	Japan	10010	TOKAITOKAICommunicationsCorporationJP	false
140.223.47.143	unknown	United States	701	UUNETUS	false
57.238.159.120	unknown	Belgium	2686	ATGS-MMD-ASUS	false
199.213.215.123	unknown	Canada	393952	GOANETCA	false
88.227.117.41	unknown	Turkey	9121	TTNETTR	false
223.178.158.97	unknown	India	45609	BHARTI-MOBILITY-AS-APBhartiAirtelLtdASforGPRSService	false
180.213.17.105	unknown	China	17638	CHINATELECOM-TJ-AS-APASNforTIANJINProvincialNetofCT	false
51.238.2.190	unknown	United Kingdom	2686	ATGS-MMD-ASUS	false
85.172.70.234	unknown	Russian Federation	25490	STC-ASRU	false
183.243.36.173	unknown	China	56048	CMNET-BEIJING-APChinaMobileCommunicaitonsCorporationCN	false
68.241.129.226	unknown	United States	10507	SPCSUS	false
132.79.16.137	unknown	United States	306	DNIC-ASBLK-00306-00371US	false
161.69.89.13	unknown	United States	7754	MCAFEEUS	false
85.43.80.219	unknown	Italy	3269	ASN-IBSNAZIT	false
163.153.156.52	unknown	United States	22693	NERICUS	false
147.21.251.179	unknown	United States	10796	TWC-10796-MIDWESTUS	false
194.46.141.120	unknown	United Kingdom	16032	TIBUS-ULTRAFASTTIBUS-ULTRAFASTGB	false
117.186.47.19	unknown	China	24400	CMNET-V4SHANGHAI-AS-APShanghaiMobileCommunicationsCoLt	false
217.104.228.180	unknown	Netherlands	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
211.144.2.13	unknown	China	4713	OCNNTTCommunicationsCorporationJP	false
79.234.215.69	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
155.212.41.159	unknown	United States	7029	WINDSTREAMUS	false
172.144.206.253	unknown	United States	7018	ATT-INTERNET4US	false
49.202.62.57	unknown	India	4804	MPX-ASMicroplexPTYLTDAU	false
104.199.158.91	unknown	United States	15169	GOOGLEUS	false
139.255.236.171	unknown	Indonesia	9905	LINKNET-ID-APLinknetASNID	false
81.43.97.141	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
72.228.47.168	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
186.78.78.180	unknown	Chile	7418	TELEFONICACHILESACL	false
5.154.26.51	unknown	Spain	50563	ONLYCABLE-ASES	false
221.208.190.30	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
128.11.66.136	unknown	United States	17	PURDUEUS	false
8.158.86.58	unknown	Singapore	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
108.224.38.0	unknown	United States	7018	ATT-INTERNET4US	false
112.146.115.227	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
70.235.78.64	unknown	United States	2386	INS-ASUS	false
14.236.47.213	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
222.217.93.104	unknown	China	137693	CHINATELECOM-GUANGXI-NANNING-IDCCHINATELECOMGuangxiNannin	false
154.15.213.121	unknown	Switzerland	3257	GTT-BACKBONEGTTDE	false
123.1.163.35	unknown	Hong Kong	17444	NWT-AS-APASnumberforNewWorldTelephoneLtdHK	false
160.36.255.183	unknown	United States	3450	UTKUS	false
50.55.21.131	unknown	United States	27017	ZIPLY-FIBER-LEGACY-ASNUS	false
176.97.113.111	unknown	Ukraine	6698	ARCHERNETRU	false
135.111.123.115	unknown	United States	10455	LUCENT-CIOUS	false
118.38.253.220	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
20.222.27.101	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
119.43.129.90	unknown	India	17816	CHINA169-GZChinaUnicomIPnetworkChina169Guangdongprovi	false
23.133.38.25	unknown	Reserved	393945	ENPT-I-15US	false
60.95.78.58	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
81.23.46.150	unknown	France	34863	HEXANETFR	false
147.190.29.115	unknown	United States	786	JANETJiscServicesLimitedGB	false
100.194.0.61	unknown	United States	21928	T-MOBILE-AS21928US	false
181.122.141.219	unknown	Paraguay	23201	TelecelSAPY	false
188.144.201.198	unknown	Germany	12389	ROSTELECOM-ASRU	false
25.114.228.155	unknown	United Kingdom	7922	COMCAST-7922US	false
123.8.97.82	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
93.43.64.29	unknown	Italy	12874	FASTWEBIT	false
48.135.253.233	unknown	United States	2686	ATGS-MMD-ASUS	false

