Edit tour

Linux Analysis Report
insetto-x86.elf

Overview

General Information

Sample name:	insetto-x86.elf
Analysis ID:	1428874
MD5:	c2db0684c0057e19b3419bbc794f58a4
SHA1:	41f1d8b4968c83211f7790c417f4c165b2bc2fd3
SHA256:	06ebfd7c39f322513b9d9131243c48a5bf59343f9ffe4e46e5713897538510be
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Detected TCP or UDP traffic on non-standard ports

Reads CPU information from /proc indicative of miner or evasive malware

Reads system information from the proc file system

Sample has stripped symbol table

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

Analysis Advice

All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428874
Start date and time:	2024-04-19 18:51:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	insetto-x86.elf
Detection:	MAL
Classification:	mal64.troj.linELF@0/0@72/0

Warnings

VT rate limit hit for: insetto-x86.elf

Runtime Messages

Command:	/tmp/insetto-x86.elf
PID:	6223
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	carico_di_insetti.
Standard Error:

Process Tree

system is lnxubuntu20

insetto-x86.elf (PID: 6223, Parent: 6139, MD5: c2db0684c0057e19b3419bbc794f58a4) Arguments: /tmp/insetto-x86.elf

insetto-x86.elf New Fork (PID: 6224, Parent: 6223)

insetto-x86.elf New Fork (PID: 6225, Parent: 6224)

insetto-x86.elf New Fork (PID: 6228, Parent: 6224)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
insetto-x86.elf	Linux_Trojan_Mirai_3a56423b	unknown	unknown	0xa73b:$a: 24 1C 8B 44 24 20 0F B6 D0 C1 E8 08 89 54 24 24 89 44 24 20 BA 01 00
insetto-x86.elf	Linux_Trojan_Mirai_dab39a25	unknown	unknown	0x8eba:$a: 0E 75 20 50 6A 00 6A 00 6A 00 53 6A 0E FF 74 24 48 68 DD 00
insetto-x86.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8832:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88

Memory Dumps

Source	Rule	Description	Author	Strings
6225.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_3a56423b	unknown	unknown	0xa73b:$a: 24 1C 8B 44 24 20 0F B6 D0 C1 E8 08 89 54 24 24 89 44 24 20 BA 01 00
6225.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_dab39a25	unknown	unknown	0x8eba:$a: 0E 75 20 50 6A 00 6A 00 6A 00 53 6A 0E FF 74 24 48 68 DD 00
6225.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8832:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6223.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_3a56423b	unknown	unknown	0xa73b:$a: 24 1C 8B 44 24 20 0F B6 D0 C1 E8 08 89 54 24 24 89 44 24 20 BA 01 00
6223.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_dab39a25	unknown	unknown	0x8eba:$a: 0E 75 20 50 6A 00 6A 00 6A 00 53 6A 0E FF 74 24 48 68 DD 00
6223.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8832:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 1 entries

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: insetto-x86.elf

ReversingLabs: Detection: 44%

Machine Learning detection for sample

Source: insetto-x86.elf

Joe Sandbox ML: detected

Source: /tmp/insetto-x86.elf (PID: 6224)

Reads CPU info from proc file: /proc/cpuinfo

Jump to behavior

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 185.196.8.213 ports 59432,6,7,8,9,6789

Source: global traffic

TCP traffic: 192.168.2.23:56634 -> 185.196.8.213:6789

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42

Source: unknown

DNS traffic detected: queries for: jhbaghjbasdg.shop

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: insetto-x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a56423b Author: unknown
Source: insetto-x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_dab39a25 Author: unknown
Source: insetto-x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6225.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a56423b Author: unknown
Source: 6225.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_dab39a25 Author: unknown
Source: 6225.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6223.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a56423b Author: unknown
Source: 6223.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_dab39a25 Author: unknown
Source: 6223.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown

Source: ELF static info symbol of initial sample

.symtab present: no

Source: insetto-x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a56423b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 117d6eb47f000c9d475119ca0e6a1b49a91bbbece858758aaa3d7f30d0777d75, id = 3a56423b-c0cf-4483-87e3-552beb40563a, last_modified = 2021-09-16
Source: insetto-x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_dab39a25 reference_sample = 3e02fb63803110cabde08e809cf4acc1b8fb474ace531959a311858fdd578bab, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 5a628d9af9d6dccf29e78f780bb74a2fa25167954c34d4a1529bdea5ea891ac0, id = dab39a25-852b-441f-86ab-23d945daa62c, last_modified = 2022-01-26
Source: insetto-x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6225.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a56423b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 117d6eb47f000c9d475119ca0e6a1b49a91bbbece858758aaa3d7f30d0777d75, id = 3a56423b-c0cf-4483-87e3-552beb40563a, last_modified = 2021-09-16
Source: 6225.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_dab39a25 reference_sample = 3e02fb63803110cabde08e809cf4acc1b8fb474ace531959a311858fdd578bab, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 5a628d9af9d6dccf29e78f780bb74a2fa25167954c34d4a1529bdea5ea891ac0, id = dab39a25-852b-441f-86ab-23d945daa62c, last_modified = 2022-01-26
Source: 6225.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6223.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a56423b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 117d6eb47f000c9d475119ca0e6a1b49a91bbbece858758aaa3d7f30d0777d75, id = 3a56423b-c0cf-4483-87e3-552beb40563a, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_dab39a25 reference_sample = 3e02fb63803110cabde08e809cf4acc1b8fb474ace531959a311858fdd578bab, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 5a628d9af9d6dccf29e78f780bb74a2fa25167954c34d4a1529bdea5ea891ac0, id = dab39a25-852b-441f-86ab-23d945daa62c, last_modified = 2022-01-26
Source: 6223.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26

Source: classification engine

Classification label: mal64.troj.linELF@0/0@72/0

Source: /tmp/insetto-x86.elf (PID: 6224)

Reads from proc file: /proc/cpuinfo

Jump to behavior

Source: /tmp/insetto-x86.elf (PID: 6224)

Reads CPU info from proc file: /proc/cpuinfo

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	2 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
insetto-x86.elf	45%	ReversingLabs	Linux.Trojan.Mirai
insetto-x86.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
jhbaghjbasdg.shop	185.196.8.213	true	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
185.196.8.213	jhbaghjbasdg.shop	Switzerland	34888	SIMPLECARRER2IT	true
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
109.202.202.202	1lkozpLZNX.elf	Get hash	malicious	Unknown	Browse
	ew3OL4dYca.elf	Get hash	malicious	Unknown	Browse
	JGG1a56dcB.elf	Get hash	malicious	Mirai	Browse
	pXwuZJXauT.elf	Get hash	malicious	Mirai, Okiru	Browse
	uycqnGcDJD.elf	Get hash	malicious	Mirai, Okiru	Browse
	wn8pgKNArU.elf	Get hash	malicious	Mirai, Okiru	Browse
	JX1KTFsitM.elf	Get hash	malicious	Okiru	Browse
	qlgIEbAy2D.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse
	qbmHR5ZIJL.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse
	FZqYclxRiu.elf	Get hash	malicious	Mirai, Okiru	Browse
185.196.8.213	1lkozpLZNX.elf	Get hash	malicious	Unknown	Browse
	TKon2e9Awc.elf	Get hash	malicious	Mirai	Browse
	XmztmwSit3.elf	Get hash	malicious	Unknown	Browse
	If1BjZdkZh.elf	Get hash	malicious	Unknown	Browse
	dYAd42NlXg.elf	Get hash	malicious	Unknown	Browse
	63PPG1bWEo.elf	Get hash	malicious	Unknown	Browse
	mZFiaBnsij.elf	Get hash	malicious	Unknown	Browse
	JWfFVrymKr.elf	Get hash	malicious	Mirai	Browse
	CgJxT081Ih.elf	Get hash	malicious	Unknown	Browse
	shuJBFmlV9.elf	Get hash	malicious	Unknown	Browse
91.189.91.43	1lkozpLZNX.elf	Get hash	malicious	Unknown	Browse
	ew3OL4dYca.elf	Get hash	malicious	Unknown	Browse
	JGG1a56dcB.elf	Get hash	malicious	Mirai	Browse
	pXwuZJXauT.elf	Get hash	malicious	Mirai, Okiru	Browse
	uycqnGcDJD.elf	Get hash	malicious	Mirai, Okiru	Browse
	wn8pgKNArU.elf	Get hash	malicious	Mirai, Okiru	Browse
	JX1KTFsitM.elf	Get hash	malicious	Okiru	Browse
	qlgIEbAy2D.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse
	qbmHR5ZIJL.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse
	qlt52dfogC.elf	Get hash	malicious	Mirai, Okiru	Browse
91.189.91.42	1lkozpLZNX.elf	Get hash	malicious	Unknown	Browse
	ew3OL4dYca.elf	Get hash	malicious	Unknown	Browse
	JGG1a56dcB.elf	Get hash	malicious	Mirai	Browse
	pXwuZJXauT.elf	Get hash	malicious	Mirai, Okiru	Browse
	uycqnGcDJD.elf	Get hash	malicious	Mirai, Okiru	Browse
	wn8pgKNArU.elf	Get hash	malicious	Mirai, Okiru	Browse
	JX1KTFsitM.elf	Get hash	malicious	Okiru	Browse
	qlgIEbAy2D.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse
	qbmHR5ZIJL.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse
	FZqYclxRiu.elf	Get hash	malicious	Mirai, Okiru	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
jhbaghjbasdg.shop	1lkozpLZNX.elf	Get hash	malicious	Unknown	Browse	185.196.8.213
	TKon2e9Awc.elf	Get hash	malicious	Mirai	Browse	185.196.8.213
	XmztmwSit3.elf	Get hash	malicious	Unknown	Browse	185.196.8.213
	If1BjZdkZh.elf	Get hash	malicious	Unknown	Browse	185.196.8.213
	dYAd42NlXg.elf	Get hash	malicious	Unknown	Browse	185.196.8.213
	63PPG1bWEo.elf	Get hash	malicious	Unknown	Browse	185.196.8.213
	mZFiaBnsij.elf	Get hash	malicious	Unknown	Browse	185.196.8.213
	CgJxT081Ih.elf	Get hash	malicious	Unknown	Browse	185.196.8.213
	shuJBFmlV9.elf	Get hash	malicious	Unknown	Browse	185.196.8.213

