Edit tour

Linux Analysis Report
FBI.arm7.elf

Overview

General Information

Sample name:	FBI.arm7.elf
Analysis ID:	1542893
MD5:	3ee5c9d72e0edb2467423dd5e780fc4e
SHA1:	fa2d1e9de434a8a98f13d7ca5e988704e98a4500
SHA256:	30d810426cf18211df79d361a8e8ab0b512968bffcefc70758f49c86e6d5b871
Tags:	200botnetelfFBIGafgytYakuzauser-NDA0E
Infos:

Detection

Gafgyt, Mirai

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Detected TCP or UDP traffic on non-standard ports

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are user agent strings indicative of HTTP manipulation

Sample has stripped symbol table

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542893
Start date and time:	2024-10-26 19:38:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	FBI.arm7.elf
Detection:	MAL
Classification:	mal80.troj.linELF@0/2@2/0

Runtime Messages

Command:	/tmp/FBI.arm7.elf
PID:	5536
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:	qemu: uncaught target signal 11 (Segmentation fault) - core dumped qemu: uncaught target signal 8 (Floating point exception) - core dumped qemu: uncaught target signal 8 (Floating point exception) - core dumped qemu: uncaught target signal 8 (Floating point exception) - core dumped qemu: uncaught target signal 8 (Floating point exception) - core dumped

Process Tree

system is lnxubuntu20

FBI.arm7.elf (PID: 5536, Parent: 5452, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/FBI.arm7.elf

FBI.arm7.elf New Fork (PID: 5538, Parent: 5536)

FBI.arm7.elf New Fork (PID: 5540, Parent: 5536)

FBI.arm7.elf New Fork (PID: 5542, Parent: 5540)

FBI.arm7.elf New Fork (PID: 5549, Parent: 5542)

FBI.arm7.elf New Fork (PID: 5551, Parent: 5549)

FBI.arm7.elf New Fork (PID: 5583, Parent: 5540)

FBI.arm7.elf New Fork (PID: 5585, Parent: 5583)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
FBI.arm7.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
FBI.arm7.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
FBI.arm7.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b3ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b400:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b414:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b428:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b43c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b450:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b464:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b478:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
FBI.arm7.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1b39c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5538.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5538.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5538.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b3ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b400:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b414:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b428:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b43c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b450:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b464:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b478:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5538.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1b39c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5585.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5585.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5585.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b3ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b400:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b414:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b428:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b43c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b450:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b464:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b478:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5585.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1b39c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5583.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5583.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5583.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b3ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b400:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b414:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b428:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b43c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b450:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b464:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b478:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5583.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1b39c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5551.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5551.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5551.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b3ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b400:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b414:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b428:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b43c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b450:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b464:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b478:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5551.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1b39c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5549.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5549.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5549.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b3ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b400:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b414:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b428:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b43c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b450:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b464:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b478:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5549.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1b39c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5536.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5536.1.00007fa080017000.00007fa080036000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5536.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b3ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b400:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b414:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b428:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b43c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b450:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b464:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b478:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5536.1.00007fa080017000.00007fa080036000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1b39c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: FBI.arm7.elf PID: 5536	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: FBI.arm7.elf PID: 5536	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14cfb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d0f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d23:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d37:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d4b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d5f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d73:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d87:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d9b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14daf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14dc3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14dd7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14deb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14dff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e3b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e4f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e63:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e77:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e8b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: FBI.arm7.elf PID: 5536	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14cae:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x152f0:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: FBI.arm7.elf PID: 5538	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: FBI.arm7.elf PID: 5538	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2eb7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ecb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2edf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ef3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f1b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fa7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fbb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fcf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fe3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ff7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x300b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x301f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3033:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3047:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: FBI.arm7.elf PID: 5538	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x2e6a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x34ac:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: FBI.arm7.elf PID: 5549	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: FBI.arm7.elf PID: 5549	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14e84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14eac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ec0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ed4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ee8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14efc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15000:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15014:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: FBI.arm7.elf PID: 5549	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14e37:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x15479:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: FBI.arm7.elf PID: 5551	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: FBI.arm7.elf PID: 5551	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1406c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x140a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x140bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x140d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x140e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x140f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1410c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1415c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x141ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x141c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x141d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x141e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x141fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: FBI.arm7.elf PID: 5551	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1401f:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x14661:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: FBI.arm7.elf PID: 5583	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: FBI.arm7.elf PID: 5583	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x363c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x368c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x372c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x377c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: FBI.arm7.elf PID: 5583	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x35c7:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x3c09:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: FBI.arm7.elf PID: 5585	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: FBI.arm7.elf PID: 5585	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x346b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x347f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3493:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34a7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34bb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34cf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34e3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34f7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x350b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x351f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3533:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3547:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x355b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x356f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3583:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3597:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35ab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35bf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35d3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35e7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35fb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: FBI.arm7.elf PID: 5585	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x341e:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x3a60:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 37 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: FBI.arm7.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: FBI.arm7.elf

ReversingLabs: Detection: 63%

Source: global traffic

TCP traffic: 192.168.2.15:55004 -> 154.213.187.206:1337

Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: FBI.arm7.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: FBI.arm7.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: FBI.arm7.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: FBI.arm7.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: FBI.arm7.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

System Summary

Malicious sample detected (through community Yara rule)

Source: FBI.arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: FBI.arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5538.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5538.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5585.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5585.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5583.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5583.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5551.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5551.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5549.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5549.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5536.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5536.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5536, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5536, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5538, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5538, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5549, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5549, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5551, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5551, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5583, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5583, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: FBI.arm7.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: BusyBox
Source: Initial sample	String containing 'busybox' found: 20+!g}]/proc/self/maps/proc//mapsameccountoginnterhraseordeyshellsystemenablebusyboxBusyBoxBuilt-in45.81.39.172

Source: ELF static info symbol of initial sample

.symtab present: no

Source: FBI.arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: FBI.arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5538.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5538.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5585.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5585.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5583.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5583.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5551.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5551.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5549.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5549.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5536.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5536.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5536, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5536, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5538, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5538, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5549, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5549, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5551, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5551, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5583, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5583, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: FBI.arm7.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal80.troj.linELF@0/2@2/0

Source: submitted sample

Stderr: qemu: uncaught target signal 11 (Segmentation fault) - core dumpedqemu: uncaught target signal 8 (Floating point exception) - core dumpedqemu: uncaught target signal 8 (Floating point exception) - core dumpedqemu: uncaught target signal 8 (Floating point exception) - core dumpedqemu: uncaught target signal 8 (Floating point exception) - core dumped: exit code = 0

Source: /tmp/FBI.arm7.elf (PID: 5536)

Queries kernel information via 'uname':

Jump to behavior

Source: FBI.arm7.elf, 5536.1.0000558b18a67000.0000558b18bb9000.rw-.sdmp, FBI.arm7.elf, 5538.1.0000558b18a67000.0000558b18b95000.rw-.sdmp, FBI.arm7.elf, 5549.1.0000558b18a67000.0000558b18b95000.rw-.sdmp, FBI.arm7.elf, 5551.1.0000558b18a67000.0000558b18b95000.rw-.sdmp, FBI.arm7.elf, 5583.1.0000558b18a67000.0000558b18b95000.rw-.sdmp, FBI.arm7.elf, 5585.1.0000558b18a67000.0000558b18b95000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: FBI.arm7.elf, 5536.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5538.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5549.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5551.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5583.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5585.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/FBI.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/FBI.arm7.elf
Source: FBI.arm7.elf, 5536.1.0000558b18a67000.0000558b18bb9000.rw-.sdmp, FBI.arm7.elf, 5538.1.0000558b18a67000.0000558b18b95000.rw-.sdmp, FBI.arm7.elf, 5549.1.0000558b18a67000.0000558b18b95000.rw-.sdmp, FBI.arm7.elf, 5551.1.0000558b18a67000.0000558b18b95000.rw-.sdmp, FBI.arm7.elf, 5583.1.0000558b18a67000.0000558b18b95000.rw-.sdmp, FBI.arm7.elf, 5585.1.0000558b18a67000.0000558b18b95000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: FBI.arm7.elf, 5536.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5538.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5549.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5551.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5583.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5585.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: FBI.arm7.elf, 5549.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5551.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5583.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp, FBI.arm7.elf, 5585.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp	Binary or memory string: qemu: uncaught target signal 8 (Floating point exception) - core dumped
Source: FBI.arm7.elf, 5538.1.00007ffd741a3000.00007ffd741c4000.rw-.sdmp	Binary or memory string: qemu: uncaught target signal 11 (Segmentation fault) - core dumped

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: FBI.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5538.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5585.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5583.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5551.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5549.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5536.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: FBI.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5538.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5585.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5583.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5551.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5549.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5536.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5536, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5538, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5549, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5551, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5583, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5585, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: FBI.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5538.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5585.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5583.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5551.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5549.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5536.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: FBI.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5538.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5585.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5583.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5551.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5549.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5536.1.00007fa080017000.00007fa080036000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5536, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5538, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5549, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5551, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5583, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FBI.arm7.elf PID: 5585, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
FBI.arm7.elf	63%	ReversingLabs	Linux.Trojan.Gafgyt
FBI.arm7.elf	100%	Avira	EXP/ELF.Mirai.Z

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.billybobbot.com/crawler/)	0%	URL Reputation	safe
http://fast.no/support/crawler.asp)	0%	URL Reputation	safe
http://feedback.redkolibri.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.baidu.com/search/spider.html)	FBI.arm7.elf	false		unknown
http://www.billybobbot.com/crawler/)	FBI.arm7.elf	false	URL Reputation: safe	unknown
http://fast.no/support/crawler.asp)	FBI.arm7.elf	false	URL Reputation: safe	unknown
http://feedback.redkolibri.com/	FBI.arm7.elf	false	URL Reputation: safe	unknown
http://www.baidu.com/search/spider.htm)	FBI.arm7.elf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
154.213.187.206	unknown	Seychelles		22769	DDOSING-BGP-NETWORKUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
154.213.187.206	FBI.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	FBI.m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	FBI.i686.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	FBI.i486.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	FBI.m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	FBI.i686.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	FBI.i486.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	dlr.ppc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	dlr.spc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	dlr.sh4.elf	Get hash	malicious	Unknown	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DDOSING-BGP-NETWORKUS	FBI.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.i686.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.i486.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	41.93.234.26
	http://154.213.184.53	Get hash	malicious	Unknown	Browse	154.213.184.53

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/systemd/resolve/stub-resolv.conf

Download File

Process:	/tmp/FBI.arm7.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	3610
Entropy (8bit):	3.3918926446809334
Encrypted:	false
SSDEEP:	24:KaLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLX:KC
MD5:	5F1B02076A840B965744B3361913ED40
SHA1:	139B0259C4D963A45A71AD61919BC9D0F9064184
SHA-256:	3258CFDDA3C24CED7CAA6E85B87A44BBA22732F13039F35B4F2B239A0BE9D3AD
SHA-512:	52F32EF8A145EDAAB1B681F7163B34046BF86F50C83908F3AA7ECA34AF0236BD51C635F081D44840EA275020CE8C06CB67A7B1BEC901260090D6E9A9B1CB17E1
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.262037398358037
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	FBI.arm7.elf
File size:	129'784 bytes
MD5:	3ee5c9d72e0edb2467423dd5e780fc4e
SHA1:	fa2d1e9de434a8a98f13d7ca5e988704e98a4500
SHA256:	30d810426cf18211df79d361a8e8ab0b512968bffcefc70758f49c86e6d5b871
SHA512:	c606c8caa868eb027fc91c0f695e655827693951b86e36958b8d59b44d846ec07aac67b1a0d4eaea7824e1b5526ee01e1a8a6f3ff3aac80c25fb223395cab758
SSDEEP:	3072:nrYyuhoIkaPDm6dQQ6DzMzGjx40a4j5hFp5un:nrYyuGIkaPa6dQQ63MU40a25hRun
TLSH:	61C33916F9419F42D1C325BAFB8E924933136FF8E3EB7102D9209F6027869DB0E76951
File Content Preview:	.ELF..............(.........4...........4. ...(........p.....c...c.. ... ........................................................... ....w..........................................Q.td..................................-...L..................G.F.G.F.G.F.G.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81d0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	129024
Section Header Size:	40
Number of Section Headers:	19
Header String Table Index:	18