Contacted Domains

Name	IP	Active
kece.ru	138.68.84.37	true
ebfa.ru	31.31.205.163	true
ecda.ru	62.122.170.171	true
www.ckea.ru	194.120.116.196	true
www.dack.ru	62.122.170.171	true
kkfk.ru	194.58.112.165	true
www.kkfk.ru	194.58.112.165	true
cflb.ru	90.156.201.19	true
www.cflb.ru	90.156.201.70	true
www.ebfa.ru	31.31.205.163	true
www.allk.ru	185.189.15.13	true
ckef.ru	31.31.198.43	true
fcll.ru	185.215.4.61	true
www.fdbk.ru	62.122.170.171	true
bbda.ru	81.200.116.145	true
www.abkb.ru	95.216.24.109	true
baff.ru	178.208.83.16	true
www.bkfc.ru	188.114.96.3	true
cdke.ru	91.193.180.124	true
www.kece.ru	138.68.84.37	true
abkb.ru	95.216.24.109	true
www.ecda.ru	62.122.170.171	true
www.abca.ru	90.188.239.74	true
dack.ru	62.122.170.171	true
ckea.ru	45.159.211.121	true
www.aeal.ru	31.31.205.163	true
acaa.ru	92.53.96.137	true
www.lafc.ru	62.122.170.171	true
abca.ru	90.188.239.74	true
www.cdke.ru	91.193.180.124	true
dfeb.ru	31.31.205.163	true
www.leea.ru	31.31.205.31	true
akkk.ru	194.58.112.165	true
www.lkca.ru	62.122.170.171	true
www.kalb.ru	62.122.170.171	true
ekac.ru	62.122.170.171	true
www.aalf.ru	62.122.170.171	true
aeal.ru	31.31.205.163	true
www.kfaf.ru	194.58.112.165	true
aaae.ru	31.177.76.145	true
www.kaka.ru	151.101.1.195	true
allk.ru	185.189.15.13	true
eaec.ru	62.122.170.171	true
clce.ru	5.188.31.142	true
lafa.ru	89.108.116.108	true
www.kdle.ru	31.31.205.163	true
fdfa.ru	159.69.115.63	true
www.ecck.ru	185.114.245.193	true
www.lacb.ru	62.122.170.171	true
www.kefe.ru	31.177.76.145	true
cbfd.ru	31.31.205.163	true
www.bbda.ru	81.200.116.145	true
www.cdaf.ru	194.35.119.93	true
kaec.ru	62.122.170.171	true
www.clce.ru	5.188.31.142	true
www.dcfa.ru	62.122.170.171	true
cdlk.ru	188.114.97.3	true
www.baea.ru	31.31.205.163	true
bkkd.ru	77.223.111.18	true
www.efeb.ru	62.122.170.171	true
ccbd.ru	62.122.170.171	true
www.bklk.ru	194.58.112.165	true
stalker.bkdc.ru	84.42.40.126	true
www.alad.ru	92.53.96.37	true
www.bead.ru	62.122.170.171	true
www.kaec.ru	62.122.170.171	true
www.ckda.ru	62.122.170.171	true
baea.ru	31.31.205.163	true
www.edla.ru	31.31.205.163	true
www.eclf.ru	159.69.115.63	true
www.eddc.ru	31.31.205.163	true
www.ckdl.ru	87.236.16.242	true
www.keal.ru	62.122.170.171	true
ckda.ru	62.122.170.171	true
bebc.ru	185.135.82.191	true
www.ddae.ru	194.58.112.165	true
www.cada.ru	62.122.170.171	true
www.bakd.ru	194.58.112.174	true
www.elkd.ru	62.122.170.171	true
addl.ru	62.122.170.171	true
www.bdfa.ru	92.53.96.216	true
bklk.ru	194.58.112.165	true
www.ekec.ru	5.253.60.47	true
www.baac.ru	62.122.170.171	true
acad.ru	176.31.179.191	true
dakk.ru	62.122.170.171	true
www.caef.ru	31.31.205.163	true
www.ffaa.ru	194.67.71.137	true
eclf.ru	159.69.115.63	true
ffka.ru	194.58.112.165	true
ecck.ru	185.114.245.193	true
www.daea.ru	159.69.115.63	true
alea.ru	77.222.62.180	true
lafc.ru	62.122.170.171	true
kefe.ru	31.177.76.145	true
cacc.ru	62.122.170.171	true
www.kadb.ru	217.25.92.227	true
aebd.ru	31.31.205.163	true
lkca.ru	62.122.170.171	true
www.dfeb.ru	31.31.205.163	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://188.120.250.185/	false	Avira URL Cloud: safe	unknown
http://92.53.96.216/	false	Avira URL Cloud: safe	unknown
http://188.114.97.3/	false	Avira URL Cloud: safe	unknown
http://81.200.116.145/	false	Avira URL Cloud: safe	unknown
http://185.114.245.193/	false	Avira URL Cloud: safe	unknown
http://31.177.80.70/	false	Avira URL Cloud: safe	unknown
http://91.226.31.93/	false	Avira URL Cloud: safe	unknown
http://188.114.96.3/	false	Avira URL Cloud: safe	unknown
http://185.135.82.191/	false	Avira URL Cloud: safe	unknown
http://5.188.30.5/	false	Avira URL Cloud: safe	unknown
http://95.216.24.109/	false	Avira URL Cloud: safe	unknown
http://194.35.119.93/	false	Avira URL Cloud: safe	unknown
http://31.31.198.43/	false	Avira URL Cloud: safe	unknown
http://62.122.170.171/	false	Avira URL Cloud: safe	unknown
http://91.193.180.124/	false	Avira URL Cloud: safe	unknown
http://90.188.239.74/	false	Avira URL Cloud: safe	unknown
http://138.68.84.37/	false	Avira URL Cloud: safe	unknown
http://5.253.60.47/	false	Avira URL Cloud: safe	unknown
http://188.114.97.9/	false	Avira URL Cloud: safe	unknown
http://91.226.31.82/	false	Avira URL Cloud: safe	unknown
http://31.31.205.31/	false	Avira URL Cloud: safe	unknown