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	1lkozpLZNX.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ew3OL4dYca.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	JGG1a56dcB.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	1NSVzJh1X7.elf	Get hash	malicious	Mirai, Okiru	Browse	185.125.190.26
	pXwuZJXauT.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	FtRTuVcia6.elf	Get hash	malicious	Mirai, Okiru	Browse	185.125.190.26
	uycqnGcDJD.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	wn8pgKNArU.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	JX1KTFsitM.elf	Get hash	malicious	Okiru	Browse	91.189.91.42
	qlgIEbAy2D.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	91.189.91.42
CANONICAL-ASGB	1lkozpLZNX.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ew3OL4dYca.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	JGG1a56dcB.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	1NSVzJh1X7.elf	Get hash	malicious	Mirai, Okiru	Browse	185.125.190.26
	pXwuZJXauT.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	FtRTuVcia6.elf	Get hash	malicious	Mirai, Okiru	Browse	185.125.190.26
	uycqnGcDJD.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	wn8pgKNArU.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	JX1KTFsitM.elf	Get hash	malicious	Okiru	Browse	91.189.91.42
	qlgIEbAy2D.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	91.189.91.42
SIMPLECARRER2IT	1lkozpLZNX.elf	Get hash	malicious	Unknown	Browse	185.196.8.213
	TKon2e9Awc.elf	Get hash	malicious	Mirai	Browse	185.196.8.213
	cMNGXZTEZE.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.196.8.143
	S7xdQ3L6fB.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.196.8.143
	zIgpJZ4SdE.elf	Get hash	malicious	Gafgyt	Browse	185.196.8.31
	Uwqy7t0DiT.elf	Get hash	malicious	Gafgyt	Browse	185.196.8.31
	gvCeE0lHPK.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.196.8.31
	dHim8erg6a.elf	Get hash	malicious	Gafgyt	Browse	185.196.8.31
	C4NpN8sgjJ.elf	Get hash	malicious	Gafgyt	Browse	185.196.8.31
	l1GFjqxUjj.elf	Get hash	malicious	Gafgyt	Browse	185.196.8.31
INIT7CH	1lkozpLZNX.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ew3OL4dYca.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	JGG1a56dcB.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	pXwuZJXauT.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	uycqnGcDJD.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	wn8pgKNArU.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	JX1KTFsitM.elf	Get hash	malicious	Okiru	Browse	109.202.202.202
	qlgIEbAy2D.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	109.202.202.202
	qbmHR5ZIJL.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	109.202.202.202
	FZqYclxRiu.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.335322101579263
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	insetto-x86.elf
File size:	74'608 bytes
MD5:	c2db0684c0057e19b3419bbc794f58a4
SHA1:	41f1d8b4968c83211f7790c417f4c165b2bc2fd3
SHA256:	06ebfd7c39f322513b9d9131243c48a5bf59343f9ffe4e46e5713897538510be
SHA512:	66d9aa4216e9b288cd6e3d79f5389c432cf6d37656985be2e99db961e14c6a361af2efdab3b0b2fd9e3b70964de2819559b8c82a46c52e33d59e533e2bef80a0
SSDEEP:	1536:m/Op/xecU/UANAplOSRgbStaod1vj5Uv31geQ1K7ndnuq555555555u55Y55555X:t/PQ7NyQSRgetXvAKQd/555555555u5s
TLSH:	1D733AC5EA47E4F5E806067011A7E73B9A31EA354124FE6FDB94FA37AD31612841B31C
File Content Preview:	.ELF....................T...4....!......4. ...(.....................4...4...............t ..t...t...,...4...........Q.td................................d....O..................U......=.....t..5...................u........t....h........................&...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048154
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	74208
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x11	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xfa67	0x0	0x6	AX	16
.fini	PROGBITS	0x8057b17	0xfb17	0xc	0x0	0x6	AX	1
.rodata	PROGBITS	0x8057b40	0xfb40	0x1df4	0x0	0x2	A	32
.ctors	PROGBITS	0x805a074	0x12074	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x805a07c	0x1207c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x805a0a0	0x120a0	0x100	0x0	0x3	WA	32
.bss	NOBITS	0x805a1a0	0x121a0	0x708	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x121a0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x11934	0x11934	6.4469	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x12074	0x805a074	0x805a074	0x12c	0x834	3.8283	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 18:51:43.975493908 CEST	43928	443	192.168.2.23	91.189.91.42
Apr 19, 2024 18:51:44.638955116 CEST	56634	6789	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:44.849571943 CEST	6789	56634	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:44.849803925 CEST	56634	6789	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:44.850543022 CEST	56634	6789	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:44.851100922 CEST	56634	6789	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:44.956918001 CEST	50572	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:45.060921907 CEST	6789	56634	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:45.061386108 CEST	6789	56634	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:45.061544895 CEST	56634	6789	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:45.167418003 CEST	59432	50572	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:45.167639971 CEST	50572	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:45.167639971 CEST	50572	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:45.378048897 CEST	59432	50572	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:45.378288031 CEST	50572	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:45.588757038 CEST	59432	50572	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:45.588797092 CEST	59432	50572	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:45.589051962 CEST	50572	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:45.799484968 CEST	59432	50572	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:46.694199085 CEST	50574	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:46.904687881 CEST	59432	50574	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:46.904814959 CEST	50574	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:46.904907942 CEST	50574	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:47.115319014 CEST	59432	50574	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:47.115547895 CEST	50574	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:47.325902939 CEST	59432	50574	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:47.325963974 CEST	59432	50574	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:47.326227903 CEST	50574	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:47.539632082 CEST	59432	50574	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:48.431972027 CEST	50576	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:48.642507076 CEST	59432	50576	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:48.642839909 CEST	50576	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:48.642839909 CEST	50576	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:48.853369951 CEST	59432	50576	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:48.853704929 CEST	50576	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:49.064222097 CEST	59432	50576	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:49.064269066 CEST	59432	50576	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:49.064371109 CEST	50576	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:49.274929047 CEST	59432	50576	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:49.606708050 CEST	42836	443	192.168.2.23	91.189.91.43
Apr 19, 2024 18:51:50.170058012 CEST	50578	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:50.380387068 CEST	59432	50578	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:50.380688906 CEST	50578	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:50.380753994 CEST	50578	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:50.591171026 CEST	59432	50578	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:50.591567993 CEST	50578	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:50.801954031 CEST	59432	50578	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:50.802098036 CEST	59432	50578	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:50.802381039 CEST	50578	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:51.012964964 CEST	59432	50578	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:51.142436028 CEST	42516	80	192.168.2.23	109.202.202.202
Apr 19, 2024 18:51:51.907634974 CEST	50580	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:52.118518114 CEST	59432	50580	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:52.118871927 CEST	50580	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:52.118872881 CEST	50580	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:52.329843998 CEST	59432	50580	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:52.330101967 CEST	50580	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:52.540874004 CEST	59432	50580	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:52.540983915 CEST	59432	50580	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:52.541352034 CEST	50580	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:52.752309084 CEST	59432	50580	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:53.646524906 CEST	50582	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:53.857220888 CEST	59432	50582	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:53.857388973 CEST	50582	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:53.857388973 CEST	50582	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:54.067938089 CEST	59432	50582	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:54.068208933 CEST	50582	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:54.278953075 CEST	59432	50582	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:54.279011011 CEST	59432	50582	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:54.279366970 CEST	50582	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:54.489949942 CEST	59432	50582	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:55.385301113 CEST	50584	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:55.596050978 CEST	59432	50584	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:55.596431017 CEST	50584	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:55.596431017 CEST	50584	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:55.807058096 CEST	59432	50584	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:55.807560921 CEST	50584	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:56.018409967 CEST	59432	50584	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:56.018595934 CEST	59432	50584	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:56.018827915 CEST	50584	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:56.230098963 CEST	59432	50584	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:57.125668049 CEST	50586	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:57.336663008 CEST	59432	50586	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:57.337306976 CEST	50586	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:57.337306976 CEST	50586	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:57.548304081 CEST	59432	50586	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:57.548409939 CEST	50586	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:57.762660980 CEST	59432	50586	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:57.762727976 CEST	59432	50586	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:57.763108969 CEST	50586	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:57.973954916 CEST	59432	50586	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:58.869839907 CEST	50588	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:59.080674887 CEST	59432	50588	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:59.081255913 CEST	50588	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:59.081257105 CEST	50588	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:59.291990042 CEST	59432	50588	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:59.292495012 CEST	50588	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:59.503191948 CEST	59432	50588	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:59.503252983 CEST	59432	50588	185.196.8.213	192.168.2.23
Apr 19, 2024 18:51:59.503624916 CEST	50588	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:51:59.714066029 CEST	59432	50588	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:00.609730005 CEST	50590	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:00.820756912 CEST	59432	50590	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:00.821259975 CEST	50590	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:00.821259975 CEST	50590	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:01.031860113 CEST	59432	50590	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:01.032139063 CEST	50590	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:01.242844105 CEST	59432	50590	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:01.242875099 CEST	59432	50590	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:01.243439913 CEST	50590	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:01.454166889 CEST	59432	50590	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:02.349414110 CEST	50592	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:02.560285091 CEST	59432	50592	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:02.560735941 CEST	50592	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:02.561002016 CEST	50592	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:02.771537066 CEST	59432	50592	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:02.772037029 CEST	50592	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:02.982774019 CEST	59432	50592	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:02.982836962 CEST	59432	50592	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:02.983339071 CEST	50592	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:03.194240093 CEST	59432	50592	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:04.089920998 CEST	50594	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:04.300810099 CEST	59432	50594	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:04.301346064 CEST	50594	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:04.301583052 CEST	50594	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:04.452718973 CEST	43928	443	192.168.2.23	91.189.91.42