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	4
.text	PROGBITS	0x80f0	0xf0	0x1955c	0x0	0x6	AX	0	16
.fini	PROGBITS	0x2164c	0x1964c	0x10	0x0	0x6	AX	0	4
.rodata	PROGBITS	0x21660	0x19660	0x4d38	0x0	0x2	A	0	8
.ARM.extab	PROGBITS	0x26398	0x1e398	0x18	0x0	0x2	A	0	4
.ARM.exidx	ARM_EXIDX	0x263b0	0x1e3b0	0x120	0x0	0x82	AL	2	4
.eh_frame	PROGBITS	0x2e4d0	0x1e4d0	0x4	0x0	0x3	WA	0	4
.tbss	NOBITS	0x2e4d4	0x1e4d4	0x8	0x0	0x403	WAT	0	4
.init_array	INIT_ARRAY	0x2e4d4	0x1e4d4	0x4	0x0	0x3	WA	0	4
.fini_array	FINI_ARRAY	0x2e4d8	0x1e4d8	0x4	0x0	0x3	WA	0	4
.jcr	PROGBITS	0x2e4dc	0x1e4dc	0x4	0x0	0x3	WA	0	4
.data.rel.ro	PROGBITS	0x2e4e0	0x1e4e0	0x18	0x0	0x3	WA	0	4
.got	PROGBITS	0x2e4f8	0x1e4f8	0xb8	0x4	0x3	WA	0	4
.data	PROGBITS	0x2e5b0	0x1e5b0	0x340	0x0	0x3	WA	0	4
.bss	NOBITS	0x2e8f0	0x1e8f0	0x73c0	0x0	0x3	WA	0	8
.comment	PROGBITS	0x0	0x1e8f0	0xe5c	0x0	0x0		0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1f74c	0x16	0x0	0x0		0	1
.shstrtab	STRTAB	0x0	0x1f762	0x9e	0x0	0x0		0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x1e3b0	0x263b0	0x263b0	0x120	0x120	4.5068	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x1e4d0	0x1e4d0	6.2495	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x1e4d0	0x2e4d0	0x2e4d0	0x420	0x77e0	4.2050	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .data.rel.ro .got .data .bss
TLS	0x1e4d4	0x2e4d4	0x2e4d4	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 19:39:07.438101053 CEST	55004	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:07.443542004 CEST	1337	55004	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:07.443600893 CEST	55004	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:07.482319117 CEST	55004	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:07.487843037 CEST	1337	55004	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:08.396235943 CEST	1337	55004	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:08.396336079 CEST	55004	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:08.399056911 CEST	1337	55004	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:08.399070024 CEST	1337	55004	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:08.399202108 CEST	55004	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:08.399202108 CEST	55004	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:08.400548935 CEST	55006	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:08.408773899 CEST	1337	55004	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:08.408790112 CEST	1337	55006	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:08.409054041 CEST	55006	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:08.515662909 CEST	55006	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:08.520989895 CEST	1337	55006	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:09.157470942 CEST	1337	55006	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:09.157759905 CEST	55006	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:09.294164896 CEST	1337	55006	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:09.294508934 CEST	55006	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:09.299963951 CEST	1337	55006	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:09.357683897 CEST	55008	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:09.363306999 CEST	1337	55008	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:09.363724947 CEST	55008	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:09.603775978 CEST	55010	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:09.609226942 CEST	1337	55010	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:09.609568119 CEST	55010	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.142184973 CEST	1337	55008	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.145659924 CEST	55008	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.283610106 CEST	55008	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.290064096 CEST	1337	55008	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.350048065 CEST	55010	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.356242895 CEST	1337	55010	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.357235909 CEST	1337	55010	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.357312918 CEST	55010	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.660063982 CEST	1337	55008	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.660306931 CEST	55008	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.661207914 CEST	55012	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.665755987 CEST	1337	55008	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.666659117 CEST	1337	55012	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.666773081 CEST	55012	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.741441965 CEST	55012	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.746897936 CEST	1337	55012	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.908344030 CEST	1337	55010	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.908512115 CEST	55010	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.909605980 CEST	55014	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:10.913863897 CEST	1337	55010	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.914918900 CEST	1337	55014	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:10.914999962 CEST	55014	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:11.031341076 CEST	55014	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:11.036887884 CEST	1337	55014	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:11.423528910 CEST	1337	55012	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:11.424891949 CEST	55012	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:11.560420036 CEST	1337	55012	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:11.560518980 CEST	55012	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:11.562174082 CEST	55016	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:11.565931082 CEST	1337	55012	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:11.567567110 CEST	1337	55016	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:11.567631960 CEST	55016	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:11.967679977 CEST	55016	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.156430006 CEST	1337	55016	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.317125082 CEST	1337	55016	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.317353964 CEST	55016	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.458054066 CEST	1337	55016	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.458245993 CEST	55016	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.459232092 CEST	55018	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.463624954 CEST	1337	55016	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.464622021 CEST	1337	55018	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.464709997 CEST	55018	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.515120029 CEST	55018	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.520502090 CEST	1337	55018	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.671613932 CEST	1337	55014	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.671833038 CEST	55014	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.807939053 CEST	1337	55014	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.808227062 CEST	55014	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.808964968 CEST	55020	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.814814091 CEST	1337	55014	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.815258026 CEST	1337	55020	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:12.815324068 CEST	55020	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.855088949 CEST	55020	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:12.860548019 CEST	1337	55020	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.237785101 CEST	1337	55018	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.237996101 CEST	55018	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.373933077 CEST	1337	55018	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.374053001 CEST	55018	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.374866962 CEST	55022	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.379537106 CEST	1337	55018	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.380445004 CEST	1337	55022	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.380522966 CEST	55022	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.409965038 CEST	55022	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.415360928 CEST	1337	55022	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.549930096 CEST	1337	55020	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.550060034 CEST	55020	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.679792881 CEST	1337	55020	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.679982901 CEST	55020	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.680805922 CEST	55024	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.685489893 CEST	1337	55020	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.686285973 CEST	1337	55024	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:13.686373949 CEST	55024	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.708384037 CEST	55024	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:13.714070082 CEST	1337	55024	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.120587111 CEST	1337	55022	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.120738983 CEST	55022	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.255898952 CEST	1337	55022	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.256198883 CEST	55022	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.257076979 CEST	55026	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.261559963 CEST	1337	55022	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.262418032 CEST	1337	55026	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.262495041 CEST	55026	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.285382032 CEST	55026	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.290817022 CEST	1337	55026	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.441309929 CEST	1337	55024	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.441457033 CEST	55024	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.577802896 CEST	1337	55024	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.577991962 CEST	55024	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.578659058 CEST	55028	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.583642006 CEST	1337	55024	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.584450960 CEST	1337	55028	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:14.584506989 CEST	55028	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.604440928 CEST	55028	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:14.609896898 CEST	1337	55028	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.017477989 CEST	1337	55026	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.017725945 CEST	55026	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.153529882 CEST	1337	55026	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.153824091 CEST	55026	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.154491901 CEST	55030	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.159291029 CEST	1337	55026	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.159832954 CEST	1337	55030	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.159904003 CEST	55030	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.184200048 CEST	55030	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.189878941 CEST	1337	55030	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.323767900 CEST	1337	55028	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.323908091 CEST	55028	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.455621958 CEST	1337	55028	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.455805063 CEST	55028	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.456532955 CEST	55032	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.461318016 CEST	1337	55028	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.462017059 CEST	1337	55032	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.462137938 CEST	55032	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.482672930 CEST	55032	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:15.488322973 CEST	1337	55032	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.933176994 CEST	1337	55030	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:15.933439970 CEST	55030	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.072890043 CEST	1337	55030	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.073334932 CEST	55030	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.073991060 CEST	55034	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.078728914 CEST	1337	55030	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.079402924 CEST	1337	55034	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.079503059 CEST	55034	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.104176044 CEST	55034	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.109680891 CEST	1337	55034	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.221007109 CEST	1337	55032	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.221187115 CEST	55032	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.622256041 CEST	1337	55032	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.622416973 CEST	1337	55032	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.622560978 CEST	55032	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.622560978 CEST	55032	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.623107910 CEST	55036	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.628092051 CEST	1337	55032	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.628477097 CEST	1337	55036	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.628567934 CEST	55036	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.650584936 CEST	55036	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.656210899 CEST	1337	55036	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.828552008 CEST	1337	55034	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.828686953 CEST	55034	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.966171980 CEST	1337	55034	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.966355085 CEST	55034	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.966981888 CEST	55038	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.971808910 CEST	1337	55034	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.972521067 CEST	1337	55038	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:16.972592115 CEST	55038	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:16.996443987 CEST	55038	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.001888990 CEST	1337	55038	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:17.516418934 CEST	1337	55036	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:17.516761065 CEST	55036	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.517230988 CEST	55040	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.522291899 CEST	1337	55036	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:17.522679090 CEST	1337	55040	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:17.522730112 CEST	55040	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.544317961 CEST	55040	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.549696922 CEST	1337	55040	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:17.728827000 CEST	1337	55038	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:17.729011059 CEST	55038	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.865845919 CEST	1337	55038	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:17.866102934 CEST	55038	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.866722107 CEST	55042	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.871450901 CEST	1337	55038	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:17.872088909 CEST	1337	55042	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:17.872138023 CEST	55042	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.896311998 CEST	55042	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:17.901767969 CEST	1337	55042	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.280219078 CEST	1337	55040	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.280333996 CEST	55040	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.417464972 CEST	1337	55040	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.417596102 CEST	55040	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.418138981 CEST	55044	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.423670053 CEST	1337	55040	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.423692942 CEST	1337	55044	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.423784018 CEST	55044	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.442246914 CEST	55044	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.447669029 CEST	1337	55044	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.914343119 CEST	1337	55042	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.914478064 CEST	1337	55042	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.914509058 CEST	1337	55042	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.914661884 CEST	55042	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.914661884 CEST	55042	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.914661884 CEST	55042	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.915173054 CEST	55046	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.920147896 CEST	1337	55042	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.920506001 CEST	1337	55046	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:18.920572042 CEST	55046	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.945981026 CEST	55046	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:18.951296091 CEST	1337	55046	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:19.170875072 CEST	1337	55044	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:19.171149969 CEST	55044	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:19.308033943 CEST	1337	55044	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:19.308327913 CEST	55044	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:19.308792114 CEST	55048	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:19.314910889 CEST	1337	55044	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:19.314944983 CEST	1337	55048	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:19.314992905 CEST	55048	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:19.333359957 CEST	55048	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:19.339502096 CEST	1337	55048	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:19.648869038 CEST	1337	55046	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:19.649180889 CEST	55046	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.059676886 CEST	1337	55046	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.059743881 CEST	1337	55046	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.059876919 CEST	55046	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.059876919 CEST	55046	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.060609102 CEST	55050	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.067075968 CEST	1337	55046	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.067517996 CEST	1337	55050	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.067574024 CEST	55050	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.076348066 CEST	1337	55048	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.076395988 CEST	55048	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.092375994 CEST	55050	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.099448919 CEST	1337	55050	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.206629992 CEST	1337	55048	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.206743956 CEST	55048	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.207118034 CEST	55052	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.215033054 CEST	1337	55048	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.215186119 CEST	1337	55052	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.215264082 CEST	55052	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.231534958 CEST	55052	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.239638090 CEST	1337	55052	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.816214085 CEST	1337	55050	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.816394091 CEST	55050	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.952558041 CEST	1337	55050	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.952786922 CEST	55050	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.953516006 CEST	55054	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.958478928 CEST	1337	55050	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.958904028 CEST	1337	55054	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.958983898 CEST	55054	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.959633112 CEST	1337	55052	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:20.959705114 CEST	55052	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.985088110 CEST	55054	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:20.990485907 CEST	1337	55054	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.096349955 CEST	1337	55052	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.096489906 CEST	55052	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.097138882 CEST	55056	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.101867914 CEST	1337	55052	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.102592945 CEST	1337	55056	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.102659941 CEST	55056	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.120989084 CEST	55056	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.126539946 CEST	1337	55056	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.715599060 CEST	1337	55054	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.715907097 CEST	55054	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.851046085 CEST	1337	55054	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.851200104 CEST	55054	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.851876020 CEST	55058	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.856573105 CEST	1337	55054	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.857345104 CEST	1337	55058	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.857444048 CEST	55058	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.864429951 CEST	1337	55056	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:21.864483118 CEST	55056	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.881198883 CEST	55058	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:21.886689901 CEST	1337	55058	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:22.005341053 CEST	1337	55056	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:22.005575895 CEST	55056	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:22.006145954 CEST	55060	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:22.011045933 CEST	1337	55056	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:22.011559010 CEST	1337	55060	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:22.011643887 CEST	55060	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:22.031089067 CEST	55060	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:22.036461115 CEST	1337	55060	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:22.614234924 CEST	1337	55058	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:22.614528894 CEST	55058	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.064826965 CEST	1337	55058	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.064842939 CEST	1337	55060	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.064913034 CEST	1337	55060	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.064960003 CEST	55060	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.064975977 CEST	1337	55060	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.065023899 CEST	55060	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.065073013 CEST	1337	55058	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.065082073 CEST	55058	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.065098047 CEST	55060	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.065175056 CEST	55058	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.066214085 CEST	55062	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.066385031 CEST	55064	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.070439100 CEST	1337	55060	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.070452929 CEST	1337	55058	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.071543932 CEST	1337	55062	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.071604967 CEST	55062	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.071655989 CEST	1337	55064	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.071711063 CEST	55064	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.116535902 CEST	55062	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.116683006 CEST	55064	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.122139931 CEST	1337	55062	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.122189045 CEST	1337	55064	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.813643932 CEST	1337	55064	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.813965082 CEST	55064	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.821841002 CEST	1337	55062	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.821921110 CEST	55062	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.950768948 CEST	1337	55064	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.950970888 CEST	55064	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.951520920 CEST	55066	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.956348896 CEST	1337	55064	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.956859112 CEST	1337	55066	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.956916094 CEST	55066	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.958276987 CEST	1337	55062	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.958384991 CEST	55062	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.959086895 CEST	55068	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.964438915 CEST	1337	55062	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.964453936 CEST	1337	55068	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.964498043 CEST	55068	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.989706993 CEST	55066	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:23.996218920 CEST	1337	55066	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:23.999186993 CEST	55068	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:24.004753113 CEST	1337	55068	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:25.072254896 CEST	1337	55068	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:25.072602034 CEST	55068	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:25.320419073 CEST	1337	55068	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:25.320781946 CEST	55068	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:25.321281910 CEST	55070	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:25.326114893 CEST	1337	55068	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:25.326586962 