http://94.228.126.97/	false	Avira URL Cloud: safe	unknown
http://37.193.7.55/	false	Avira URL Cloud: safe	unknown
http://176.31.179.191/	false	Avira URL Cloud: safe	unknown
http://185.189.15.13/	false	Avira URL Cloud: safe	unknown
http://194.67.71.9/	false	Avira URL Cloud: safe	unknown
http://159.69.115.63/	false	Avira URL Cloud: safe	unknown
http://151.101.1.195/	false	Avira URL Cloud: safe	unknown
http://31.177.76.145/	false	Avira URL Cloud: safe	unknown
http://77.223.111.18/	false	Avira URL Cloud: safe	unknown
http://178.208.83.16/	false	Avira URL Cloud: safe	unknown
http://176.99.9.90/	false	Avira URL Cloud: safe	unknown
http://194.67.71.29/	false	Avira URL Cloud: safe	unknown
http://92.53.96.137/	false	Avira URL Cloud: safe	unknown
http://185.215.4.61/	false	Avira URL Cloud: safe	unknown
http://151.101.65.195/	false	Avira URL Cloud: safe	unknown
http://185.133.42.146/	false	Avira URL Cloud: safe	unknown
http://194.58.112.165/	false	Avira URL Cloud: safe	unknown
http://90.156.201.19/	false	Avira URL Cloud: safe	unknown
http://188.114.96.9/	false	Avira URL Cloud: safe	unknown
http://87.236.16.242/	false	Avira URL Cloud: safe	unknown
http://89.108.116.108/	false	Avira URL Cloud: safe	unknown
http://217.25.92.227/	false	Avira URL Cloud: safe	unknown
http://157.230.19.197/	false	Avira URL Cloud: safe	unknown
http://31.177.76.70/	false	Avira URL Cloud: safe	unknown
http://90.156.201.70/	false	Avira URL Cloud: safe	unknown
http://194.58.112.174/	false	Avira URL Cloud: safe	unknown
http://84.42.40.126/	false	Avira URL Cloud: safe	unknown
http://90.156.201.102/	false	Avira URL Cloud: safe	unknown
http://31.31.205.163/	false	Avira URL Cloud: safe	unknown
http://92.53.96.37/	false	Avira URL Cloud: safe	unknown
http://77.222.62.180/	false	Avira URL Cloud: safe	unknown
http://5.188.31.142/	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
/etc/allah_is_prick.html	HTML document, ASCII text, with very long lines (360), with no line terminators	3A2D9EE3D20A76ED6AF3F066BE482B64	8EE4338DF17D6DBBD7CFEC1AA0ABBD6A7B8081F6	9D542210472A30C5142DF1F1AC2A25D72A453C5DFAD27B09F805691A2E936082
/etc/d	ASCII text	CBC73D1A9259A8104C2A3041A0CF7E53	DDF428D33999256CFB284485F7D8A2A5941360FF	EC7AFC3DC77DA717E53EA21B99220EC2801EE8E6C22229A58A33C5B60EDF0A61
/home/allah_is_prick.html	HTML document, ASCII text, with very long lines (360), with no line terminators	3A2D9EE3D20A76ED6AF3F066BE482B64	8EE4338DF17D6DBBD7CFEC1AA0ABBD6A7B8081F6	9D542210472A30C5142DF1F1AC2A25D72A453C5DFAD27B09F805691A2E936082
/mnt/allah_is_prick.html	HTML document, ASCII text, with very long lines (360), with no line terminators	3A2D9EE3D20A76ED6AF3F066BE482B64	8EE4338DF17D6DBBD7CFEC1AA0ABBD6A7B8081F6	9D542210472A30C5142DF1F1AC2A25D72A453C5DFAD27B09F805691A2E936082
/root/allah_is_prick.html	HTML document, ASCII text, with very long lines (360), with no line terminators	3A2D9EE3D20A76ED6AF3F066BE482B64	8EE4338DF17D6DBBD7CFEC1AA0ABBD6A7B8081F6	9D542210472A30C5142DF1F1AC2A25D72A453C5DFAD27B09F805691A2E936082
/tmp/allah_is_prick.html	HTML document, ASCII text, with very long lines (11520), with no line terminators	5FDE87097AB31989263854B0DD4CD807	2A052A44E4DF8B48A6448D7C14A5A17B077476D2	919F9FAFBCFBDD200F2A0A7FEDDAB7F3D1320B2FA56A83BF9817E92191FB341B
/usr/bin/myirnra	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped	2CB5CDC62ECE570034995DD68E7CE0B8	4B67160529B4CFB453EDB044D1BBC72354A8A6FD	8D23109F3365229684E31928B371AECB9D3FBD1E70DAD90F27FAF620A51BE444
/var/allah_is_prick.html	HTML document, ASCII text, with very long lines (360), with no line terminators	3A2D9EE3D20A76ED6AF3F066BE482B64	8EE4338DF17D6DBBD7CFEC1AA0ABBD6A7B8081F6	9D542210472A30C5142DF1F1AC2A25D72A453C5DFAD27B09F805691A2E936082
/var/spool/cron/crontabs/root	ASCII text	FC64446F4EC76AE81030E20EF7F91541	EA7D6304DE2D9BEC01FCFBC74D19B06CDF918A49	2D0216FF142D7B2D91DA908B885480CC39A94F32727351FA1E2B2F212516B46D
/var/spool/cron/crontabs/tmp.Y9ZHp2	ASCII text	AA49FD62D3A3A68D1D36B9AA2E61C3B8	D2ED0F5E8B39F3E6A7599C48AB927FC82939C62F	FA660C572DF53B686145E78BD119BF8FD820D599360C86821B08106C2B84FE6C
/var/spool/cron/crontabs/tmp.tiEfc5	ASCII text	AA49FD62D3A3A68D1D36B9AA2E61C3B8	D2ED0F5E8B39F3E6A7599C48AB927FC82939C62F	FA660C572DF53B686145E78BD119BF8FD820D599360C86821B08106C2B84FE6C