Apr 19, 2024 18:52:04.512029886 CEST	59432	50594	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:04.512397051 CEST	50594	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:04.723295927 CEST	59432	50594	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:04.723325014 CEST	59432	50594	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:04.724076033 CEST	50594	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:04.934963942 CEST	59432	50594	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:05.830104113 CEST	50596	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:06.040874004 CEST	59432	50596	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:06.041497946 CEST	50596	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:06.041497946 CEST	50596	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:06.252132893 CEST	59432	50596	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:06.252460957 CEST	50596	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:06.463380098 CEST	59432	50596	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:06.463493109 CEST	59432	50596	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:06.464221954 CEST	50596	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:06.674849033 CEST	59432	50596	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:07.570348024 CEST	50598	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:07.781466961 CEST	59432	50598	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:07.782068968 CEST	50598	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:07.782161951 CEST	50598	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:07.993096113 CEST	59432	50598	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:07.993587017 CEST	50598	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:08.204349995 CEST	59432	50598	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:08.204458952 CEST	59432	50598	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:08.204886913 CEST	50598	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:08.415644884 CEST	59432	50598	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:09.310956955 CEST	50600	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:09.522090912 CEST	59432	50600	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:09.522548914 CEST	50600	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:09.522633076 CEST	50600	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:09.733500004 CEST	59432	50600	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:09.733969927 CEST	50600	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:09.945146084 CEST	59432	50600	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:09.945203066 CEST	59432	50600	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:09.945820093 CEST	50600	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:10.156810045 CEST	59432	50600	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:11.052678108 CEST	50602	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:11.263717890 CEST	59432	50602	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:11.264409065 CEST	50602	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:11.264518976 CEST	50602	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:11.475771904 CEST	59432	50602	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:11.476418018 CEST	50602	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:11.687427044 CEST	59432	50602	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:11.687493086 CEST	59432	50602	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:11.688122034 CEST	50602	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:11.899239063 CEST	59432	50602	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:12.794657946 CEST	50604	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:13.007143974 CEST	59432	50604	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:13.007368088 CEST	50604	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:13.007368088 CEST	50604	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:13.220098019 CEST	59432	50604	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:13.220494032 CEST	50604	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:13.431569099 CEST	59432	50604	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:13.431689024 CEST	59432	50604	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:13.432290077 CEST	50604	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:13.643306971 CEST	59432	50604	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:14.538611889 CEST	50606	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:14.749591112 CEST	59432	50606	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:14.750237942 CEST	50606	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:14.750482082 CEST	50606	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:14.961369038 CEST	59432	50606	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:14.961884975 CEST	50606	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:15.173013926 CEST	59432	50606	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:15.173140049 CEST	59432	50606	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:15.173861027 CEST	50606	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:15.385209084 CEST	59432	50606	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:16.280244112 CEST	50608	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:16.491185904 CEST	59432	50608	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:16.491857052 CEST	50608	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:16.491858006 CEST	50608	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:16.702699900 CEST	59432	50608	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:16.703540087 CEST	50608	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:16.739166975 CEST	42836	443	192.168.2.23	91.189.91.43
Apr 19, 2024 18:52:16.914561987 CEST	59432	50608	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:16.914697886 CEST	59432	50608	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:16.915270090 CEST	50608	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:17.126333952 CEST	59432	50608	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:18.021605015 CEST	50610	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:18.232691050 CEST	59432	50610	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:18.233350039 CEST	50610	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:18.233350039 CEST	50610	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:18.444355965 CEST	59432	50610	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:18.445131063 CEST	50610	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:18.656394958 CEST	59432	50610	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:18.656524897 CEST	59432	50610	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:18.656944990 CEST	50610	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:18.867654085 CEST	59432	50610	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:19.763442993 CEST	50612	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:19.974718094 CEST	59432	50612	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:19.975157976 CEST	50612	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:19.975157976 CEST	50612	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:20.186194897 CEST	59432	50612	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:20.186475039 CEST	50612	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:20.397244930 CEST	59432	50612	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:20.397273064 CEST	59432	50612	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:20.397639036 CEST	50612	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:20.608222008 CEST	59432	50612	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:20.834486008 CEST	42516	80	192.168.2.23	109.202.202.202
Apr 19, 2024 18:52:21.504930973 CEST	50614	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:21.719019890 CEST	59432	50614	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:21.719445944 CEST	50614	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:21.719446898 CEST	50614	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:21.932677031 CEST	59432	50614	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:21.933042049 CEST	50614	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:22.143902063 CEST	59432	50614	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:22.143966913 CEST	59432	50614	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:22.144355059 CEST	50614	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:22.357352018 CEST	59432	50614	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:23.250333071 CEST	50616	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:23.461100101 CEST	59432	50616	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:23.461616039 CEST	50616	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:23.461616039 CEST	50616	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:23.672738075 CEST	59432	50616	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:23.673398972 CEST	50616	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:23.884238958 CEST	59432	50616	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:23.884604931 CEST	59432	50616	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:23.885202885 CEST	50616	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:24.096019983 CEST	59432	50616	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:24.991516113 CEST	50618	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:25.202542067 CEST	59432	50618	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:25.203063965 CEST	50618	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:25.203063965 CEST	50618	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:25.414293051 CEST	59432	50618	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:25.414874077 CEST	50618	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:25.625569105 CEST	59432	50618	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:25.625627995 CEST	59432	50618	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:25.625958920 CEST	50618	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:25.836970091 CEST	59432	50618	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:26.732372999 CEST	50620	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:26.942858934 CEST	59432	50620	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:26.943250895 CEST	50620	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:26.943250895 CEST	50620	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:27.154006004 CEST	59432	50620	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:27.154217958 CEST	50620	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:27.365046024 CEST	59432	50620	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:27.365104914 CEST	59432	50620	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:27.365372896 CEST	50620	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:27.365530968 CEST	50620	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:27.576071978 CEST	59432	50620	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:28.472043037 CEST	50622	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:28.683298111 CEST	59432	50622	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:28.684010983 CEST	50622	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:28.684010983 CEST	50622	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:28.895323038 CEST	59432	50622	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:28.896018982 CEST	50622	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:29.106880903 CEST	59432	50622	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:29.106940985 CEST	59432	50622	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:29.107456923 CEST	50622	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:29.318736076 CEST	59432	50622	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:30.213371038 CEST	50624	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:30.424299002 CEST	59432	50624	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:30.424520969 CEST	50624	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:30.424689054 CEST	50624	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:30.635703087 CEST	59432	50624	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:30.636310101 CEST	50624	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:30.847475052 CEST	59432	50624	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:30.847589970 CEST	59432	50624	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:30.848177910 CEST	50624	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:31.059175968 CEST	59432	50624	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:31.953813076 CEST	50626	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:32.164671898 CEST	59432	50626	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:32.165112972 CEST	50626	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:32.165199995 CEST	50626	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:32.376029968 CEST	59432	50626	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:32.376477003 CEST	50626	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:32.587440014 CEST	59432	50626	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:32.587523937 CEST	59432	50626	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:32.588375092 CEST	50626	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:32.799679995 CEST	59432	50626	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:33.694663048 CEST	50628	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:33.905771017 CEST	59432	50628	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:33.906346083 CEST	50628	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:33.906785011 CEST	50628	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:34.117330074 CEST	59432	50628	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:34.118007898 CEST	50628	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:34.328727961 CEST	59432	50628	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:34.328777075 CEST	59432	50628	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:34.329710007 CEST	50628	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:34.540494919 CEST	59432	50628	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:35.435709953 CEST	50630	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:35.646733046 CEST	59432	50630	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:35.647389889 CEST	50630	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:35.647389889 CEST	50630	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:35.858549118 CEST	59432	50630	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:35.859021902 CEST	50630	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:36.069940090 CEST	59432	50630	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:36.070019960 CEST	59432	50630	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:36.070842028 CEST	50630	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:36.281692982 CEST	59432	50630	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:37.177021027 CEST	50632	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:37.387850046 CEST	59432	50632	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:37.388505936 CEST	50632	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:37.388659000 CEST	50632	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:37.599852085 CEST	59432	50632	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:37.600224972 CEST	50632	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:37.811001062 CEST	59432	50632	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:37.811117887 CEST	59432	50632	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:37.812014103 CEST	50632	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:38.023377895 CEST	59432	50632	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:38.918694019 CEST	50634	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:39.129913092 CEST	59432	50634	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:39.130604982 CEST	50634	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:39.130723000 CEST	50634	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:39.342253923 CEST	59432	50634	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:39.342716932 CEST	50634	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:39.554100037 CEST	59432	50634	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:39.554186106 CEST	59432	50634	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:39.554853916 CEST	50634	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:39.766038895 CEST	59432	50634	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:40.661422014 CEST	50636	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:40.872004032 CEST	59432	50636	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:40.872257948 CEST	50636	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:40.872529030 CEST	50636	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:41.083009005 CEST	59432	50636	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:41.083376884 CEST	50636	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:41.294652939 CEST	59432	50636	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:41.294737101 CEST	59432	50636	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:41.295552969 CEST	50636	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:41.506598949 CEST	59432	50636	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:42.402193069 CEST	50638	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:42.612932920 CEST	59432	50638	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:42.613425016 CEST	50638	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:42.613538980 CEST	50638	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:42.826206923 CEST	59432	50638	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:42.826848984 CEST	50638	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:43.037847042 CEST	59432	50638	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:43.037930965 CEST	59432	50638	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:43.038422108 CEST	50638	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:43.249303102 CEST	59432	50638	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:44.145653963 CEST	50640	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:44.357151985 CEST	59432	50640	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:44.357893944 CEST	50640	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:44.357894897 CEST	50640	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:44.569082975 CEST	59432	50640	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:44.569586992 CEST	50640	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:44.781045914 CEST	59432	50640	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:44.781131983 CEST	59432	50640	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:44.781688929 CEST	50640	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:44.992899895 CEST	59432	50640	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:45.407047033 CEST	43928	443	192.168.2.23	91.189.91.42