CEST	1337	55070	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:25.326647043 CEST	55070	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:25.347119093 CEST	55070	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:25.352370977 CEST	1337	55070	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.074640036 CEST	1337	55070	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.074877977 CEST	55070	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.079343081 CEST	1337	55066	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.079428911 CEST	55066	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.211621046 CEST	1337	55070	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.211837053 CEST	55070	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.212249041 CEST	55072	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.215734005 CEST	1337	55066	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.215816975 CEST	55066	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.216165066 CEST	55074	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.217190027 CEST	1337	55070	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.217530012 CEST	1337	55072	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.217602968 CEST	55072	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.221054077 CEST	1337	55066	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.221456051 CEST	1337	55074	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.221507072 CEST	55074	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.252942085 CEST	55072	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.257997036 CEST	55074	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:26.258205891 CEST	1337	55072	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:26.263308048 CEST	1337	55074	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:29.134135008 CEST	1337	55074	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:29.134422064 CEST	55074	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:29.134994984 CEST	55076	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:29.139813900 CEST	1337	55074	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:29.140338898 CEST	1337	55076	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:29.140394926 CEST	55076	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:29.159837961 CEST	55076	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:29.165270090 CEST	1337	55076	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:29.893409967 CEST	1337	55076	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:29.893594980 CEST	55076	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:29.983249903 CEST	1337	55072	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:29.983484030 CEST	55072	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.031081915 CEST	1337	55076	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.031187057 CEST	55076	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.031806946 CEST	55078	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.037666082 CEST	1337	55076	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.038157940 CEST	1337	55078	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.038213968 CEST	55078	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.056833982 CEST	55078	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.062211990 CEST	1337	55078	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.119895935 CEST	1337	55072	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.120124102 CEST	55072	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.120616913 CEST	55080	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.125529051 CEST	1337	55072	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.125925064 CEST	1337	55080	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.125982046 CEST	55080	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.148494959 CEST	55080	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.153996944 CEST	1337	55080	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.961642981 CEST	1337	55078	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.961709023 CEST	1337	55080	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.961776018 CEST	1337	55078	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.961837053 CEST	55078	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.961837053 CEST	55078	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.961842060 CEST	55080	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.962353945 CEST	55082	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.967549086 CEST	1337	55078	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.967669964 CEST	1337	55082	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:30.967734098 CEST	55082	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.986833096 CEST	55082	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:30.992208958 CEST	1337	55082	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.004713058 CEST	1337	55080	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.004796982 CEST	55080	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.005142927 CEST	55084	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.010164022 CEST	1337	55080	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.010519981 CEST	1337	55084	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.010591030 CEST	55084	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.032445908 CEST	55084	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.037946939 CEST	1337	55084	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.720937967 CEST	1337	55082	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.721290112 CEST	55082	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.755618095 CEST	1337	55084	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.755832911 CEST	55084	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.857840061 CEST	1337	55082	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.857989073 CEST	55082	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.858485937 CEST	55086	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.863452911 CEST	1337	55082	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.863899946 CEST	1337	55086	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.863975048 CEST	55086	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.881870985 CEST	55086	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.888147116 CEST	1337	55086	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.891879082 CEST	1337	55084	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.891976118 CEST	55084	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.892319918 CEST	55088	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.897787094 CEST	1337	55084	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.897818089 CEST	1337	55088	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:31.897888899 CEST	55088	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.918024063 CEST	55088	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:31.923379898 CEST	1337	55088	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.624501944 CEST	1337	55088	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.624696970 CEST	55088	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.648439884 CEST	1337	55086	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.648560047 CEST	55086	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.754057884 CEST	1337	55088	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.754188061 CEST	55088	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.754962921 CEST	55090	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.760127068 CEST	1337	55088	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.761230946 CEST	1337	55090	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.761313915 CEST	55090	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.784107924 CEST	1337	55086	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.784210920 CEST	55086	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.784908056 CEST	55092	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.785015106 CEST	55090	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.789640903 CEST	1337	55086	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.790410995 CEST	1337	55092	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.790442944 CEST	1337	55090	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:32.790465117 CEST	55092	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.806374073 CEST	55092	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:32.811745882 CEST	1337	55092	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.511888981 CEST	1337	55090	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.512038946 CEST	55090	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.540353060 CEST	1337	55092	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.540512085 CEST	55092	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.647191048 CEST	1337	55090	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.647290945 CEST	55090	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.648133039 CEST	55094	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.652681112 CEST	1337	55090	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.653640032 CEST	1337	55094	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.653702021 CEST	55094	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.677004099 CEST	1337	55092	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.677088022 CEST	55092	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.677865028 CEST	55096	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.682487965 CEST	55094	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.682687998 CEST	1337	55092	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.683228970 CEST	1337	55096	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.683334112 CEST	55096	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.687822104 CEST	1337	55094	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:33.703310013 CEST	55096	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:33.708655119 CEST	1337	55096	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.410131931 CEST	1337	55094	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.410305977 CEST	55094	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.443247080 CEST	1337	55096	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.443505049 CEST	55096	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.545581102 CEST	1337	55094	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.545800924 CEST	55094	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.546638966 CEST	55098	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.551825047 CEST	1337	55094	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.552474976 CEST	1337	55098	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.552674055 CEST	55098	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.578397036 CEST	55098	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.578938961 CEST	1337	55096	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.579027891 CEST	55096	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.579660892 CEST	55100	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.583894968 CEST	1337	55098	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.585654020 CEST	1337	55096	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.586848974 CEST	1337	55100	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:34.586908102 CEST	55100	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.607165098 CEST	55100	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:34.612510920 CEST	1337	55100	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.322377920 CEST	1337	55100	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.322573900 CEST	55100	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.329868078 CEST	1337	55098	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.329941988 CEST	55098	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.454220057 CEST	1337	55100	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.454499960 CEST	55100	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.454973936 CEST	55102	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.461545944 CEST	1337	55100	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.461577892 CEST	1337	55102	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.461642027 CEST	55102	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.467212915 CEST	1337	55098	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.467309952 CEST	55098	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.467961073 CEST	55104	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.473182917 CEST	1337	55098	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.473331928 CEST	1337	55104	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.473414898 CEST	55104	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.494415998 CEST	55102	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.500184059 CEST	1337	55102	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:35.511977911 CEST	55104	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:35.517489910 CEST	1337	55104	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.296125889 CEST	1337	55102	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.296338081 CEST	55102	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.296607971 CEST	1337	55104	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.296762943 CEST	55104	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.355717897 CEST	1337	55102	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.355822086 CEST	55102	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.356389046 CEST	55106	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.361464024 CEST	1337	55102	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.361799955 CEST	1337	55106	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.361872911 CEST	55106	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.364372969 CEST	1337	55104	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.364450932 CEST	55104	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.365258932 CEST	55108	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.370019913 CEST	1337	55104	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.370663881 CEST	1337	55108	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.370740891 CEST	55108	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.401751041 CEST	55106	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.407565117 CEST	1337	55106	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:36.411609888 CEST	55108	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:36.417048931 CEST	1337	55108	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.105638981 CEST	1337	55106	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.105907917 CEST	55106	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.126204967 CEST	1337	55108	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.126470089 CEST	55108	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.242398977 CEST	1337	55106	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.242578030 CEST	55106	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.243335962 CEST	55110	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.248146057 CEST	1337	55106	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.248713017 CEST	1337	55110	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.248817921 CEST	55110	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.262650967 CEST	1337	55108	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.262789011 CEST	55108	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.263664961 CEST	55112	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.268280983 CEST	1337	55108	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.269094944 CEST	55110	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.269191027 CEST	1337	55112	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.269257069 CEST	55112	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.274625063 CEST	1337	55110	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:37.292123079 CEST	55112	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:37.297959089 CEST	1337	55112	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:38.010808945 CEST	1337	55110	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:38.010972023 CEST	55110	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:38.139223099 CEST	1337	55110	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:38.139390945 CEST	55110	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:38.140005112 CEST	55114	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:38.145307064 CEST	1337	55110	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:38.145525932 CEST	1337	55114	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:38.145832062 CEST	55114	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:38.164726973 CEST	55114	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:38.170399904 CEST	1337	55114	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.326101065 CEST	1337	55114	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.326296091 CEST	55114	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.326359034 CEST	1337	55114	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.326447010 CEST	1337	55114	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.326472044 CEST	55114	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.326476097 CEST	1337	55112	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.326508045 CEST	1337	55112	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.326510906 CEST	55114	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.326538086 CEST	55112	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.326589108 CEST	1337	55112	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.326642990 CEST	55112	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.326756001 CEST	55112	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.327024937 CEST	55116	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.327727079 CEST	55118	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.328491926 CEST	1337	55114	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.328556061 CEST	55114	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.336138010 CEST	1337	55114	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.336196899 CEST	1337	55112	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.336278915 CEST	1337	55116	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.336338997 CEST	1337	55118	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.336369991 CEST	55116	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.336460114 CEST	55118	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.390424013 CEST	55116	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.390904903 CEST	55118	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:39.396044970 CEST	1337	55116	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:39.396265984 CEST	1337	55118	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.279437065 CEST	1337	55118	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.279485941 CEST	1337	55116	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.279640913 CEST	55118	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.279640913 CEST	55116	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.279800892 CEST	1337	55118	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.279908895 CEST	1337	55116	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.279944897 CEST	55118	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.279984951 CEST	55116	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.280060053 CEST	1337	55118	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.280138016 CEST	55118	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.280179977 CEST	1337	55116	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.280337095 CEST	55116	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.281044006 CEST	55120	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.281203985 CEST	55122	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.493547916 CEST	55116	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.493547916 CEST	55118	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.538455009 CEST	1337	55116	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.538552046 CEST	1337	55118	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.538578987 CEST	55116	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.538654089 CEST	55118	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.540779114 CEST	1337	55118	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.540807009 CEST	1337	55116	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.542362928 CEST	1337	55120	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.542417049 CEST	1337	55122	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.542464018 CEST	55120	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.542496920 CEST	55122	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.542620897 CEST	1337	55116	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.542649031 CEST	1337	55118	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.542692900 CEST	55116	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.542692900 CEST	55118	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.592900991 CEST	55122	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.593142986 CEST	55120	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:40.598251104 CEST	1337	55122	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:40.598529100 CEST	1337	55120	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.279076099 CEST	1337	55120	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.279278994 CEST	55120	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.284061909 CEST	1337	55122	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.284151077 CEST	55122	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.408768892 CEST	1337	55120	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.408890963 CEST	55120	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.409578085 CEST	55124	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.414556026 CEST	1337	55120	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.414900064 CEST	1337	55124	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.414968967 CEST	55124	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.420381069 CEST	1337	55122	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.420499086 CEST	55122	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.421307087 CEST	55126	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.425889015 CEST	1337	55122	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.426624060 CEST	1337	55126	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.426676035 CEST	55126	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.450185061 CEST	55124	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.455600977 CEST	1337	55124	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:41.462534904 CEST	55126	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:41.467962980 CEST	1337	55126	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.156790018 CEST	1337	55124	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.156992912 CEST	55124	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.169178009 CEST	1337	55126	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.169296026 CEST	55126	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.292418957 CEST	1337	55124	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.292660952 CEST	55124	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.293337107 CEST	55128	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.298114061 CEST	1337	55124	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.298732996 CEST	1337	55128	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.298795938 CEST	55128	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.305247068 CEST	1337	55126	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.305357933 CEST	55126	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.306150913 CEST	55130	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.310655117 CEST	1337	55126	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.311501980 CEST	1337	55130	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.311584949 CEST	55130	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.332161903 CEST	55128	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.337539911 CEST	1337	55128	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:42.344455004 CEST	55130	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:42.349746943 CEST	1337	55130	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.048386097 CEST	1337	55128	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.048646927 CEST	55128	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.059794903 CEST	1337	55130	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.059876919 CEST	55130	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.184577942 CEST	1337	55128	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.184772015 CEST	55128	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.185483932 CEST	55132	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.190335989 CEST	1337	55128	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.190917969 CEST	1337	55132	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.190992117 CEST	55132	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.196197033 CEST	1337	55130	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.196350098 CEST	55130	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.197237015 CEST	55134	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.201782942 CEST	1337	55130	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.202552080 CEST	1337	55134	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.202603102 CEST	55134	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.227854013 CEST	55132	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.233496904 CEST	1337	55132	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.238418102 CEST	55134	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:43.243771076 CEST	1337	55134	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.949970007 CEST	1337	55132	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:43.950228930 CEST	55132	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.069679976 CEST	1337	55134	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.069863081 CEST	55134	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.070370913 CEST	55136	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.075387955 CEST	1337	55134	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.075759888 CEST	1337	55136	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.075819969 CEST	55136	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.087770939 CEST	1337	55132	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.087856054 CEST	55132	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.088481903 CEST	55138	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.092658997 CEST	55136	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.093800068 CEST	1337	55132	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.093869925 CEST	1337	55138	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.093915939 