AV Detection

Antivirus / Scanner detection for submitted sample

Source: firmware.i686.elf

Avira: detected

Antivirus detection for dropped file

Source: /usr/bin/myirnra

Avira: detection malicious, Label: EXP/ELF.Mirai.L

Multi AV Scanner detection for submitted file

Source: firmware.i686.elf	ReversingLabs: Detection: 55%
Source: firmware.i686.elf	Virustotal: Detection: 55%			Perma Link

Machine Learning detection for dropped file

Source: /usr/bin/myirnra

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: firmware.i686.elf

Joe Sandbox ML: detected

Networking

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: www.akak.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.beac.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lkcb.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: ffle.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: aedb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.ebak.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: llba.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.kcld.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eaad.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.baeb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ebak.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.llkf.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkca.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.fkke.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.fefl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cfle.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: blll.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: ebak.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: fdad.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: beac.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fkke.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.kcfl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aekd.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.kkca.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aekd.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.abba.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: leba.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: llba.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.llba.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cfkk.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.fdad.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.klcb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.caal.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.blll.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.eaad.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.alaa.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cbbl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.fdad.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lldb.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.fcee.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: beac.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: kcld.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.lldb.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: abkl.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: lkcb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.cfkk.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fefl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aaec.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.beac.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.lldk.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aedb.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: llkf.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cfle.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.kabf.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.cfle.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.cfle.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aedb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.lkcb.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aakd.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aakd.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.kkca.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: cbll.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.cbll.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.cbbl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fcee.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.abkl.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: kcfl.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lldk.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akak.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.leba.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.ffle.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kabf.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.aaad.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.ebak.ru replaycode: Name error (3)

Connects to many different domains

Source: unknown

Network traffic detected: DNS query count 276

Detected TCP or UDP traffic on non-standard ports

Source: global traffic	TCP traffic: 192.168.2.15:49380 -> 48.46.49.0:8202
Source: global traffic	TCP traffic: 192.168.2.15:50088 -> 48.46.49.51:0
Source: global traffic	TCP traffic: 192.168.2.15:43220 -> 48.46.50.53:0
Source: global traffic	TCP traffic: 192.168.2.15:55276 -> 8.8.8.8:81