Apr 19, 2024 18:52:45.887852907 CEST	50642	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:46.099143982 CEST	59432	50642	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:46.099766970 CEST	50642	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:46.099766970 CEST	50642	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:46.310887098 CEST	59432	50642	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:46.311388016 CEST	50642	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:46.522595882 CEST	59432	50642	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:46.522649050 CEST	59432	50642	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:46.523133039 CEST	50642	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:46.734280109 CEST	59432	50642	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:47.629724026 CEST	50644	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:47.840686083 CEST	59432	50644	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:47.841356039 CEST	50644	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:47.841356039 CEST	50644	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:48.052527905 CEST	59432	50644	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:48.053124905 CEST	50644	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:48.264457941 CEST	59432	50644	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:48.264563084 CEST	59432	50644	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:48.265111923 CEST	50644	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:48.476249933 CEST	59432	50644	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:49.371067047 CEST	50646	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:49.581971884 CEST	59432	50646	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:49.582530975 CEST	50646	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:49.582531929 CEST	50646	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:49.793427944 CEST	59432	50646	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:49.793859005 CEST	50646	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:50.005196095 CEST	59432	50646	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:50.005280018 CEST	59432	50646	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:50.005764008 CEST	50646	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:50.216892004 CEST	59432	50646	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:51.112624884 CEST	50648	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:51.323834896 CEST	59432	50648	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:51.324479103 CEST	50648	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:51.324480057 CEST	50648	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:51.536024094 CEST	59432	50648	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:51.536741972 CEST	50648	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:51.747909069 CEST	59432	50648	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:51.747972965 CEST	59432	50648	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:51.748528004 CEST	50648	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:51.959376097 CEST	59432	50648	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:52.856286049 CEST	50650	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:53.066901922 CEST	59432	50650	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:53.067363977 CEST	50650	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:53.067364931 CEST	50650	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:53.280327082 CEST	59432	50650	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:53.280468941 CEST	50650	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:53.492677927 CEST	59432	50650	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:53.492748976 CEST	59432	50650	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:53.493051052 CEST	50650	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:53.705049038 CEST	59432	50650	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:54.599494934 CEST	50652	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:54.810340881 CEST	59432	50652	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:54.810817003 CEST	50652	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:54.810921907 CEST	50652	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:55.021914959 CEST	59432	50652	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:55.022443056 CEST	50652	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:55.233539104 CEST	59432	50652	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:55.233669996 CEST	59432	50652	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:55.234338045 CEST	50652	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:55.445437908 CEST	59432	50652	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:56.340415001 CEST	50654	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:56.551446915 CEST	59432	50654	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:56.552133083 CEST	50654	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:56.552133083 CEST	50654	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:56.763178110 CEST	59432	50654	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:56.763838053 CEST	50654	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:56.974819899 CEST	59432	50654	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:56.975008011 CEST	59432	50654	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:56.975552082 CEST	50654	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:57.186604023 CEST	59432	50654	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:58.084213018 CEST	50656	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:58.297117949 CEST	59432	50656	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:58.297470093 CEST	50656	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:58.297604084 CEST	50656	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:58.508325100 CEST	59432	50656	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:58.508696079 CEST	50656	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:58.720347881 CEST	59432	50656	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:58.720421076 CEST	59432	50656	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:58.721020937 CEST	50656	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:52:58.932631969 CEST	59432	50656	185.196.8.213	192.168.2.23
Apr 19, 2024 18:52:59.826770067 CEST	50658	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:00.037476063 CEST	59432	50658	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:00.037776947 CEST	50658	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:00.037858963 CEST	50658	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:00.248495102 CEST	59432	50658	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:00.249048948 CEST	50658	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:00.459882021 CEST	59432	50658	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:00.459939003 CEST	59432	50658	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:00.460366964 CEST	50658	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:00.671016932 CEST	59432	50658	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:01.566220999 CEST	50660	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:01.777090073 CEST	59432	50660	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:01.777682066 CEST	50660	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:01.777755022 CEST	50660	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:01.988636017 CEST	59432	50660	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:01.989342928 CEST	50660	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:02.201193094 CEST	59432	50660	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:02.201270103 CEST	59432	50660	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:02.201787949 CEST	50660	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:02.412892103 CEST	59432	50660	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:03.307521105 CEST	50662	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:03.518198967 CEST	59432	50662	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:03.518822908 CEST	50662	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:03.518969059 CEST	50662	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:03.729424953 CEST	59432	50662	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:03.729916096 CEST	50662	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:03.941581964 CEST	59432	50662	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:03.941641092 CEST	59432	50662	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:03.942276001 CEST	50662	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:04.152821064 CEST	59432	50662	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:05.048787117 CEST	50664	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:05.259772062 CEST	59432	50664	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:05.260251999 CEST	50664	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:05.260680914 CEST	50664	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:05.471498966 CEST	59432	50664	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:05.472150087 CEST	50664	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:05.682868958 CEST	59432	50664	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:05.683037043 CEST	59432	50664	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:05.683474064 CEST	50664	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:05.894355059 CEST	59432	50664	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:06.789446115 CEST	50666	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:07.000987053 CEST	59432	50666	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:07.001646996 CEST	50666	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:07.001921892 CEST	50666	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:07.213417053 CEST	59432	50666	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:07.213905096 CEST	50666	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:07.425228119 CEST	59432	50666	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:07.425333977 CEST	59432	50666	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:07.425556898 CEST	50666	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:07.636169910 CEST	59432	50666	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:08.532166958 CEST	50668	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:08.743309975 CEST	59432	50668	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:08.743772030 CEST	50668	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:08.743861914 CEST	50668	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:08.954844952 CEST	59432	50668	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:08.955333948 CEST	50668	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:09.166388988 CEST	59432	50668	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:09.166493893 CEST	59432	50668	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:09.167182922 CEST	50668	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:09.377916098 CEST	59432	50668	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:10.272609949 CEST	50670	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:10.483720064 CEST	59432	50670	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:10.484256983 CEST	50670	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:10.484596968 CEST	50670	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:10.695178986 CEST	59432	50670	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:10.695523024 CEST	50670	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:10.906577110 CEST	59432	50670	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:10.906639099 CEST	59432	50670	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:10.907205105 CEST	50670	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:11.118166924 CEST	59432	50670	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:12.013412952 CEST	50672	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:12.224473000 CEST	59432	50672	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:12.224970102 CEST	50672	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:12.224971056 CEST	50672	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:12.435786963 CEST	59432	50672	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:12.436234951 CEST	50672	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:12.646836996 CEST	59432	50672	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:12.646894932 CEST	59432	50672	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:12.647319078 CEST	50672	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:12.858071089 CEST	59432	50672	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:13.753336906 CEST	50674	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:13.964059114 CEST	59432	50674	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:13.964559078 CEST	50674	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:13.964560032 CEST	50674	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:14.176729918 CEST	59432	50674	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:14.177344084 CEST	50674	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:14.388540983 CEST	59432	50674	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:14.388650894 CEST	59432	50674	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:14.389209986 CEST	50674	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:14.600195885 CEST	59432	50674	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:15.494771004 CEST	50676	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:15.705588102 CEST	59432	50676	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:15.706065893 