CEST	55138	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.098146915 CEST	1337	55136	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.113425970 CEST	55138	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.118928909 CEST	1337	55138	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.810261011 CEST	1337	55136	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.810512066 CEST	55136	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.840460062 CEST	1337	55138	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.840668917 CEST	55138	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.949743032 CEST	1337	55136	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.949884892 CEST	55136	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.950330973 CEST	55140	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.955368042 CEST	1337	55136	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.955746889 CEST	1337	55140	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.955878973 CEST	55140	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.971297979 CEST	55140	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.972606897 CEST	1337	55138	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.972692966 CEST	55138	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.973022938 CEST	55142	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.976809978 CEST	1337	55140	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.978034019 CEST	1337	55138	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.978383064 CEST	1337	55142	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:44.978430033 CEST	55142	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:44.999784946 CEST	55142	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.213470936 CEST	55142	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.325002909 CEST	1337	55142	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.325045109 CEST	1337	55142	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.682955027 CEST	1337	55140	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.683135986 CEST	55140	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.742798090 CEST	1337	55142	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.742925882 CEST	55142	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.814233065 CEST	1337	55140	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.814532995 CEST	55140	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.815318108 CEST	55144	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.819895029 CEST	1337	55140	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.820715904 CEST	1337	55144	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.820801973 CEST	55144	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.837304115 CEST	55144	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.842675924 CEST	1337	55144	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.874588966 CEST	1337	55142	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.874871016 CEST	55142	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.875690937 CEST	55146	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.880155087 CEST	1337	55142	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.881057978 CEST	1337	55146	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:45.881138086 CEST	55146	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.900131941 CEST	55146	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:45.905527115 CEST	1337	55146	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.569094896 CEST	1337	55144	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.569458961 CEST	55144	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.638179064 CEST	1337	55146	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.638605118 CEST	55146	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.705511093 CEST	1337	55144	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.705887079 CEST	55144	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.706312895 CEST	55148	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.711251020 CEST	1337	55144	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.711697102 CEST	1337	55148	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.711815119 CEST	55148	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.726653099 CEST	55148	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.732029915 CEST	1337	55148	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.774332047 CEST	1337	55146	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.774530888 CEST	55146	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.775111914 CEST	55150	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.779999018 CEST	1337	55146	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.780483961 CEST	1337	55150	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:46.780576944 CEST	55150	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.799823999 CEST	55150	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:46.805264950 CEST	1337	55150	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.446820021 CEST	1337	55148	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.446973085 CEST	55148	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.540819883 CEST	1337	55150	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.540954113 CEST	55150	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.576836109 CEST	1337	55148	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.576988935 CEST	55148	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.577689886 CEST	55152	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.582822084 CEST	1337	55148	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.583544016 CEST	1337	55152	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.583626032 CEST	55152	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.598100901 CEST	55152	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.603949070 CEST	1337	55152	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.678613901 CEST	1337	55150	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.678757906 CEST	55150	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.679280996 CEST	55154	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.684432030 CEST	1337	55150	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.685112953 CEST	1337	55154	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:47.685301065 CEST	55154	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.706485987 CEST	55154	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:47.712229013 CEST	1337	55154	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.324527025 CEST	1337	55152	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.324800014 CEST	55152	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.438508987 CEST	1337	55154	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.438885927 CEST	55154	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.453474998 CEST	1337	55152	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.453702927 CEST	55152	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.454215050 CEST	55156	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.459446907 CEST	1337	55152	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.460083008 CEST	1337	55156	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.460181952 CEST	55156	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.475718975 CEST	55156	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.481228113 CEST	1337	55156	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.575447083 CEST	1337	55154	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.575665951 CEST	55154	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.576200962 CEST	55158	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.581062078 CEST	1337	55154	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.581728935 CEST	1337	55158	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:48.581810951 CEST	55158	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.600058079 CEST	55158	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:48.605571985 CEST	1337	55158	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.217180014 CEST	1337	55156	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.217387915 CEST	55156	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.341140985 CEST	1337	55158	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.341263056 CEST	55158	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.356905937 CEST	1337	55156	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.357059002 CEST	55156	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.358150005 CEST	55160	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.362747908 CEST	1337	55156	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.363706112 CEST	1337	55160	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.363914967 CEST	55160	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.384507895 CEST	55160	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.390204906 CEST	1337	55160	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.480158091 CEST	1337	55158	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.480432987 CEST	55158	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.481478930 CEST	55162	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.486341000 CEST	1337	55158	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.487417936 CEST	1337	55162	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:49.487673044 CEST	55162	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.516676903 CEST	55162	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:49.522411108 CEST	1337	55162	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.207878113 CEST	1337	55160	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.208148003 CEST	55160	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.237545967 CEST	1337	55162	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.237818956 CEST	55162	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.258862972 CEST	1337	55160	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.258987904 CEST	55160	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.259439945 CEST	55164	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.264408112 CEST	1337	55160	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.264933109 CEST	1337	55164	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.265050888 CEST	55164	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.286334991 CEST	55164	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.292531967 CEST	1337	55164	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.653992891 CEST	1337	55162	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.654155016 CEST	55162	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.654706001 CEST	55166	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.659625053 CEST	1337	55162	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.660161972 CEST	1337	55166	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:50.660248041 CEST	55166	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.682735920 CEST	55166	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:50.688144922 CEST	1337	55166	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.096035957 CEST	1337	55164	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.096235037 CEST	55164	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.159132957 CEST	1337	55164	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.159272909 CEST	55164	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.159825087 CEST	55168	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.164654970 CEST	1337	55164	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.165150881 CEST	1337	55168	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.165211916 CEST	55168	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.183650017 CEST	55168	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.189063072 CEST	1337	55168	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.416857958 CEST	1337	55166	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.417013884 CEST	55166	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.765117884 CEST	1337	55166	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.765294075 CEST	55166	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.765911102 CEST	55170	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.769637108 CEST	1337	55166	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.769714117 CEST	55166	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.770782948 CEST	1337	55166	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.771455050 CEST	1337	55170	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.771527052 CEST	55170	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.795023918 CEST	55170	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:51.800656080 CEST	1337	55170	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.911598921 CEST	1337	55168	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:51.911777020 CEST	55168	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.290221930 CEST	1337	55168	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.290360928 CEST	55168	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.290766954 CEST	1337	55168	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.290817022 CEST	55168	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.290919065 CEST	55172	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.501184940 CEST	55168	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.503756046 CEST	1337	55168	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.503824949 CEST	55168	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.505218029 CEST	1337	55168	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.505305052 CEST	1337	55172	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.505395889 CEST	55172	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.506767988 CEST	1337	55168	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.506828070 CEST	55168	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.530617952 CEST	55172	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.531933069 CEST	1337	55170	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.531985998 CEST	55170	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.536232948 CEST	1337	55172	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.668399096 CEST	1337	55170	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.668528080 CEST	55170	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.669265985 CEST	55174	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.674000978 CEST	1337	55170	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.674693108 CEST	1337	55174	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:52.674779892 CEST	55174	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.699162006 CEST	55174	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:52.886704922 CEST	1337	55174	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.262041092 CEST	1337	55172	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.262161016 CEST	55172	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.398569107 CEST	1337	55172	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.398688078 CEST	55172	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.399358988 CEST	55176	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.404206991 CEST	1337	55172	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.404798031 CEST	1337	55176	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.404854059 CEST	55176	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.426636934 CEST	1337	55174	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.426717997 CEST	55174	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.430128098 CEST	55176	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.436038971 CEST	1337	55176	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.563247919 CEST	1337	55174	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.563492060 CEST	55174	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.564282894 CEST	55178	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.568914890 CEST	1337	55174	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.569677114 CEST	1337	55178	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:53.569739103 CEST	55178	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.597294092 CEST	55178	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:53.602703094 CEST	1337	55178	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.149702072 CEST	1337	55176	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.149914026 CEST	55176	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.393981934 CEST	1337	55176	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.394126892 CEST	1337	55178	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.394301891 CEST	55176	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.394301891 CEST	55178	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.395191908 CEST	55180	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.400027037 CEST	1337	55176	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.400932074 CEST	1337	55180	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.401024103 CEST	55180	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.429233074 CEST	55180	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.434783936 CEST	1337	55180	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.464621067 CEST	1337	55178	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.464752913 CEST	55178	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.465277910 CEST	55182	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.470321894 CEST	1337	55178	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.471081018 CEST	1337	55182	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:54.471160889 CEST	55182	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.497765064 CEST	55182	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:54.504292965 CEST	1337	55182	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.152885914 CEST	1337	55180	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.153001070 CEST	55180	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.221419096 CEST	1337	55182	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.221503019 CEST	55182	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.289967060 CEST	1337	55180	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.290079117 CEST	55180	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.290824890 CEST	55184	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.295471907 CEST	1337	55180	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.296260118 CEST	1337	55184	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.296325922 CEST	55184	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.320017099 CEST	55184	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.325387955 CEST	1337	55184	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.358901024 CEST	1337	55182	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.359004021 CEST	55182	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.359563112 CEST	55186	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.364537954 CEST	1337	55182	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.364931107 CEST	1337	55186	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:55.364988089 CEST	55186	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.387757063 CEST	55186	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:55.393549919 CEST	1337	55186	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.051799059 CEST	1337	55184	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.052037001 CEST	55184	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.364399910 CEST	1337	55186	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.364532948 CEST	55186	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.364919901 CEST	1337	55184	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.364980936 CEST	1337	55184	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.365005016 CEST	55184	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.365047932 CEST	55184	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.365071058 CEST	1337	55186	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.365132093 CEST	1337	55186	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.365180969 CEST	55186	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.365298033 CEST	55186	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.366035938 CEST	55188	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.366245985 CEST	55190	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.370706081 CEST	1337	55184	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.371422052 CEST	1337	55186	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.371665955 CEST	1337	55188	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.371764898 CEST	55188	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.375891924 CEST	1337	55190	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.375957012 CEST	55190	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.415463924 CEST	55188	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.420990944 CEST	1337	55188	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:56.421355963 CEST	55190	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:56.426733971 CEST	1337	55190	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.121685028 CEST	1337	55188	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.121841908 CEST	55188	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.122711897 CEST	1337	55190	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.122787952 CEST	55190	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.258323908 CEST	1337	55188	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.258444071 CEST	55188	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.259073973 CEST	1337	55190	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.259150028 CEST	55190	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.259232998 CEST	55192	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.260169983 CEST	55194	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.264723063 CEST	1337	55188	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.265125036 CEST	1337	55190	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.265155077 CEST	1337	55192	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.265208006 CEST	55192	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.266077995 CEST	1337	55194	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.266118050 CEST	55194	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.310334921 CEST	55192	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.311633110 CEST	55194	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:57.315865040 CEST	1337	55192	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.317037106 CEST	1337	55194	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.994330883 CEST	1337	55192	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:57.994466066 CEST	55192	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.016344070 CEST	1337	55194	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.016542912 CEST	55194	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.127154112 CEST	1337	55192	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.127496958 CEST	55192	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.128050089 CEST	55196	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.133166075 CEST	1337	55192	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.133375883 CEST	1337	55196	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.133517027 CEST	55196	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.153642893 CEST	1337	55194	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.153717995 CEST	55194	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.154197931 CEST	55198	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.157994032 CEST	55196	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.159004927 CEST	1337	55194	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.159617901 CEST	1337	55198	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.159671068 CEST	55198	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.163322926 CEST	1337	55196	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.182784081 CEST	55198	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:58.188128948 CEST	1337	55198	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.868519068 CEST	1337	55196	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:58.868663073 CEST	55196	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.013506889 CEST	1337	55196	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.013768911 CEST	55196	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.014358997 CEST	55200	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.019217014 CEST	1337	55196	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.019783974 CEST	1337	55200	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.019848108 CEST	55200	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.021121025 CEST	1337	55198	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.021212101 CEST	55198	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.021905899 CEST	55202	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.026617050 CEST	1337	55198	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.027367115 CEST	1337	55202	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.027415991 CEST	55202	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.061141014 CEST	55200	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.066584110 CEST	1337	55200	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.070139885 CEST	55202	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.075495005 CEST	1337	55202	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.775525093 CEST	1337	55202	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.775741100 CEST	55202	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.808743954 CEST	1337	55200	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.808933973 CEST	55200	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.905757904 CEST	1337	55202	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.905973911 CEST	55202	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.906609058 CEST	55204	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.911737919 CEST	1337	55202	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.912060976 CEST	1337	55204	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.912120104 CEST	55204	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.935889959 CEST	1337	55200	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.935991049 CEST	55200	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.936466932 CEST	55206	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.936990976 CEST	55204	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.941911936 CEST	1337	55200	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.942267895 CEST	1337	55206	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.942321062 CEST	55206	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.942755938 CEST	1337	55204	154.213.187.206	192.168.2.15