Executes massive DNS lookups (> 100)

Source: global traffic

DNS traffic detected: number of DNS queries: 276

HTTP GET or POST without a user agent

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.198.43Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 81.200.116.145Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 81.200.116.145Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.120.250.185Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.156.201.102Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 151.101.65.195Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 151.101.1.195Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close

Source: unknown	TCP traffic detected without corresponding DNS query: 38.96.64.194
Source: unknown	TCP traffic detected without corresponding DNS query: 136.113.0.3
Source: unknown	TCP traffic detected without corresponding DNS query: 90.155.29.21
Source: unknown	TCP traffic detected without corresponding DNS query: 57.14.103.92
Source: unknown	TCP traffic detected without corresponding DNS query: 207.178.80.81
Source: unknown	TCP traffic detected without corresponding DNS query: 93.225.172.157
Source: unknown	TCP traffic detected without corresponding DNS query: 25.208.0.53
Source: unknown	TCP traffic detected without corresponding DNS query: 78.86.146.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.39.32.52
Source: unknown	TCP traffic detected without corresponding DNS query: 199.213.197.206
Source: unknown	TCP traffic detected without corresponding DNS query: 39.196.109.136
Source: unknown	TCP traffic detected without corresponding DNS query: 181.61.71.171
Source: unknown	TCP traffic detected without corresponding DNS query: 188.16.184.179
Source: unknown	TCP traffic detected without corresponding DNS query: 157.177.76.127
Source: unknown	TCP traffic detected without corresponding DNS query: 66.108.11.141
Source: unknown	TCP traffic detected without corresponding DNS query: 192.204.120.218
Source: unknown	TCP traffic detected without corresponding DNS query: 2.234.17.40
Source: unknown	TCP traffic detected without corresponding DNS query: 44.108.142.0
Source: unknown	TCP traffic detected without corresponding DNS query: 205.25.209.230
Source: unknown	TCP traffic detected without corresponding DNS query: 78.14.125.236
Source: unknown	TCP traffic detected without corresponding DNS query: 32.184.249.120
Source: unknown	TCP traffic detected without corresponding DNS query: 156.50.25.234
Source: unknown	TCP traffic detected without corresponding DNS query: 71.224.115.115
Source: unknown	TCP traffic detected without corresponding DNS query: 155.216.208.247
Source: unknown	TCP traffic detected without corresponding DNS query: 220.25.170.101
Source: unknown	TCP traffic detected without corresponding DNS query: 20.197.36.169
Source: unknown	TCP traffic detected without corresponding DNS query: 92.235.125.168
Source: unknown	TCP traffic detected without corresponding DNS query: 128.127.61.241
Source: unknown	TCP traffic detected without corresponding DNS query: 81.203.161.72
Source: unknown	TCP traffic detected without corresponding DNS query: 126.58.131.220
Source: unknown	TCP traffic detected without corresponding DNS query: 154.98.200.154
Source: unknown	TCP traffic detected without corresponding DNS query: 180.9.234.47
Source: unknown	TCP traffic detected without corresponding DNS query: 101.119.247.109
Source: unknown	TCP traffic detected without corresponding DNS query: 136.224.94.159
Source: unknown	TCP traffic detected without corresponding DNS query: 72.219.215.120
Source: unknown	TCP traffic detected without corresponding DNS query: 66.62.144.2
Source: unknown	TCP traffic detected without corresponding DNS query: 142.157.36.203
Source: unknown	TCP traffic detected without corresponding DNS query: 205.41.242.15
Source: unknown	TCP traffic detected without corresponding DNS query: 104.24.36.64
Source: unknown	TCP traffic detected without corresponding DNS query: 222.232.49.190
Source: unknown	TCP traffic detected without corresponding DNS query: 211.30.197.113
Source: unknown	TCP traffic detected without corresponding DNS query: 145.56.129.134
Source: unknown	TCP traffic detected without corresponding DNS query: 31.20.212.158
Source: unknown	TCP traffic detected without corresponding DNS query: 107.7.235.153
Source: unknown	TCP traffic detected without corresponding DNS query: 60.19.214.95
Source: unknown	TCP traffic detected without corresponding DNS query: 131.98.127.207
Source: unknown	TCP traffic detected without corresponding DNS query: 126.56.0.89
Source: unknown	TCP traffic detected without corresponding DNS query: 25.91.219.137
Source: unknown	TCP traffic detected without corresponding DNS query: 79.142.108.212
Source: unknown	TCP traffic detected without corresponding DNS query: 12.173.29.24