CEST	50676	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:15.706067085 CEST	50676	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:15.917062998 CEST	59432	50676	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:15.917433977 CEST	50676	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:16.128282070 CEST	59432	50676	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:16.128416061 CEST	59432	50676	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:16.129007101 CEST	50676	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:16.339853048 CEST	59432	50676	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:17.234910011 CEST	50678	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:17.445774078 CEST	59432	50678	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:17.446187019 CEST	50678	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:17.446355104 CEST	50678	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:17.657032967 CEST	59432	50678	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:17.657648087 CEST	50678	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:17.868690968 CEST	59432	50678	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:17.868726969 CEST	59432	50678	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:17.869270086 CEST	50678	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:18.079916000 CEST	59432	50678	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:18.975034952 CEST	50680	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:19.186170101 CEST	59432	50680	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:19.186691046 CEST	50680	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:19.186844110 CEST	50680	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:19.398236990 CEST	59432	50680	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:19.398727894 CEST	50680	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:19.609770060 CEST	59432	50680	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:19.609824896 CEST	59432	50680	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:19.610348940 CEST	50680	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:19.821399927 CEST	59432	50680	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:20.716095924 CEST	50682	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:20.927268982 CEST	59432	50682	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:20.927725077 CEST	50682	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:20.927725077 CEST	50682	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:21.138843060 CEST	59432	50682	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:21.139241934 CEST	50682	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:21.350368977 CEST	59432	50682	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:21.350476027 CEST	59432	50682	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:21.350786924 CEST	50682	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:21.561947107 CEST	59432	50682	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:22.457302094 CEST	50684	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:22.668132067 CEST	59432	50684	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:22.668679953 CEST	50684	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:22.668679953 CEST	50684	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:22.879498005 CEST	59432	50684	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:22.879781961 CEST	50684	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:23.090837002 CEST	59432	50684	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:23.090898037 CEST	59432	50684	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:23.091216087 CEST	50684	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:23.302294970 CEST	59432	50684	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:24.196994066 CEST	50686	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:24.408015966 CEST	59432	50686	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:24.408524036 CEST	50686	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:24.408751965 CEST	50686	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:24.619566917 CEST	59432	50686	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:24.620017052 CEST	50686	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:24.833287001 CEST	59432	50686	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:24.833345890 CEST	59432	50686	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:24.833731890 CEST	50686	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:25.047250032 CEST	59432	50686	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:25.939639091 CEST	50688	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:26.150509119 CEST	59432	50688	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:26.150779963 CEST	50688	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:26.150872946 CEST	50688	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:26.362744093 CEST	59432	50688	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:26.363327980 CEST	50688	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:26.574240923 CEST	59432	50688	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:26.574338913 CEST	59432	50688	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:26.574644089 CEST	50688	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:26.785586119 CEST	59432	50688	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:27.681865931 CEST	50690	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:27.893481970 CEST	59432	50690	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:27.893846989 CEST	50690	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:27.893929005 CEST	50690	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:28.104949951 CEST	59432	50690	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:28.105350971 CEST	50690	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:28.316519022 CEST	59432	50690	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:28.316634893 CEST	59432	50690	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:28.317078114 CEST	50690	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:28.528153896 CEST	59432	50690	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:29.423351049 CEST	50692	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:29.634327888 CEST	59432	50692	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:29.634857893 CEST	50692	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:29.634859085 CEST	50692	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:29.845890045 CEST	59432	50692	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:29.846456051 CEST	50692	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:30.057416916 CEST	59432	50692	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:30.057626963 CEST	59432	50692	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:30.058178902 CEST	50692	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:30.268955946 CEST	59432	50692	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:31.164606094 CEST	50694	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:31.375552893 CEST	59432	50694	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:31.376230001 CEST	50694	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:31.376230001 CEST	50694	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:31.587304115 CEST	59432	50694	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:31.587660074 CEST	50694	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:31.799026966 CEST	59432	50694	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:31.799140930 CEST	59432	50694	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:31.799588919 CEST	50694	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:32.010664940 CEST	59432	50694	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:32.905327082 CEST	50696	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:33.116349936 CEST	59432	50696	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:33.116890907 CEST	50696	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:33.117090940 CEST	50696	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:33.328089952 CEST	59432	50696	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:33.328609943 CEST	50696	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:33.539541960 CEST	59432	50696	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:33.539642096 CEST	59432	50696	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:33.539890051 CEST	50696	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:33.751061916 CEST	59432	50696	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:34.646147013 CEST	50698	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:34.857331038 CEST	59432	50698	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:34.857795954 CEST	50698	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:34.857980013 CEST	50698	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:35.069204092 CEST	59432	50698	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:35.069802999 CEST	50698	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:35.281064987 CEST	59432	50698	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:35.281125069 CEST	59432	50698	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:35.281758070 CEST	50698	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:35.493308067 CEST	59432	50698	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:36.387542963 CEST	50700	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:36.598763943 CEST	59432	50700	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:36.599315882 CEST	50700	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:36.599471092 CEST	50700	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:36.810537100 CEST	59432	50700	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:36.811068058 CEST	50700	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:37.021694899 CEST	59432	50700	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:37.021748066 CEST	59432	50700	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:37.022078991 CEST	50700	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:37.232873917 CEST	59432	50700	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:38.128500938 CEST	50702	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:38.339487076 CEST	59432	50702	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:38.340133905 CEST	50702	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:38.340133905 CEST	50702	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:38.551199913 CEST	59432	50702	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:38.551599979 CEST	50702	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:38.762551069 CEST	59432	50702	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:38.762602091 CEST	59432	50702	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:38.763379097 CEST	50702	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:38.974328041 CEST	59432	50702	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:39.869522095 CEST	50704	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:40.080703974 CEST	59432	50704	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:40.081397057 CEST	50704	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:40.081398010 CEST	50704	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:40.292465925 CEST	59432	50704	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:40.292915106 CEST	50704	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:40.504049063 CEST	59432	50704	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:40.504178047 CEST	59432	50704	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:40.504635096 CEST	50704	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:40.715559959 CEST	59432	50704	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:41.610625982 CEST	50706	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:41.821768999 CEST	59432	50706	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:41.822252989 CEST	50706	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:41.822252989 CEST	50706	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:42.033406019 CEST	59432	50706	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:42.034049988 CEST	50706	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:42.245026112 CEST	59432	50706	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:42.245127916 CEST	59432	50706	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:42.245551109 CEST	50706	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:42.456382036 CEST	59432	50706	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:43.351551056 CEST	50708	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:43.562231064 CEST	59432	50708	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:43.562391996 CEST	50708	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:43.562392950 CEST	50708	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:43.773325920 CEST	59432	50708	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:43.773718119 CEST	50708	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:43.984391928 CEST	59432	50708	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:43.984466076 CEST	59432	50708	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:43.984692097 CEST	50708	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:44.195214987 CEST	59432	50708	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:45.091032982 CEST	50710	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:45.301800966 CEST	59432	50710	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:45.302289009 CEST	50710	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:45.302510023 CEST	50710	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:45.513164997 CEST	59432	50710	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:45.513547897 CEST	50710	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:45.724245071 CEST	59432	50710	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:45.724298954 CEST	59432	50710	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:45.724462032 CEST	50710	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:45.935290098 CEST	59432	50710	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:46.830482006 CEST	50712	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:47.041300058 CEST	59432	50712	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:47.041691065 CEST	50712	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:47.041692019 CEST	50712	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:47.252314091 CEST	59432	50712	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:47.252602100 CEST	50712	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:47.463093996 CEST	59432	50712	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:47.463180065 CEST	59432	50712	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:47.463644028 CEST	50712	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:47.674439907 CEST	59432	50712	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:48.569741011 CEST	50714	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:48.780369997 CEST	59432	50714	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:48.780610085 CEST	50714	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:48.780610085 CEST	50714	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:48.991158962 CEST	59432	50714	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:48.991497993 CEST	50714	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:49.202297926 CEST	59432	50714	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:49.202330112 CEST	59432	50714	185.196.8.213	192.168.2.23
Apr 19, 2024 18:53:49.202725887 CEST	50714	59432	192.168.2.23	185.196.8.213
Apr 19, 2024 18:53:49.415210009 CEST	59432	50714	185.196.8.213	192.168.2.23