Oct 26, 2024 19:39:59.965002060 CEST	55206	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:39:59.970437050 CEST	1337	55206	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.674710035 CEST	1337	55204	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.674941063 CEST	55204	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.684211969 CEST	1337	55206	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.684289932 CEST	55206	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.926587105 CEST	1337	55204	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.926616907 CEST	1337	55206	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.926769018 CEST	55204	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.926911116 CEST	55206	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.927700043 CEST	55208	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.927959919 CEST	55210	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.935832977 CEST	1337	55204	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.936022043 CEST	1337	55206	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.940937996 CEST	1337	55208	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.940968990 CEST	1337	55210	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.941034079 CEST	55208	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.941046000 CEST	55210	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.990226984 CEST	55208	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.990448952 CEST	55210	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:00.996112108 CEST	1337	55208	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:00.996517897 CEST	1337	55210	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:01.712948084 CEST	1337	55208	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:01.713174105 CEST	55208	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:01.805140972 CEST	1337	55210	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:01.805437088 CEST	55210	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:01.805994987 CEST	55212	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:01.810878038 CEST	1337	55210	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:01.811381102 CEST	1337	55212	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:01.811463118 CEST	55212	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:01.827186108 CEST	1337	55208	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:01.827260017 CEST	55208	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:01.827858925 CEST	55214	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:01.832612991 CEST	1337	55208	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:01.833146095 CEST	1337	55214	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:01.833190918 CEST	55214	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:01.843931913 CEST	55212	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:01.849277973 CEST	1337	55212	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:01.862586021 CEST	55214	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:01.868026018 CEST	1337	55214	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.981543064 CEST	1337	55212	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.981637955 CEST	1337	55214	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.981677055 CEST	55212	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:02.981677055 CEST	55214	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:02.982566118 CEST	1337	55212	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.982625961 CEST	55212	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:02.982743025 CEST	1337	55212	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.982774019 CEST	1337	55214	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.982784033 CEST	55212	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:02.982820034 CEST	55214	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:02.982952118 CEST	1337	55214	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.982992887 CEST	55214	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:02.983797073 CEST	55216	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:02.984056950 CEST	55218	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:02.988641977 CEST	1337	55212	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.988656044 CEST	1337	55214	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.993536949 CEST	1337	55216	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.993550062 CEST	1337	55218	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:02.993750095 CEST	55216	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:02.993751049 CEST	55218	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.044718981 CEST	55216	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.045058966 CEST	55218	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.051248074 CEST	1337	55216	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.051829100 CEST	1337	55218	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.899543047 CEST	1337	55216	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.899571896 CEST	1337	55218	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.899698973 CEST	55216	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.899698973 CEST	55218	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.899879932 CEST	1337	55216	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.899996042 CEST	1337	55218	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.900002003 CEST	55216	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.900136948 CEST	1337	55216	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.900167942 CEST	1337	55218	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.900197983 CEST	55216	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.900249004 CEST	55218	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.900249004 CEST	55218	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.901029110 CEST	55220	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.901200056 CEST	55222	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.910720110 CEST	1337	55216	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.910926104 CEST	1337	55218	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.911060095 CEST	1337	55220	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.911119938 CEST	1337	55222	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.911133051 CEST	55220	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.911168098 CEST	55222	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.959902048 CEST	55220	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.959986925 CEST	55222	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:03.965749979 CEST	1337	55220	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:03.965795994 CEST	1337	55222	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.037991047 CEST	1337	55220	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.038064957 CEST	1337	55222	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.038213968 CEST	1337	55220	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.038290024 CEST	55222	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.038290024 CEST	55220	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.038304090 CEST	1337	55222	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.038379908 CEST	55220	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.038392067 CEST	1337	55220	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.038434982 CEST	55220	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.038502932 CEST	1337	55222	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.038516998 CEST	55222	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.038558960 CEST	55222	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.039222002 CEST	55224	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.039447069 CEST	55226	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.252918959 CEST	55222	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.252918959 CEST	55220	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.359648943 CEST	1337	55220	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.359741926 CEST	55220	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.359756947 CEST	1337	55222	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.359812975 CEST	55222	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.363118887 CEST	1337	55220	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.363209963 CEST	1337	55222	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.364305019 CEST	1337	55224	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.364362955 CEST	1337	55226	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.364419937 CEST	55224	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.364449978 CEST	55226	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.364500046 CEST	1337	55222	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.364527941 CEST	1337	55220	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.364561081 CEST	55222	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.364583969 CEST	55220	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.412128925 CEST	55224	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.412343025 CEST	55226	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:05.417501926 CEST	1337	55224	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:05.417671919 CEST	1337	55226	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.122859001 CEST	1337	55224	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.122958899 CEST	55224	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.137450933 CEST	1337	55226	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.137605906 CEST	55226	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.262347937 CEST	1337	55224	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.262494087 CEST	55224	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.263504028 CEST	55228	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.268094063 CEST	1337	55224	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.268968105 CEST	1337	55228	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.269059896 CEST	55228	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.273844004 CEST	1337	55226	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.273958921 CEST	55226	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.274847984 CEST	55230	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.279377937 CEST	1337	55226	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.280436993 CEST	1337	55230	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.280483007 CEST	55230	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.316762924 CEST	55228	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.322307110 CEST	1337	55228	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:06.326627970 CEST	55230	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:06.332086086 CEST	1337	55230	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.029608011 CEST	1337	55228	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.029819012 CEST	55228	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.040296078 CEST	1337	55230	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.040364027 CEST	55230	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.165967941 CEST	1337	55228	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.166189909 CEST	55228	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.166702032 CEST	55232	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.180805922 CEST	1337	55230	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.180867910 CEST	1337	55228	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.180870056 CEST	55230	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.180898905 CEST	1337	55232	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.181082964 CEST	55232	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.181200981 CEST	55234	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.187532902 CEST	1337	55230	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.187581062 CEST	1337	55234	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.187654018 CEST	55234	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.219643116 CEST	55234	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.225744963 CEST	55232	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.225785971 CEST	1337	55234	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.231172085 CEST	1337	55232	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.929970980 CEST	1337	55232	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.930255890 CEST	55232	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:07.940648079 CEST	1337	55234	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:07.940732956 CEST	55234	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.065731049 CEST	1337	55232	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.065874100 CEST	55232	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.066409111 CEST	55236	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.071353912 CEST	1337	55232	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.071932077 CEST	1337	55236	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.071985960 CEST	55236	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.076905012 CEST	1337	55234	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.076987982 CEST	55234	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.077387094 CEST	55238	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.082425117 CEST	1337	55234	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.082700014 CEST	1337	55238	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.082743883 CEST	55238	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.114490032 CEST	55238	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.115139008 CEST	55236	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.119880915 CEST	1337	55238	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.120464087 CEST	1337	55236	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.820858955 CEST	1337	55236	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.821127892 CEST	55236	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.835890055 CEST	1337	55238	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.835975885 CEST	55238	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.957989931 CEST	1337	55236	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.958271027 CEST	55236	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.958794117 CEST	55240	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.964045048 CEST	1337	55236	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.964224100 CEST	1337	55240	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.964351892 CEST	55240	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.973778963 CEST	1337	55238	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.973844051 CEST	55238	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.974422932 CEST	55242	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.979234934 CEST	1337	55238	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.979969025 CEST	1337	55242	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:08.980098963 CEST	55242	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:08.994725943 CEST	55240	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.000036001 CEST	1337	55240	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.010982037 CEST	55242	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.016350031 CEST	1337	55242	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.736289978 CEST	1337	55242	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.736510992 CEST	55242	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.743937969 CEST	1337	55240	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.744024992 CEST	55240	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.872746944 CEST	1337	55242	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.873014927 CEST	55242	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.873660088 CEST	55244	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.878582954 CEST	1337	55242	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.879091978 CEST	1337	55244	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.879169941 CEST	55244	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.883930922 CEST	1337	55240	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.884130955 CEST	55240	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.884577990 CEST	55246	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.889699936 CEST	1337	55240	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.890280008 CEST	1337	55246	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.890326977 CEST	55246	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.910546064 CEST	55244	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.916173935 CEST	1337	55244	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:09.922472954 CEST	55246	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:09.927861929 CEST	1337	55246	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.629468918 CEST	1337	55246	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.629695892 CEST	55246	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.642875910 CEST	1337	55244	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.642951012 CEST	55244	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.761085033 CEST	1337	55246	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.761285067 CEST	55246	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.761863947 CEST	55248	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.766596079 CEST	1337	55246	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.767348051 CEST	1337	55248	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.767455101 CEST	55248	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.780981064 CEST	1337	55244	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.781032085 CEST	55244	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.781629086 CEST	55250	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.786341906 CEST	1337	55244	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.787125111 CEST	1337	55250	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.787209988 CEST	55250	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.792738914 CEST	55248	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.798616886 CEST	1337	55248	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:10.811362982 CEST	55250	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:10.817276955 CEST	1337	55250	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.903095007 CEST	1337	55248	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.903125048 CEST	1337	55250	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.903435946 CEST	55248	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.903435946 CEST	55250	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.903486967 CEST	1337	55248	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.903517962 CEST	1337	55248	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.903547049 CEST	1337	55250	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.903609991 CEST	1337	55250	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.903610945 CEST	55248	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.903640032 CEST	55248	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.903661013 CEST	55250	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.903788090 CEST	1337	55248	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.903844118 CEST	55250	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.903844118 CEST	55248	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.904553890 CEST	55252	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.904664040 CEST	55254	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.915193081 CEST	1337	55248	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.915254116 CEST	1337	55250	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.915363073 CEST	1337	55252	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.915394068 CEST	1337	55254	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.915606022 CEST	55252	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.915606022 CEST	55254	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.960062027 CEST	55254	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.960325956 CEST	55252	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:11.965912104 CEST	1337	55254	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:11.965943098 CEST	1337	55252	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.043910027 CEST	1337	55252	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.043941021 CEST	1337	55254	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.044241905 CEST	55252	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.044241905 CEST	55254	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.044365883 CEST	1337	55252	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.044397116 CEST	1337	55254	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.044440985 CEST	1337	55254	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.044471025 CEST	1337	55252	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.044702053 CEST	55254	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.044703007 CEST	55252	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.044703007 CEST	55254	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.044703007 CEST	55252	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.045306921 CEST	55256	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.045497894 CEST	55258	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.055972099 CEST	1337	55254	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.056000948 CEST	1337	55252	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.056088924 CEST	1337	55256	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.056145906 CEST	1337	55258	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.056224108 CEST	55256	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.056287050 CEST	55258	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.101459980 CEST	55256	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.101655006 CEST	55258	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.107013941 CEST	1337	55256	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.107069016 CEST	1337	55258	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.806025982 CEST	1337	55258	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.806123972 CEST	55258	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.813853025 CEST	1337	55256	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.813945055 CEST	55256	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.942966938 CEST	1337	55258	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.943182945 CEST	55258	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.943833113 CEST	55260	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.948638916 CEST	1337	55258	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.949155092 CEST	1337	55260	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.949229956 CEST	55260	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.950599909 CEST	1337	55256	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.950670004 CEST	55256	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.951272964 CEST	55262	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.956111908 CEST	1337	55256	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.956825972 CEST	1337	55262	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.956906080 CEST	55262	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.988308907 CEST	55260	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:14.993639946 CEST	1337	55260	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:14.996484041 CEST	55262	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.001950979 CEST	1337	55262	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.727796078 CEST	1337	55262	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.727919102 CEST	1337	55260	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.727935076 CEST	55262	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.727987051 CEST	55260	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.821373940 CEST	1337	55262	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.821501017 CEST	55262	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.821973085 CEST	55264	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.826963902 CEST	1337	55262	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.827428102 CEST	1337	55264	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.827497005 CEST	55264	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.841077089 CEST	1337	55260	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.841152906 CEST	55260	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.841715097 CEST	55266	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.846541882 CEST	1337	55260	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.847057104 CEST	1337	55266	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.847115040 CEST	55266	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.850424051 CEST	55264	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.855853081 CEST	1337	55264	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:15.870134115 CEST	55266	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:15.875534058 CEST	1337	55266	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.578437090 CEST	1337	55264	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.578726053 CEST	55264	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.611084938 CEST	1337	55266	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.611187935 CEST	55266	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.715090036 CEST	1337	55264	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.715363979 CEST	55264	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.715965033 CEST	55268	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.720949888 CEST	1337	55264	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.721693039 CEST	1337	55268	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.721788883 CEST	55268	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.742803097 CEST	55268	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.748287916 CEST	1337	55268	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.749110937 CEST	1337	55266	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.749197006 CEST	55266	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.749514103 CEST	55270	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.754955053 CEST	1337	55266	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.755048037 CEST	1337	55270	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:16.755157948 CEST	55270	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.774715900 CEST	55270	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:16.780374050 CEST	1337	55270	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.465847969 CEST	1337	55268	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.466025114 CEST	55268	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.533693075 CEST	1337	55270	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.533823013 CEST	55270	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.599910975 CEST	1337	55268	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.600164890 CEST	55268	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.600626945 