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.35.119.93Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 138.68.84.37Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.222.62.180Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.29Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.67.71.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 176.99.9.90Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 84.42.40.126Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.133.42.146Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 77.223.111.18Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.165Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.30.5Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 217.25.92.227Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.216Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 37.193.7.55Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.198.43Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 95.216.24.109Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.188.31.142Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 159.69.115.63Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 92.53.96.137Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 81.200.116.145Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 81.200.116.145Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.122.170.171Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.120.250.185Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.156.201.102Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 194.58.112.174Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 151.101.65.195Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 151.101.1.195Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 5.253.60.47Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.96.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.9Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 188.114.97.3Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.4.61Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.80.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.177.76.70Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.114.245.193Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 31.31.205.163Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 90.188.239.74Connection: close

Source: global traffic	DNS traffic detected: DNS query: akak.ru
Source: global traffic	DNS traffic detected: DNS query: www.akak.ru
Source: global traffic	DNS traffic detected: DNS query: ekac.ru
Source: global traffic	DNS traffic detected: DNS query: www.ekac.ru
Source: global traffic	DNS traffic detected: DNS query: ecda.ru
Source: global traffic	DNS traffic detected: DNS query: www.ecda.ru
Source: global traffic	DNS traffic detected: DNS query: ckea.ru
Source: global traffic	DNS traffic detected: DNS query: www.ckea.ru
Source: global traffic	DNS traffic detected: DNS query: ebak.ru
Source: global traffic	DNS traffic detected: DNS query: www.ebak.ru
Source: global traffic	DNS traffic detected: DNS query: bkfc.ru
Source: global traffic	DNS traffic detected: DNS query: www.bkfc.ru
Source: global traffic	DNS traffic detected: DNS query: baea.ru
Source: global traffic	DNS traffic detected: DNS query: www.baea.ru
Source: global traffic	DNS traffic detected: DNS query: cdaf.ru
Source: global traffic	DNS traffic detected: DNS query: www.cdaf.ru
Source: global traffic	DNS traffic detected: DNS query: edce.ru
Source: global traffic	DNS traffic detected: DNS query: www.edce.ru
Source: global traffic	DNS traffic detected: DNS query: aaec.ru
Source: global traffic	DNS traffic detected: DNS query: www.aaec.ru
Source: global traffic	DNS traffic detected: DNS query: fdbk.ru
Source: global traffic	DNS traffic detected: DNS query: www.fdbk.ru
Source: global traffic	DNS traffic detected: DNS query: kece.ru
Source: global traffic	DNS traffic detected: DNS query: www.kece.ru
Source: global traffic	DNS traffic detected: DNS query: alea.ru
Source: global traffic	DNS traffic detected: DNS query: www.alea.ru
Source: global traffic	DNS traffic detected: DNS query: ffaa.ru
Source: global traffic	DNS traffic detected: DNS query: www.ffaa.ru
Source: global traffic	DNS traffic detected: DNS query: leba.ru
Source: global traffic	DNS traffic detected: DNS query: www.leba.ru
Source: global traffic	DNS traffic detected: DNS query: aall.ru
Source: global traffic	DNS traffic detected: DNS query: www.aall.ru
Source: global traffic	DNS traffic detected: DNS query: akkk.ru
Source: global traffic	DNS traffic detected: DNS query: www.akkk.ru
Source: global traffic	DNS traffic detected: DNS query: bkdc.ru
Source: global traffic	DNS traffic detected: DNS query: www.bkdc.ru
Source: global traffic	DNS traffic detected: DNS query: dfeb.ru
Source: global traffic	DNS traffic detected: DNS query: www.dfeb.ru
Source: global traffic	DNS traffic detected: DNS query: llba.ru
Source: global traffic	DNS traffic detected: DNS query: www.llba.ru
Source: global traffic	DNS traffic detected: DNS query: eaec.ru
Source: global traffic	DNS traffic detected: DNS query: www.eaec.ru
Source: global traffic	DNS traffic detected: DNS query: caal.ru
Source: global traffic	DNS traffic detected: DNS query: www.caal.ru
Source: global traffic	DNS traffic detected: DNS query: balf.ru
Source: global traffic	DNS traffic detected: DNS query: www.balf.ru
Source: global traffic	DNS traffic detected: DNS query: bklk.ru
Source: global traffic	DNS traffic detected: DNS query: www.bklk.ru
Source: global traffic	DNS traffic detected: DNS query: bkkd.ru
Source: global traffic	DNS traffic detected: DNS query: www.bkkd.ru
Source: global traffic	DNS traffic detected: DNS query: lacb.ru
Source: global traffic	DNS traffic detected: DNS query: www.lacb.ru
Source: global traffic	DNS traffic detected: DNS query: dfbe.ru
Source: global traffic	DNS traffic detected: DNS query: www.dfbe.ru
Source: global traffic	DNS traffic detected: DNS query: aekd.ru
Source: global traffic	DNS traffic detected: DNS query: www.aekd.ru
Source: global traffic	DNS traffic detected: DNS query: lkcb.ru
Source: global traffic	DNS traffic detected: DNS query: www.lkcb.ru
Source: global traffic	DNS traffic detected: DNS query: dakk.ru
Source: global traffic	DNS traffic detected: DNS query: www.dakk.ru
Source: global traffic	DNS traffic detected: DNS query: ffka.ru
Source: global traffic	DNS traffic detected: DNS query: www.ffka.ru
Source: global traffic	DNS traffic detected: DNS query: eafl.ru
Source: global traffic	DNS traffic detected: DNS query: www.eafl.ru
Source: global traffic	DNS traffic detected: DNS query: ebfa.ru
Source: global traffic	DNS traffic detected: DNS query: www.ebfa.ru
Source: global traffic	DNS traffic detected: DNS query: bead.ru
Source: global traffic	DNS traffic detected: DNS query: www.bead.ru
Source: global traffic	DNS traffic detected: DNS query: llkf.ru
Source: global traffic	DNS traffic detected: DNS query: www.llkf.ru
Source: global traffic	DNS traffic detected: DNS query: klcb.ru
Source: global traffic	DNS traffic detected: DNS query: www.klcb.ru
Source: global traffic	DNS traffic detected: DNS query: kadb.ru
Source: global traffic	DNS traffic detected: DNS query: www.kadb.ru
Source: global traffic	DNS traffic detected: DNS query: baac.ru
Source: global traffic	DNS traffic detected: DNS query: www.baac.ru
Source: global traffic	DNS traffic detected: DNS query: bdfa.ru
Source: global traffic	DNS traffic detected: DNS query: www.bdfa.ru
Source: global traffic	DNS traffic detected: DNS query: kkca.ru
Source: global traffic	DNS traffic detected: DNS query: www.kkca.ru
Source: global traffic	DNS traffic detected: DNS query: fdfa.ru
Source: global traffic	DNS traffic detected: DNS query: www.fdfa.ru
Source: global traffic	DNS traffic detected: DNS query: kalb.ru
Source: global traffic	DNS traffic detected: DNS query: www.kalb.ru
Source: global traffic	DNS traffic detected: DNS query: keba.ru
Source: global traffic	DNS traffic detected: DNS query: www.keba.ru
Source: global traffic	DNS traffic detected: DNS query: lafc.ru
Source: global traffic	DNS traffic detected: DNS query: www.lafc.ru
Source: global traffic	DNS traffic detected: DNS query: lldk.ru
Source: global traffic	DNS traffic detected: DNS query: www.lldk.ru
Source: global traffic	DNS traffic detected: DNS query: akfb.ru
Source: global traffic	DNS traffic detected: DNS query: www.akfb.ru
Source: global traffic	DNS traffic detected: DNS query: ckef.ru
Source: global traffic	DNS traffic detected: DNS query: www.ckef.ru
Source: global traffic	DNS traffic detected: DNS query: flad.ru
Source: global traffic	DNS traffic detected: DNS query: www.flad.ru
Source: global traffic	DNS traffic detected: DNS query: abkb.ru
Source: global traffic	DNS traffic detected: DNS query: www.abkb.ru
Source: global traffic	DNS traffic detected: DNS query: fefl.ru
Source: global traffic	DNS traffic detected: DNS query: www.fefl.ru