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 18:51:44.851990938 CEST	43615	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:51:44.956650019 CEST	53	43615	8.8.8.8	192.168.2.23
Apr 19, 2024 18:51:46.589046955 CEST	54676	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:51:46.694055080 CEST	53	54676	8.8.8.8	192.168.2.23
Apr 19, 2024 18:51:48.326314926 CEST	35973	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:51:48.431430101 CEST	53	35973	8.8.8.8	192.168.2.23
Apr 19, 2024 18:51:50.064547062 CEST	47638	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:51:50.169575930 CEST	53	47638	8.8.8.8	192.168.2.23
Apr 19, 2024 18:51:51.802294970 CEST	56052	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:51:51.907182932 CEST	53	56052	8.8.8.8	192.168.2.23
Apr 19, 2024 18:51:53.541367054 CEST	58209	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:51:53.646092892 CEST	53	58209	8.8.8.8	192.168.2.23
Apr 19, 2024 18:51:55.279632092 CEST	47490	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:51:55.384987116 CEST	53	47490	8.8.8.8	192.168.2.23
Apr 19, 2024 18:51:57.019129992 CEST	34251	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:51:57.124856949 CEST	53	34251	8.8.8.8	192.168.2.23
Apr 19, 2024 18:51:58.763431072 CEST	58746	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:51:58.869044065 CEST	53	58746	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:00.503654003 CEST	51071	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:00.609025002 CEST	53	51071	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:02.243593931 CEST	55807	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:02.348896027 CEST	53	55807	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:03.983333111 CEST	46279	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:04.089073896 CEST	53	46279	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:05.724226952 CEST	36311	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:05.829318047 CEST	53	36311	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:07.464095116 CEST	42752	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:07.569765091 CEST	53	42752	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:09.205116987 CEST	60317	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:09.310230970 CEST	53	60317	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:10.946109056 CEST	58196	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:11.051680088 CEST	53	58196	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:12.688488007 CEST	35209	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:12.794042110 CEST	53	35209	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:14.432518005 CEST	39514	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:14.537516117 CEST	53	39514	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:16.173984051 CEST	52523	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:16.279639959 CEST	53	52523	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:17.915586948 CEST	46376	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:18.020843029 CEST	53	46376	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:19.657187939 CEST	41713	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:19.762661934 CEST	53	41713	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:21.397737980 CEST	60901	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:21.504370928 CEST	53	60901	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:23.144339085 CEST	40879	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:23.249521971 CEST	53	40879	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:24.885267973 CEST	42888	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:24.990724087 CEST	53	42888	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:26.626240015 CEST	37606	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:26.731734037 CEST	53	37606	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:28.365606070 CEST	54918	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:28.471415043 CEST	53	54918	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:30.107491016 CEST	57446	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:30.212785959 CEST	53	57446	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:31.848299980 CEST	35294	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:31.953227043 CEST	53	35294	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:33.588556051 CEST	54083	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:33.694057941 CEST	53	54083	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:35.329730988 CEST	43734	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:35.434871912 CEST	53	43734	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:37.071110010 CEST	45424	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:37.176670074 CEST	53	45424	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:38.812174082 CEST	42882	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:38.918001890 CEST	53	42882	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:40.555303097 CEST	45127	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:40.660681963 CEST	53	45127	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:42.295749903 CEST	35784	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:42.401170015 CEST	53	35784	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:44.038826942 CEST	40013	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:44.144867897 CEST	53	40013	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:45.781930923 CEST	49189	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:45.887226105 CEST	53	49189	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:47.523303032 CEST	44644	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:47.628907919 CEST	53	44644	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:49.265168905 CEST	38223	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:49.370243073 CEST	53	38223	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:51.006201982 CEST	37016	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:51.111650944 CEST	53	37016	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:52.748692989 CEST	33311	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:52.855801105 CEST	53	33311	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:54.493428946 CEST	57492	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:54.598774910 CEST	53	57492	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:56.234565973 CEST	50185	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:56.339737892 CEST	53	50185	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:57.976015091 CEST	46640	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:58.083369970 CEST	53	46640	8.8.8.8	192.168.2.23
Apr 19, 2024 18:52:59.721177101 CEST	51170	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:52:59.826527119 CEST	53	51170	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:01.460474968 CEST	47782	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:01.565747023 CEST	53	47782	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:03.201977015 CEST	52031	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:03.306802034 CEST	53	52031	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:04.942543030 CEST	36819	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:05.047914982 CEST	53	36819	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:06.683717966 CEST	53243	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:06.788887024 CEST	53	53243	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:08.425792933 CEST	42031	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:08.531407118 CEST	53	42031	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:10.167146921 CEST	44303	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:10.272150040 CEST	53	44303	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:11.907201052 CEST	52616	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:12.012839079 CEST	53	52616	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:13.647440910 CEST	38120	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:13.752590895 CEST	53	38120	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:15.389245033 CEST	33197	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:15.494350910 CEST	53	33197	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:17.129141092 CEST	41281	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:17.234225035 CEST	53	41281	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:18.869266987 CEST	39961	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:18.974339008 CEST	53	39961	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:20.610474110 CEST	36727	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:20.715441942 CEST	53	36727	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:22.350846052 CEST	41824	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:22.456624031 CEST	53	41824	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:24.091233969 CEST	56853	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:24.196341038 CEST	53	56853	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:25.833903074 CEST	45558	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:25.939124107 CEST	53	45558	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:27.574662924 CEST	53581	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:27.681248903 CEST	53	53581	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:29.317173958 CEST	49627	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:29.422452927 CEST	53	49627	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:31.058258057 CEST	60440	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:31.163772106 CEST	53	60440	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:32.799443007 CEST	44892	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:32.904800892 CEST	53	44892	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:34.540175915 CEST	52435	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:34.645823002 CEST	53	52435	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:36.281920910 CEST	57851	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:36.386930943 CEST	53	57851	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:38.022073030 CEST	36057	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:38.127784967 CEST	53	36057	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:39.763396978 CEST	37381	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:39.868904114 CEST	53	37381	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:41.504770994 CEST	55141	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:41.610152960 CEST	53	55141	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:43.245860100 CEST	42466	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:43.351048946 CEST	53	42466	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:44.984941959 CEST	34641	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:45.090464115 CEST	53	34641	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:46.724643946 CEST	50095	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:46.829838037 CEST	53	50095	8.8.8.8	192.168.2.23
Apr 19, 2024 18:53:48.463859081 CEST	34484	53	192.168.2.23	8.8.8.8