CEST	55272	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.605644941 CEST	1337	55268	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.606075048 CEST	1337	55272	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.606137991 CEST	55272	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.628707886 CEST	55272	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.634331942 CEST	1337	55272	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.670139074 CEST	1337	55270	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.670265913 CEST	55270	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.670856953 CEST	55274	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.675913095 CEST	1337	55270	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.676301003 CEST	1337	55274	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:17.676343918 CEST	55274	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.699847937 CEST	55274	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:17.705276012 CEST	1337	55274	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.361139059 CEST	1337	55272	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.361346960 CEST	55272	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.423746109 CEST	1337	55274	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.423970938 CEST	55274	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.496638060 CEST	1337	55272	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.497066021 CEST	55272	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.497838974 CEST	55276	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.502564907 CEST	1337	55272	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.503330946 CEST	1337	55276	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.503417969 CEST	55276	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.528218031 CEST	55276	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.533581018 CEST	1337	55276	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.560017109 CEST	1337	55274	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.560129881 CEST	55274	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.561223984 CEST	55278	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.565618992 CEST	1337	55274	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.566735029 CEST	1337	55278	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:18.566818953 CEST	55278	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.588159084 CEST	55278	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:18.593580961 CEST	1337	55278	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.245840073 CEST	1337	55276	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.245980024 CEST	55276	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.246041059 CEST	1337	55278	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.246097088 CEST	55278	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.246112108 CEST	1337	55276	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.246125937 CEST	1337	55276	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.246167898 CEST	55276	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.246259928 CEST	55276	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.246272087 CEST	1337	55278	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.246340990 CEST	1337	55278	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.246423006 CEST	55278	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.246491909 CEST	55278	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.246586084 CEST	1337	55276	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.246629953 CEST	55276	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.246753931 CEST	1337	55278	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.246800900 CEST	55278	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.247275114 CEST	1337	55276	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.247337103 CEST	55276	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.247365952 CEST	1337	55278	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.247402906 CEST	55278	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.247575045 CEST	55280	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.247904062 CEST	55282	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.251907110 CEST	1337	55276	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.257982969 CEST	1337	55278	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.258281946 CEST	1337	55280	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.258353949 CEST	55280	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.258356094 CEST	1337	55282	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.258409977 CEST	55282	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.307733059 CEST	55280	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.307944059 CEST	55282	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:20.313011885 CEST	1337	55280	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:20.313198090 CEST	1337	55282	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:21.013505936 CEST	1337	55282	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:21.013658047 CEST	55282	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:21.149522066 CEST	1337	55282	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:21.149657011 CEST	55282	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:21.150449991 CEST	55284	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:21.155033112 CEST	1337	55282	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:21.155781984 CEST	1337	55284	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:21.155889034 CEST	55284	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:21.180840015 CEST	55284	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:21.186374903 CEST	1337	55284	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:21.909199953 CEST	1337	55284	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:21.909414053 CEST	55284	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.049002886 CEST	1337	55284	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:22.049150944 CEST	55284	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.050033092 CEST	55286	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.054506063 CEST	1337	55284	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:22.055402994 CEST	1337	55286	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:22.055509090 CEST	55286	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.080401897 CEST	55286	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.085819960 CEST	1337	55286	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:22.792587996 CEST	1337	55286	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:22.792784929 CEST	55286	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.924621105 CEST	1337	55286	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:22.924891949 CEST	55286	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.925906897 CEST	55288	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.930166006 CEST	1337	55286	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:22.931222916 CEST	1337	55288	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:22.931281090 CEST	55288	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.957155943 CEST	55288	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:22.962655067 CEST	1337	55288	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:23.680093050 CEST	1337	55288	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:23.680301905 CEST	55288	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:23.816164017 CEST	1337	55288	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:23.816346884 CEST	55288	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:23.817430019 CEST	55290	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:23.821705103 CEST	1337	55288	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:23.823205948 CEST	1337	55290	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:23.823275089 CEST	55290	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:23.849616051 CEST	55290	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:23.854958057 CEST	1337	55290	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:24.566087961 CEST	1337	55290	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:24.566395044 CEST	55290	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:24.696193933 CEST	1337	55290	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:24.696532011 CEST	55290	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:24.697113991 CEST	55292	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:24.702269077 CEST	1337	55290	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:24.702806950 CEST	1337	55292	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:24.702922106 CEST	55292	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:24.725274086 CEST	55292	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:24.730637074 CEST	1337	55292	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:25.436969042 CEST	1337	55292	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:25.437304974 CEST	55292	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:25.566054106 CEST	1337	55292	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:25.566436052 CEST	55292	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:25.567039967 CEST	55294	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:25.571794033 CEST	1337	55292	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:25.572422981 CEST	1337	55294	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:25.572510958 CEST	55294	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:25.592267036 CEST	55294	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:25.597892046 CEST	1337	55294	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:26.328440905 CEST	1337	55294	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:26.328629017 CEST	55294	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:26.465264082 CEST	1337	55294	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:26.465507984 CEST	55294	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:26.466063976 CEST	55296	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:26.470858097 CEST	1337	55294	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:26.471576929 CEST	1337	55296	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:26.471666098 CEST	55296	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:26.489967108 CEST	55296	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:26.495281935 CEST	1337	55296	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:27.225894928 CEST	1337	55296	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:27.226218939 CEST	55296	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:27.360909939 CEST	1337	55296	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:27.361192942 CEST	55296	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:27.361876011 CEST	55298	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:27.366542101 CEST	1337	55296	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:27.367171049 CEST	1337	55298	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:27.367263079 CEST	55298	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:27.391871929 CEST	55298	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:27.397285938 CEST	1337	55298	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:28.127713919 CEST	1337	55298	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:28.127919912 CEST	55298	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:28.263688087 CEST	1337	55298	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:28.263983011 CEST	55298	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:28.264544964 CEST	55300	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:28.269500017 CEST	1337	55298	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:28.269890070 CEST	1337	55300	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:28.269970894 CEST	55300	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:28.288410902 CEST	55300	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:28.293670893 CEST	1337	55300	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:29.037357092 CEST	1337	55300	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:29.037594080 CEST	55300	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:29.161751986 CEST	1337	55300	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:29.161884069 CEST	55300	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:29.162377119 CEST	55302	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:29.167203903 CEST	1337	55300	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:29.167648077 CEST	1337	55302	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:29.167757034 CEST	55302	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:29.186048985 CEST	55302	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:29.191369057 CEST	1337	55302	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:29.918143988 CEST	1337	55302	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:29.918251991 CEST	55302	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.055063009 CEST	1337	55302	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:30.055422068 CEST	55302	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.055877924 CEST	55304	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.060986042 CEST	1337	55302	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:30.061350107 CEST	1337	55304	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:30.061482906 CEST	55304	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.082758904 CEST	55304	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.088372946 CEST	1337	55304	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:30.823745012 CEST	1337	55304	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:30.823887110 CEST	55304	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.963325977 CEST	1337	55304	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:30.963577986 CEST	55304	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.964098930 CEST	55306	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.968997955 CEST	1337	55304	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:30.969444990 CEST	1337	55306	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:30.969532013 CEST	55306	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.988486052 CEST	55306	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:30.993844986 CEST	1337	55306	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:31.950546980 CEST	1337	55306	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:31.950742006 CEST	55306	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:31.950875998 CEST	1337	55306	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:31.950963974 CEST	55306	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:31.951142073 CEST	1337	55306	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:31.951198101 CEST	55306	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:31.951510906 CEST	55308	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:31.957154989 CEST	1337	55306	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:31.957532883 CEST	1337	55308	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:31.957575083 CEST	55308	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:31.976363897 CEST	55308	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:31.981967926 CEST	1337	55308	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:32.830765963 CEST	1337	55308	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:32.830935955 CEST	55308	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:32.831989050 CEST	55310	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:32.836373091 CEST	1337	55308	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:32.837387085 CEST	1337	55310	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:32.837450027 CEST	55310	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:32.867525101 CEST	55310	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:32.873008013 CEST	1337	55310	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:33.576059103 CEST	1337	55310	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:33.576338053 CEST	55310	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:33.711225986 CEST	1337	55310	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:33.711402893 CEST	55310	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:33.711899042 CEST	55312	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:33.716713905 CEST	1337	55310	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:33.717221022 CEST	1337	55312	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:33.717340946 CEST	55312	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:33.736373901 CEST	55312	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:33.742094994 CEST	1337	55312	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:34.498547077 CEST	1337	55312	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:34.498687983 CEST	55312	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:34.638199091 CEST	1337	55312	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:34.638437033 CEST	55312	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:34.638957977 CEST	55314	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:34.644160986 CEST	1337	55312	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:34.644275904 CEST	1337	55314	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:34.644342899 CEST	55314	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:34.661951065 CEST	55314	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:34.667365074 CEST	1337	55314	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:35.410917997 CEST	1337	55314	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:35.411007881 CEST	55314	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:35.548542976 CEST	1337	55314	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:35.548777103 CEST	55314	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:35.549722910 CEST	55316	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:35.554480076 CEST	1337	55314	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:35.555085897 CEST	1337	55316	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:35.555165052 CEST	55316	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:35.582108021 CEST	55316	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:35.587975025 CEST	1337	55316	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:36.311853886 CEST	1337	55316	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:36.312016010 CEST	55316	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:36.448426962 CEST	1337	55316	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:36.448662996 CEST	55316	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:36.449484110 CEST	55318	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:36.454035997 CEST	1337	55316	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:36.454901934 CEST	1337	55318	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:36.454968929 CEST	55318	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:36.477232933 CEST	55318	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:36.482606888 CEST	1337	55318	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:37.206238031 CEST	1337	55318	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:37.206651926 CEST	55318	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:37.343571901 CEST	1337	55318	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:37.343843937 CEST	55318	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:37.344216108 CEST	55320	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:37.349190950 CEST	1337	55318	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:37.349638939 CEST	1337	55320	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:37.349745035 CEST	55320	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:37.365722895 CEST	55320	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:37.371269941 CEST	1337	55320	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:38.098829031 CEST	1337	55320	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:38.099174023 CEST	55320	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:38.236258984 CEST	1337	55320	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:38.236515999 CEST	55320	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:38.237082958 CEST	55322	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:38.241941929 CEST	1337	55320	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:38.242373943 CEST	1337	55322	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:38.242465019 CEST	55322	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:38.262763023 CEST	55322	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:38.268150091 CEST	1337	55322	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:39.055883884 CEST	1337	55322	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:39.056061983 CEST	55322	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:39.127515078 CEST	1337	55322	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:39.127810001 CEST	55322	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:39.128757000 CEST	55324	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:39.133126020 CEST	1337	55322	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:39.134114027 CEST	1337	55324	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:39.134188890 CEST	55324	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:39.157723904 CEST	55324	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:39.163117886 CEST	1337	55324	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:39.884171009 CEST	1337	55324	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:39.884274960 CEST	55324	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.021401882 CEST	1337	55324	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:40.021548033 CEST	55324	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.022222996 CEST	55326	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.026946068 CEST	1337	55324	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:40.027796030 CEST	1337	55326	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:40.027836084 CEST	55326	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.047581911 CEST	55326	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.053035975 CEST	1337	55326	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:40.804526091 CEST	1337	55326	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:40.804701090 CEST	55326	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.941492081 CEST	1337	55326	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:40.941685915 CEST	55326	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.942111015 CEST	55328	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.947324038 CEST	1337	55326	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:40.947529078 CEST	1337	55328	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:40.947573900 CEST	55328	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.964885950 CEST	55328	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:40.970318079 CEST	1337	55328	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:41.696774006 CEST	1337	55328	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:41.697002888 CEST	55328	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:41.954965115 CEST	1337	55328	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:41.955251932 CEST	55328	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:41.955944061 CEST	55330	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:41.960634947 CEST	1337	55328	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:41.961256981 CEST	1337	55330	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:41.961318016 CEST	55330	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:41.985630989 CEST	55330	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:41.990973949 CEST	1337	55330	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:42.705928087 CEST	1337	55330	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:42.706123114 CEST	55330	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:43.013761044 CEST	1337	55330	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:43.014029980 CEST	55330	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:43.014482021 CEST	55332	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:43.019536018 CEST	1337	55330	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:43.019857883 CEST	1337	55332	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:43.019979954 CEST	55332	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:43.026109934 CEST	55332	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:43.031514883 CEST	1337	55332	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:43.767765045 CEST	1337	55332	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:43.767939091 CEST	55332	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.064809084 CEST	1337	55332	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:44.065011978 CEST	55332	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.065936089 CEST	55334	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.070337057 CEST	1337	55332	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:44.076109886 CEST	1337	55334	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:44.076175928 CEST	55334	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.076303959 CEST	55334	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.082046032 CEST	1337	55334	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:44.819021940 CEST	1337	55334	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:44.819183111 CEST	55334	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.954974890 CEST	1337	55334	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:44.955080032 CEST	55334	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.955754995 CEST	55336	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.960490942 CEST	1337	55334	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:44.961113930 CEST	1337	55336	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:44.961169958 CEST	55336	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.961220980 CEST	55336	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:44.966629028 CEST	1337	55336	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:45.708653927 CEST	1337	55336	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:45.708849907 CEST	55336	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:45.846334934 CEST	1337	55336	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:45.846595049 CEST	55336	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:45.847429037 CEST	55338	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:45.852070093 CEST	1337	55336	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:45.852822065 CEST	1337	55338	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:45.852893114 CEST	55338	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:45.853018999 CEST	55338	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:45.858347893 CEST	1337	55338	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:46.601972103 CEST	1337	55338	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:46.602137089 CEST	55338	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:46.740674973 CEST	