System Summary

Malicious sample detected (through community Yara rule)

Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_24c5b7d6 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_24c5b7d6 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_24c5b7d6 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_24c5b7d6 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: dropped/myirnra, type: DROPPED	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth

Sample has stripped symbol table

Source: ELF static info symbol of initial sample

.symtab present: no

Yara signature match

Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_24c5b7d6 reference_sample = 7c2f8ba2d6f1e67d1b4a3a737a449429c322d945d49dafb9e8c66608ab2154c4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3411b624f02dd1c7a0e663f1f119c8d5e47a81892bb7c445b7695c605b0b8ee2, id = 24c5b7d6-1aa8-4d8e-9983-c7234f57c3de, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: firmware.i686.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_24c5b7d6 reference_sample = 7c2f8ba2d6f1e67d1b4a3a737a449429c322d945d49dafb9e8c66608ab2154c4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3411b624f02dd1c7a0e663f1f119c8d5e47a81892bb7c445b7695c605b0b8ee2, id = 24c5b7d6-1aa8-4d8e-9983-c7234f57c3de, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5634.1.0000000008048000.0000000008061000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_24c5b7d6 reference_sample = 7c2f8ba2d6f1e67d1b4a3a737a449429c322d945d49dafb9e8c66608ab2154c4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3411b624f02dd1c7a0e663f1f119c8d5e47a81892bb7c445b7695c605b0b8ee2, id = 24c5b7d6-1aa8-4d8e-9983-c7234f57c3de, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: dropped/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_24c5b7d6 reference_sample = 7c2f8ba2d6f1e67d1b4a3a737a449429c322d945d49dafb9e8c66608ab2154c4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3411b624f02dd1c7a0e663f1f119c8d5e47a81892bb7c445b7695c605b0b8ee2, id = 24c5b7d6-1aa8-4d8e-9983-c7234f57c3de, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: dropped/myirnra, type: DROPPED	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: /usr/bin/myirnra, type: DROPPED	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b