Apr 19, 2024 18:53:48.569237947 CEST	53	34484	8.8.8.8	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 18:51:44.851990938 CEST	192.168.2.23	8.8.8.8	0x94ec	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:46.589046955 CEST	192.168.2.23	8.8.8.8	0xde4f	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:48.326314926 CEST	192.168.2.23	8.8.8.8	0xaee	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:50.064547062 CEST	192.168.2.23	8.8.8.8	0x959a	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:51.802294970 CEST	192.168.2.23	8.8.8.8	0x4438	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:53.541367054 CEST	192.168.2.23	8.8.8.8	0xe4f0	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:55.279632092 CEST	192.168.2.23	8.8.8.8	0x7bba	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:57.019129992 CEST	192.168.2.23	8.8.8.8	0x6f8b	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:58.763431072 CEST	192.168.2.23	8.8.8.8	0xfc35	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:00.503654003 CEST	192.168.2.23	8.8.8.8	0xb1f6	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:02.243593931 CEST	192.168.2.23	8.8.8.8	0xa45b	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:03.983333111 CEST	192.168.2.23	8.8.8.8	0x287a	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:05.724226952 CEST	192.168.2.23	8.8.8.8	0x42ec	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:07.464095116 CEST	192.168.2.23	8.8.8.8	0x7a3c	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:09.205116987 CEST	192.168.2.23	8.8.8.8	0xa838	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:10.946109056 CEST	192.168.2.23	8.8.8.8	0x2c95	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:12.688488007 CEST	192.168.2.23	8.8.8.8	0xa34e	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:14.432518005 CEST	192.168.2.23	8.8.8.8	0xecf6	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:16.173984051 CEST	192.168.2.23	8.8.8.8	0xc09	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:17.915586948 CEST	192.168.2.23	8.8.8.8	0x2f7e	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:19.657187939 CEST	192.168.2.23	8.8.8.8	0xdb64	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:21.397737980 CEST	192.168.2.23	8.8.8.8	0x7bb8	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:23.144339085 CEST	192.168.2.23	8.8.8.8	0xbd9	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:24.885267973 CEST	192.168.2.23	8.8.8.8	0x3fe9	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:26.626240015 CEST	192.168.2.23	8.8.8.8	0xbf7a	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:28.365606070 CEST	192.168.2.23	8.8.8.8	0x2ec0	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:30.107491016 CEST	192.168.2.23	8.8.8.8	0xcb11	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:31.848299980 CEST	192.168.2.23	8.8.8.8	0xeaa0	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:33.588556051 CEST	192.168.2.23	8.8.8.8	0xcf81	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:35.329730988 CEST	192.168.2.23	8.8.8.8	0x337d	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:37.071110010 CEST	192.168.2.23	8.8.8.8	0xb6d	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:38.812174082 CEST	192.168.2.23	8.8.8.8	0x270b	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:40.555303097 CEST	192.168.2.23	8.8.8.8	0x6620	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:42.295749903 CEST	192.168.2.23	8.8.8.8	0x303a	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:44.038826942 CEST	192.168.2.23	8.8.8.8	0xa0a9	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:45.781930923 CEST	192.168.2.23	8.8.8.8	0x9b1f	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:47.523303032 CEST	192.168.2.23	8.8.8.8	0xaac1	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:49.265168905 CEST	192.168.2.23	8.8.8.8	0x8404	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:51.006201982 CEST	192.168.2.23	8.8.8.8	0xe743	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:52.748692989 CEST	192.168.2.23	8.8.8.8	0x7f	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:54.493428946 CEST	192.168.2.23	8.8.8.8	0xb6a0	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:56.234565973 CEST	192.168.2.23	8.8.8.8	0xe9c8	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:57.976015091 CEST	192.168.2.23	8.8.8.8	0x8219	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:59.721177101 CEST	192.168.2.23	8.8.8.8	0x1440	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:01.460474968 CEST	192.168.2.23	8.8.8.8	0xe7da	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:03.201977015 CEST	192.168.2.23	8.8.8.8	0x4ba7	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:04.942543030 CEST	192.168.2.23	8.8.8.8	0x14c7	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:06.683717966 CEST	192.168.2.23	8.8.8.8	0x6da	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:08.425792933 CEST	192.168.2.23	8.8.8.8	0xe64a	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:10.167146921 CEST	192.168.2.23	8.8.8.8	0xac8a	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:11.907201052 CEST	192.168.2.23	8.8.8.8	0x4a8d	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:13.647440910 CEST	192.168.2.23	8.8.8.8	0x8a7	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:15.389245033 CEST	192.168.2.23	8.8.8.8	0xd0de	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:17.129141092 CEST	192.168.2.23	8.8.8.8	0x5d6	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:18.869266987 CEST	192.168.2.23	8.8.8.8	0x9e62	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:20.610474110 CEST	192.168.2.23	8.8.8.8	0x795	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:22.350846052 CEST	192.168.2.23	8.8.8.8	0xef01	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:24.091233969 CEST	192.168.2.23	8.8.8.8	0xfe8a	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:25.833903074 CEST	192.168.2.23	8.8.8.8	0xc9f5	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:27.574662924 CEST	192.168.2.23	8.8.8.8	0x5be8	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:29.317173958 CEST	192.168.2.23	8.8.8.8	0x76	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:31.058258057 CEST	192.168.2.23	8.8.8.8	0x1a91	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:32.799443007 CEST	192.168.2.23	8.8.8.8	0xfc6b	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:34.540175915 CEST	192.168.2.23	8.8.8.8	0xb7a5	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:36.281920910 CEST	192.168.2.23	8.8.8.8	0x4b8c	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:38.022073030 CEST	192.168.2.23	8.8.8.8	0x86bf	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:39.763396978 CEST	192.168.2.23	8.8.8.8	0x4f9e	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:41.504770994 CEST	192.168.2.23	8.8.8.8	0x8055	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:43.245860100 CEST	192.168.2.23	8.8.8.8	0xd042	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:44.984941959 CEST	192.168.2.23	8.8.8.8	0x5350	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:46.724643946 CEST	192.168.2.23	8.8.8.8	0x5244	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:48.463859081 CEST	192.168.2.23	8.8.8.8	0x23b8	Standard query (0)	jhbaghjbasdg.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 18:51:44.956650019 CEST	8.8.8.8	192.168.2.23	0x94ec	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:46.694055080 CEST	8.8.8.8	192.168.2.23	0xde4f	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:48.431430101 CEST	8.8.8.8	192.168.2.23	0xaee	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:50.169575930 CEST	8.8.8.8	192.168.2.23	0x959a	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:51.907182932 CEST	8.8.8.8	192.168.2.23	0x4438	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:53.646092892 CEST	8.8.8.8	192.168.2.23	0xe4f0	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:55.384987116 CEST	8.8.8.8	192.168.2.23	0x7bba	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:57.124856949 CEST	8.8.8.8	192.168.2.23	0x6f8b	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:51:58.869044065 CEST	8.8.8.8	192.168.2.23	0xfc35	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:00.609025002 CEST	8.8.8.8	192.168.2.23	0xb1f6	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:02.348896027 CEST	8.8.8.8	192.168.2.23	0xa45b	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:04.089073896 CEST	8.8.8.8	192.168.2.23	0x287a	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:05.829318047 CEST	8.8.8.8	192.168.2.23	0x42ec	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:07.569765091 CEST	8.8.8.8	192.168.2.23	0x7a3c	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:09.310230970 CEST	8.8.8.8	192.168.2.23	0xa838	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:11.051680088 CEST	8.8.8.8	192.168.2.23	0x2c95	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:12.794042110 CEST	8.8.8.8	192.168.2.23	0xa34e	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:14.537516117 CEST	8.8.8.8	192.168.2.23	0xecf6	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:16.279639959 CEST	8.8.8.8	192.168.2.23	0xc09	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:18.020843029 CEST	8.8.8.8	192.168.2.23	0x2f7e	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:19.762661934 CEST	8.8.8.8	192.168.2.23	0xdb64	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:21.504370928 CEST	8.8.8.8	192.168.2.23	0x7bb8	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:23.249521971 CEST	8.8.8.8	192.168.2.23	0xbd9	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:24.990724087 CEST	8.8.8.8	192.168.2.23	0x3fe9	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:26.731734037 CEST	8.8.8.8	192.168.2.23	0xbf7a	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:28.471415043 CEST	8.8.8.8	192.168.2.23	0x2ec0	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:30.212785959 CEST	8.8.8.8	192.168.2.23	0xcb11	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:31.953227043 CEST	8.8.8.8	192.168.2.23	0xeaa0	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:33.694057941 CEST	8.8.8.8	192.168.2.23	0xcf81	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:35.434871912 CEST	8.8.8.8	192.168.2.23	0x337d	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:37.176670074 CEST	8.8.8.8	192.168.2.23	0xb6d	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:38.918001890 CEST	8.8.8.8	192.168.2.23	0x270b	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:40.660681963 CEST	8.8.8.8	192.168.2.23	0x6620	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:42.401170015 CEST	8.8.8.8	192.168.2.23	0x303a	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:44.144867897 CEST	8.8.8.8	192.168.2.23	0xa0a9	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:45.887226105 CEST	8.8.8.8	192.168.2.23	0x9b1f	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:47.628907919 CEST	8.8.8.8	192.168.2.23	0xaac1	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:49.370243073 CEST	8.8.8.8	192.168.2.23	0x8404	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:51.111650944 CEST	8.8.8.8	192.168.2.23	0xe743	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:52.855801105 CEST	8.8.8.8	192.168.2.23	0x7f	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:54.598774910 CEST	8.8.8.8	192.168.2.23	0xb6a0	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:56.339737892 CEST	8.8.8.8	192.168.2.23	0xe9c8	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:58.083369970 CEST	8.8.8.8	192.168.2.23	0x8219	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:52:59.826527119 CEST	8.8.8.8	192.168.2.23	0x1440	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:01.565747023 CEST	8.8.8.8	192.168.2.23	0xe7da	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:03.306802034 CEST	8.8.8.8	192.168.2.23	0x4ba7	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:05.047914982 CEST	8.8.8.8	192.168.2.23	0x14c7	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:06.788887024 CEST	8.8.8.8	192.168.2.23	0x6da	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:08.531407118 CEST	8.8.8.8	192.168.2.23	0xe64a	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:10.272150040 CEST	8.8.8.8	192.168.2.23	0xac8a	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:12.012839079 CEST	8.8.8.8	192.168.2.23	0x4a8d	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:13.752590895 CEST	8.8.8.8	192.168.2.23	0x8a7	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:15.494350910 CEST	8.8.8.8	192.168.2.23	0xd0de	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:17.234225035 CEST	8.8.8.8	192.168.2.23	0x5d6	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:18.974339008 CEST	8.8.8.8	192.168.2.23	0x9e62	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:20.715441942 CEST	8.8.8.8	192.168.2.23	0x795	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:22.456624031 CEST	8.8.8.8	192.168.2.23	0xef01	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:24.196341038 CEST	8.8.8.8	192.168.2.23	0xfe8a	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:25.939124107 CEST	8.8.8.8	192.168.2.23	0xc9f5	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:27.681248903 CEST	8.8.8.8	192.168.2.23	0x5be8	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:29.422452927 CEST	8.8.8.8	192.168.2.23	0x76	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:31.163772106 CEST	8.8.8.8	192.168.2.23	0x1a91	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:32.904800892 CEST	8.8.8.8	192.168.2.23	0xfc6b	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:34.645823002 CEST	8.8.8.8	192.168.2.23	0xb7a5	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:36.386930943 CEST	8.8.8.8	192.168.2.23	0x4b8c	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:38.127784967 CEST	8.8.8.8	192.168.2.23	0x86bf	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:39.868904114 CEST	8.8.8.8	192.168.2.23	0x4f9e	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:41.610152960 CEST	8.8.8.8	192.168.2.23	0x8055	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:43.351048946 CEST	8.8.8.8	192.168.2.23	0xd042	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:45.090464115 CEST	8.8.8.8	192.168.2.23	0x5350	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:46.829838037 CEST	8.8.8.8	192.168.2.23	0x5244	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 18:53:48.569237947 CEST	8.8.8.8	192.168.2.23	0x23b8	No error (0)	jhbaghjbasdg.shop	185.196.8.213	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: insetto-x86.elf PID: 6223, Parent PID: 6139