1337	55338	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:46.740828037 CEST	55338	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:46.741797924 CEST	55340	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:46.746324062 CEST	1337	55338	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:46.747569084 CEST	1337	55340	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:46.747719049 CEST	55340	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:46.747834921 CEST	55340	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:46.754442930 CEST	1337	55340	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:47.523778915 CEST	1337	55340	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:47.523971081 CEST	55340	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:47.660120964 CEST	1337	55340	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:47.660238981 CEST	55340	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:47.660840034 CEST	55342	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:47.665642023 CEST	1337	55340	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:47.666240931 CEST	1337	55342	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:47.666299105 CEST	55342	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:47.666378975 CEST	55342	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:47.671724081 CEST	1337	55342	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:48.421763897 CEST	1337	55342	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:48.422158957 CEST	55342	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:48.558156967 CEST	1337	55342	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:48.558322906 CEST	55342	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:48.558943987 CEST	55344	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:48.563657045 CEST	1337	55342	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:48.564312935 CEST	1337	55344	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:48.564382076 CEST	55344	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:48.564495087 CEST	55344	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:48.569749117 CEST	1337	55344	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:49.312078953 CEST	1337	55344	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:49.312288046 CEST	55344	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:49.448523045 CEST	1337	55344	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:49.448642015 CEST	55344	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:49.449162006 CEST	55346	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:49.454026937 CEST	1337	55344	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:49.454492092 CEST	1337	55346	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:49.454541922 CEST	55346	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:49.454607964 CEST	55346	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:49.459997892 CEST	1337	55346	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:50.208637953 CEST	1337	55346	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:50.208851099 CEST	55346	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:50.338238955 CEST	1337	55346	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:50.338440895 CEST	55346	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:50.339278936 CEST	55348	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:50.343947887 CEST	1337	55346	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:50.344938993 CEST	1337	55348	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:50.345056057 CEST	55348	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:50.345140934 CEST	55348	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:50.350533962 CEST	1337	55348	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:51.101413012 CEST	1337	55348	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:51.101691008 CEST	55348	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:51.237831116 CEST	1337	55348	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:51.237971067 CEST	55348	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:51.238622904 CEST	55350	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:51.243330002 CEST	1337	55348	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:51.243999004 CEST	1337	55350	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:51.244227886 CEST	55350	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:51.244227886 CEST	55350	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:51.250225067 CEST	1337	55350	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:52.076327085 CEST	1337	55350	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:52.076486111 CEST	55350	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:52.112525940 CEST	1337	55350	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:52.112654924 CEST	55350	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:52.113840103 CEST	55352	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:52.118172884 CEST	1337	55350	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:52.119329929 CEST	1337	55352	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:52.119421005 CEST	55352	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:52.119530916 CEST	55352	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:52.126477957 CEST	1337	55352	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:52.860711098 CEST	1337	55352	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:52.860887051 CEST	55352	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:52.997159004 CEST	1337	55352	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:52.997376919 CEST	55352	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:52.998143911 CEST	55354	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:53.003302097 CEST	1337	55352	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:53.003576040 CEST	1337	55354	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:53.003679991 CEST	55354	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:53.003830910 CEST	55354	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:53.009227991 CEST	1337	55354	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:53.762316942 CEST	1337	55354	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:53.762562037 CEST	55354	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:53.899367094 CEST	1337	55354	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:53.899668932 CEST	55354	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:53.900532007 CEST	55356	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:53.905107975 CEST	1337	55354	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:53.905864954 CEST	1337	55356	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:53.906018019 CEST	55356	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:53.906111956 CEST	55356	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:53.911408901 CEST	1337	55356	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:54.662573099 CEST	1337	55356	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:54.662772894 CEST	55356	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:54.798604012 CEST	1337	55356	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:54.798737049 CEST	55356	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:54.799432039 CEST	55358	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:54.804152966 CEST	1337	55356	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:54.804886103 CEST	1337	55358	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:54.804959059 CEST	55358	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:54.805072069 CEST	55358	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:54.810538054 CEST	1337	55358	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:55.554702997 CEST	1337	55358	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:55.554826021 CEST	55358	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:55.692733049 CEST	1337	55358	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:55.692960978 CEST	55358	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:55.693712950 CEST	55360	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:55.698781013 CEST	1337	55358	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:55.699206114 CEST	1337	55360	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:55.699268103 CEST	55360	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:55.699364901 CEST	55360	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:55.704722881 CEST	1337	55360	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:56.447438955 CEST	1337	55360	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:56.447650909 CEST	55360	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:56.584146023 CEST	1337	55360	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:56.584248066 CEST	55360	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:56.585038900 CEST	55362	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:56.589931965 CEST	1337	55360	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:56.590607882 CEST	1337	55362	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:56.590684891 CEST	55362	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:56.590814114 CEST	55362	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:56.596278906 CEST	1337	55362	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:57.345648050 CEST	1337	55362	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:57.345848083 CEST	55362	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:57.481803894 CEST	1337	55362	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:57.481971025 CEST	55362	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:57.482812881 CEST	55364	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:57.487420082 CEST	1337	55362	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:57.488480091 CEST	1337	55364	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:57.488600016 CEST	55364	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:57.488711119 CEST	55364	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:57.494349003 CEST	1337	55364	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:58.245276928 CEST	1337	55364	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:58.245440960 CEST	55364	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:58.379311085 CEST	1337	55364	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:58.379467964 CEST	55364	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:58.380273104 CEST	55366	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:58.385591984 CEST	1337	55364	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:58.386307001 CEST	1337	55366	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:58.386375904 CEST	55366	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:58.386488914 CEST	55366	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:58.392740965 CEST	1337	55366	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:59.140952110 CEST	1337	55366	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:59.141125917 CEST	55366	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:59.277543068 CEST	1337	55366	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:59.277704954 CEST	55366	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:59.278526068 CEST	55368	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:59.283550978 CEST	1337	55366	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:59.285320044 CEST	1337	55368	154.213.187.206	192.168.2.15
Oct 26, 2024 19:40:59.285398960 CEST	55368	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:59.285517931 CEST	55368	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:40:59.291913033 CEST	1337	55368	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:00.029278994 CEST	1337	55368	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:00.029587984 CEST	55368	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:00.166857004 CEST	1337	55368	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:00.166973114 CEST	55368	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:00.167536020 CEST	55370	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:00.172446012 CEST	1337	55368	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:00.172893047 CEST	1337	55370	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:00.172944069 CEST	55370	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:00.173002005 CEST	55370	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:00.178663015 CEST	1337	55370	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:00.930634975 CEST	1337	55370	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:00.930843115 CEST	55370	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.067401886 CEST	1337	55370	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:01.067591906 CEST	55370	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.068859100 CEST	55372	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.073065996 CEST	1337	55370	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:01.074346066 CEST	1337	55372	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:01.074476004 CEST	55372	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.074582100 CEST	55372	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.079886913 CEST	1337	55372	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:01.849348068 CEST	1337	55372	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:01.849586964 CEST	55372	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.987296104 CEST	1337	55372	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:01.987411976 CEST	55372	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.988231897 CEST	55374	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.992871046 CEST	1337	55372	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:01.993560076 CEST	1337	55374	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:01.993614912 CEST	55374	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.993671894 CEST	55374	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:01.999013901 CEST	1337	55374	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:02.741736889 CEST	1337	55374	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:02.741843939 CEST	55374	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:02.877124071 CEST	1337	55374	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:02.877227068 CEST	55374	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:02.878288031 CEST	55376	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:02.882700920 CEST	1337	55374	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:02.883711100 CEST	1337	55376	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:02.883810043 CEST	55376	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:02.883851051 CEST	55376	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:02.889305115 CEST	1337	55376	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:03.638282061 CEST	1337	55376	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:03.638525963 CEST	55376	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:03.766491890 CEST	1337	55376	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:03.766691923 CEST	55376	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:03.767776966 CEST	55378	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:03.772270918 CEST	1337	55376	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:03.773139000 CEST	1337	55378	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:03.773220062 CEST	55378	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:03.773332119 CEST	55378	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:03.778688908 CEST	1337	55378	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:04.519994974 CEST	1337	55378	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:04.520236969 CEST	55378	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:04.657090902 CEST	1337	55378	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:04.657443047 CEST	55378	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:04.658504009 CEST	55380	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:04.663038015 CEST	1337	55378	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:04.664521933 CEST	1337	55380	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:04.664659023 CEST	55380	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:04.664747953 CEST	55380	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:04.670331955 CEST	1337	55380	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:05.418962955 CEST	1337	55380	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:05.419146061 CEST	55380	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:05.555571079 CEST	1337	55380	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:05.555829048 CEST	55380	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:05.556955099 CEST	55382	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:05.561336040 CEST	1337	55380	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:05.562446117 CEST	1337	55382	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:05.562511921 CEST	55382	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:05.562594891 CEST	55382	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:05.568166018 CEST	1337	55382	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:06.441468000 CEST	1337	55382	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:06.441657066 CEST	55382	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:06.442797899 CEST	55384	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:06.447098970 CEST	1337	55382	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:06.448389053 CEST	1337	55384	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:06.448474884 CEST	55384	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:06.448539019 CEST	55384	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:06.454090118 CEST	1337	55384	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:07.240885973 CEST	1337	55384	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:07.241133928 CEST	55384	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:07.378353119 CEST	1337	55384	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:07.378686905 CEST	55384	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:07.379690886 CEST	55386	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:07.384191036 CEST	1337	55384	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:07.385191917 CEST	1337	55386	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:07.385268927 CEST	55386	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:07.385379076 CEST	55386	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:07.390693903 CEST	1337	55386	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:08.133021116 CEST	1337	55386	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:08.133491993 CEST	55386	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:08.269331932 CEST	1337	55386	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:08.269671917 CEST	55386	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:08.270600080 CEST	55388	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:08.275192976 CEST	1337	55386	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:08.276212931 CEST	1337	55388	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:08.276316881 CEST	55388	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:08.276442051 CEST	55388	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:08.282000065 CEST	1337	55388	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:09.035521984 CEST	1337	55388	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:09.035732985 CEST	55388	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:09.175013065 CEST	1337	55388	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:09.175230026 CEST	55388	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:09.176269054 CEST	55390	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:09.180778980 CEST	1337	55388	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:09.181713104 CEST	1337	55390	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:09.181794882 CEST	55390	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:09.181914091 CEST	55390	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:09.187279940 CEST	1337	55390	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:09.933906078 CEST	1337	55390	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:09.934221029 CEST	55390	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.067717075 CEST	1337	55390	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:10.067967892 CEST	55390	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.069134951 CEST	55392	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.073631048 CEST	1337	55390	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:10.074867010 CEST	1337	55392	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:10.074945927 CEST	55392	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.075074911 CEST	55392	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.080559015 CEST	1337	55392	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:10.830225945 CEST	1337	55392	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:10.830369949 CEST	55392	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.967360020 CEST	1337	55392	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:10.967519999 CEST	55392	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.968374968 CEST	55394	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.973704100 CEST	1337	55392	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:10.974353075 CEST	1337	55394	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:10.974416018 CEST	55394	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.974468946 CEST	55394	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:10.981609106 CEST	1337	55394	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:11.716979980 CEST	1337	55394	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:11.717206001 CEST	55394	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:11.846443892 CEST	1337	55394	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:11.846733093 CEST	55394	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:11.848084927 CEST	55396	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:11.852219105 CEST	1337	55394	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:11.853552103 CEST	1337	55396	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:11.853677034 CEST	55396	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:11.853800058 CEST	55396	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:11.859155893 CEST	1337	55396	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:12.597054005 CEST	1337	55396	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:12.597372055 CEST	55396	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:12.727044106 CEST	1337	55396	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:12.727303982 CEST	55396	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:12.728375912 CEST	55398	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:12.733361006 CEST	1337	55396	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:12.733851910 CEST	1337	55398	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:12.734051943 CEST	55398	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:12.734051943 CEST	55398	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:12.739725113 CEST	1337	55398	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:13.506870985 CEST	1337	55398	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:13.507160902 CEST	55398	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:13.638808966 CEST	1337	55398	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:13.639000893 CEST	55398	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:13.640230894 CEST	55400	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:13.644450903 CEST	1337	55398	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:13.645878077 CEST	1337	55400	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:13.646152020 CEST	55400	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:13.646152020 CEST	55400	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:13.651731968 CEST	1337	55400	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:14.379754066 CEST	1337	55400	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:14.379964113 CEST	55400	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:14.511508942 CEST	1337	55400	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:14.511840105 CEST	55400	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:14.513130903 CEST	55402	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:14.517266989 CEST	1337	55400	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:14.518549919 CEST	1337	55402	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:14.518709898 CEST	55402	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:14.518763065 CEST	55402	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:14.524409056 CEST	1337	55402	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:15.277672052 CEST	1337	55402	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:15.277987957 CEST	55402	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:15.414834023 CEST	1337	55402	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:15.415153027 CEST	55402	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:15.415858030 CEST	55404	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:15.420711994 CEST	1337	55402	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:15.421350002 CEST	1337	55404	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:15.421454906 CEST	55404	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:15.421561956 CEST	55404	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:15.427139997 CEST	1337	55404	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:16.178622007 CEST	1337	55404	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:16.179063082 CEST	55404	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:16.315900087 CEST	1337	55404	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:16.316138029 CEST	55404	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:16.317370892 CEST	55406	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:16.322137117 CEST	1337	55404	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:16.323174000 CEST	1337	55406	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:16.323291063 CEST	55406	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:16.323401928 CEST	55406	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:16.329015017 CEST	1337	55406	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:17.079811096 CEST	1337	55406	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:17.079992056 CEST	55406	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:17.217163086 CEST	1337	55406	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:17.217379093 CEST	55406	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:17.218210936 CEST	55408	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:17.222824097 CEST	1337	55406	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:17.223620892 CEST	1337	55408	154.213.187.206	192.168.2.15
Oct 26, 2024 19:41:17.223742008 CEST	55408	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:17.223858118 CEST	55408	1337	192.168.2.15	154.213.187.206
Oct 26, 2024 19:41:17.229537964 CEST	1337	55408	154.213.187.206	192.168.2.15