Source: classification engine

Classification label: mal96.troj.evad.linELF@0/24@2492/0

Persistence and Installation Behavior

Executes the "crontab" command typically for achieving persistence

Source: /bin/sh (PID: 5659)	Crontab executable: /usr/bin/crontab -> crontab /var/spool/cron/crontabs/root			Jump to behavior
Source: /bin/sh (PID: 5658)	Crontab executable: /usr/bin/crontab -> crontab /var/spool/cron/crontabs/root			Jump to behavior

Sample tries to persist itself using cron

Source: /tmp/firmware.i686.elf (PID: 5635)	File: /var/spool/cron/crontabs/root	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5636)	File: /var/spool/cron/crontabs/root	Jump to behavior
Source: /usr/bin/crontab (PID: 5659)	File: /var/spool/cron/crontabs/tmp.tiEfc5	Jump to behavior
Source: /usr/bin/crontab (PID: 5659)	File: /var/spool/cron/crontabs/root	Jump to behavior
Source: /usr/bin/crontab (PID: 5658)	File: /var/spool/cron/crontabs/tmp.Y9ZHp2	Jump to behavior
Source: /usr/bin/crontab (PID: 5658)	File: /var/spool/cron/crontabs/root	Jump to behavior

Executes commands using a shell command-line interpreter

Source: /tmp/firmware.i686.elf (PID: 5646)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5671)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5700)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5709)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5719)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5729)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5738)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5748)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5755)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5765)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5773)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5783)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5791)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5651)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5662)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5666)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5758)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5657)	Shell command executed: sh -c "crontab /var/spool/cron/crontabs/root"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5644)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5672)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5701)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5708)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5720)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5730)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5737)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5746)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5754)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5764)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5775)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5785)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5793)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5649)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5664)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5714)	Shell command executed: sh -c "hostname -I"	Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5656)	Shell command executed: sh -c "crontab /var/spool/cron/crontabs/root"	Jump to behavior

Executes the "hostname" command used to retrieve the computers name

Source: /bin/sh (PID: 5652)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5673)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5702)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5710)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5721)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5732)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5740)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5749)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5757)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5767)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5774)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5784)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5792)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5653)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5663)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5667)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5759)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5654)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5674)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5703)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5711)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5722)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5731)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5739)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5747)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5756)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5766)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5776)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5786)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5794)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5655)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5665)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior
Source: /bin/sh (PID: 5715)	Hostname executable: /usr/bin/hostname -> hostname -I	Jump to behavior

Sample tries to set the executable flag

Source: /tmp/firmware.i686.elf (PID: 5635)	File: /bin/myirnra (bits: - usr: rx grp: rx all: rwx)			Jump to behavior
Source: /tmp/firmware.i686.elf (PID: 5636)	File: /bin/myirnra (bits: - usr: rx grp: rx all: rwx)			Jump to behavior

Writes ELF files to disk

Source: /tmp/firmware.i686.elf (PID: 5635)	File written: /usr/bin/myirnra
Source: /tmp/firmware.i686.elf (PID: 5636)	File written: /usr/bin/myirnra			Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Drops files in suspicious directories

Source: /tmp/firmware.i686.elf (PID: 5635)	File: /usr/bin/myirnra
Source: /tmp/firmware.i686.elf (PID: 5636)	File: /usr/bin/myirnra			Jump to dropped file

ID:	1502462
Product:	CloudBasic
Start time:	17:38:58
Start date:	01.09.2024
Sample:	firmware.i686.elf
Cookbook:	defaultlinuxfilecookbook.jbs
System description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Architecture:	LINUX
MD5:	2cb5cdc62ece570034995dd68e7ce0b8
SHA1:	4b67160529b4cfb453edb044d1bbc72354a8a6fd
SHA256:	8d23109f3365229684e31928b371aecb9d3fbd1e70dad90f27faf620a51be444
Filetype:	ELF Executable and Linkable format (Linux) (4029/14) 50.16%

Linux Analysis Report firmware.i686.elf

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Screenshots

Network Map

Contacted Public IPs

Contacted Domains

Contacted URLs

Linux Analysis Report
firmware.i686.elf