General

Start time (UTC):	16:51:44
Start date (UTC):	19/04/2024
Path:	/tmp/insetto-x86.elf
Arguments:	/tmp/insetto-x86.elf
File size:	74608 bytes
MD5 hash:	c2db0684c0057e19b3419bbc794f58a4

Chronological Activities

Analysis Process: insetto-x86.elf PID: 6224, Parent PID: 6223

General

Start time (UTC):	16:51:44
Start date (UTC):	19/04/2024
Path:	/tmp/insetto-x86.elf
Arguments:	-
File size:	74608 bytes
MD5 hash:	c2db0684c0057e19b3419bbc794f58a4

Chronological Activities

Analysis Process: insetto-x86.elf PID: 6225, Parent PID: 6224

General

Start time (UTC):	16:51:44
Start date (UTC):	19/04/2024
Path:	/tmp/insetto-x86.elf
Arguments:	-
File size:	74608 bytes
MD5 hash:	c2db0684c0057e19b3419bbc794f58a4

Chronological Activities

Analysis Process: insetto-x86.elf PID: 6228, Parent PID: 6224

General

Start time (UTC):	16:51:44
Start date (UTC):	19/04/2024
Path:	/tmp/insetto-x86.elf
Arguments:	-
File size:	74608 bytes
MD5 hash:	c2db0684c0057e19b3419bbc794f58a4

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report insetto-x86.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: insetto-x86.elf PID: 6223, Parent PID: 6139

General

Chronological Activities

Analysis Process: insetto-x86.elf PID: 6224, Parent PID: 6223

General

Chronological Activities

Analysis Process: insetto-x86.elf PID: 6225, Parent PID: 6224

General

Chronological Activities

Analysis Process: insetto-x86.elf PID: 6228, Parent PID: 6224

General

Chronological Activities

Linux Analysis Report
insetto-x86.elf