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 19:39:08.386233091 CEST	34686	53	192.168.2.15	8.8.8.8
Oct 26, 2024 19:39:08.386233091 CEST	34686	53	192.168.2.15	8.8.8.8
Oct 26, 2024 19:39:08.408746004 CEST	53	34686	8.8.8.8	192.168.2.15
Oct 26, 2024 19:39:08.408760071 CEST	53	34686	8.8.8.8	192.168.2.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 26, 2024 19:39:08.386233091 CEST	192.168.2.15	8.8.8.8	0x9ff6	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:39:08.386233091 CEST	192.168.2.15	8.8.8.8	0x3ceb	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 26, 2024 19:39:08.408760071 CEST	8.8.8.8	192.168.2.15	0x9ff6	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:39:08.408760071 CEST	8.8.8.8	192.168.2.15	0x9ff6	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: FBI.arm7.elf PID: 5536, Parent PID: 5452

General

Start time (UTC):	17:39:06
Start date (UTC):	26/10/2024
Path:	/tmp/FBI.arm7.elf
Arguments:	/tmp/FBI.arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5538, Parent PID: 5536

General

Start time (UTC):	17:39:06
Start date (UTC):	26/10/2024
Path:	/tmp/FBI.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5540, Parent PID: 5536

General

Start time (UTC):	17:39:06
Start date (UTC):	26/10/2024
Path:	/tmp/FBI.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5542, Parent PID: 5540

General

Start time (UTC):	17:39:06
Start date (UTC):	26/10/2024
Path:	/tmp/FBI.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5549, Parent PID: 5542

General

Start time (UTC):	17:39:06
Start date (UTC):	26/10/2024
Path:	/tmp/FBI.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5551, Parent PID: 5549

General

Start time (UTC):	17:39:06
Start date (UTC):	26/10/2024
Path:	/tmp/FBI.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5583, Parent PID: 5540

General

Start time (UTC):	17:39:08
Start date (UTC):	26/10/2024
Path:	/tmp/FBI.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5585, Parent PID: 5583

General

Start time (UTC):	17:39:08
Start date (UTC):	26/10/2024
Path:	/tmp/FBI.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report FBI.arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/resolve/stub-resolv.conf

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: FBI.arm7.elf PID: 5536, Parent PID: 5452

General

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5538, Parent PID: 5536

General

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5540, Parent PID: 5536

General

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5542, Parent PID: 5540

General

Chronological Activities

Analysis Process: FBI.arm7.elf PID: 5549, Parent PID: 5542

General

Linux Analysis Report
FBI.arm7.elf