Edit tour

Linux Analysis Report
skid.x86.elf

Overview

General Information

Sample Name:	skid.x86.elf
Analysis ID:	881685
MD5:	55d4a13cf99c261de7ce8d36af10b30f
SHA1:	9bca6814565883837ce448c55188f05a9f44d95f
SHA256:	0a7fc068703663d5332986725d8b5aa76327cffb06452ccdcb8678c28bd7b332
Tags:	elfmirai
Infos:

Detection

Moobot

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected Moobot

Snort IDS alert for network traffic

Machine Learning detection for sample

Sets full permissions to files and/or directories

Yara signature match

Sample has stripped symbol table

Executes the "mkdir" command used to create folders

Sample tries to set the executable flag

Executes the "chmod" command used to modify permissions

Executes commands using a shell command-line interpreter

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.

General Information

Joe Sandbox Version:	37.1.0 Beryl
Analysis ID:	881685
Start date and time:	2023-06-05 12:39:08 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample file name:	skid.x86.elf
Detection:	MAL
Classification:	mal88.troj.linELF@0/0@1/0

Runtime Messages

Command:	/tmp/skid.x86.elf
PID:	6220
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	qazwsxedc
Standard Error:

Process Tree

system is lnxubuntu20

skid.x86.elf (PID: 6220, Parent: 6120, MD5: 55d4a13cf99c261de7ce8d36af10b30f) Arguments: /tmp/skid.x86.elf

skid.x86.elf New Fork (PID: 6221, Parent: 6220)

sh (PID: 6221, Parent: 6220, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "rm -rf bin/systemd && mkdir bin; >bin/systemd && mv /tmp/skid.x86.elf bin/systemd; chmod 777 bin/systemd"

sh New Fork (PID: 6222, Parent: 6221)

rm (PID: 6222, Parent: 6221, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf bin/systemd

sh New Fork (PID: 6223, Parent: 6221)

mkdir (PID: 6223, Parent: 6221, MD5: 088c9d1df5a28ed16c726eca15964cb7) Arguments: mkdir bin

sh New Fork (PID: 6224, Parent: 6221)

mv (PID: 6224, Parent: 6221, MD5: 504f0590fa482d4da070a702260e3716) Arguments: mv /tmp/skid.x86.elf bin/systemd

sh New Fork (PID: 6225, Parent: 6221)

chmod (PID: 6225, Parent: 6221, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod 777 bin/systemd

skid.x86.elf New Fork (PID: 6226, Parent: 6220)

skid.x86.elf New Fork (PID: 6227, Parent: 6226)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
MooBot		No Attribution	https://blog.netlab.360.com/ddos-botnet-moobot-en/ https://blog.netlab.360.com/moobot-0day-unixcctv-dvr-en/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/ https://otx.alienvault.com/pulse/6075b645942d5adf9bb8949b https://unit42.paloaltonetworks.com/moobot-d-link-devices/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.moobot

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
skid.x86.elf	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth (Nextron Systems)	0xc7a8:$s1: LCOGQGPTGP 0xc633:$s3: CFOKLKQVPCVMP 0xc61b:$s4: QWRGPTKQMP 0xc5b1:$s5: HWCLVGAJ
skid.x86.elf	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
skid.x86.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xbf98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbfac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbfc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbfd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbfe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbffc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc010:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc024:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc038:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc04c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc060:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc074:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc088:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc09c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc100:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc114:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc128:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
skid.x86.elf	Linux_Trojan_Gafgyt_5bf62ce4	unknown	unknown	0xa0e0:$a: 89 E5 56 53 31 F6 8D 45 10 83 EC 10 89 45 F4 8B 55 F4 46 8D
skid.x86.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x30b0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
skid.x86.elf	Linux_Trojan_Mirai_5f7b67b8	unknown	unknown	0xaaea:$a: 89 38 83 CF FF 89 F8 5A 59 5F C3 57 56 83 EC 04 8B 7C 24 10 8B 4C
skid.x86.elf	Linux_Trojan_Mirai_0bce98a2	unknown	unknown	0xc5a5:$a: 4B 52 41 00 46 47 44 43 57 4E 56 00 48 57 43 4C 56 47 41 4A
skid.x86.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7052:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
skid.x86.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0x9f0f:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
skid.x86.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x87ca:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
skid.x86.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7022:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 6 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth (Nextron Systems)	0xc7a8:$s1: LCOGQGPTGP 0xc633:$s3: CFOKLKQVPCVMP 0xc61b:$s4: QWRGPTKQMP 0xc5b1:$s5: HWCLVGAJ
6220.1.0000000008048000.0000000008057000.r-x.sdmp	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xbf98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbfac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbfc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbfd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbfe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbffc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc010:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc024:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc038:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc04c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc060:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc074:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc088:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc09c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc100:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc114:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc128:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_5bf62ce4	unknown	unknown	0xa0e0:$a: 89 E5 56 53 31 F6 8D 45 10 83 EC 10 89 45 F4 8B 55 F4 46 8D
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x30b0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_5f7b67b8	unknown	unknown	0xaaea:$a: 89 38 83 CF FF 89 F8 5A 59 5F C3 57 56 83 EC 04 8B 7C 24 10 8B 4C
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_0bce98a2	unknown	unknown	0xc5a5:$a: 4B 52 41 00 46 47 44 43 57 4E 56 00 48 57 43 4C 56 47 41 4A
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7052:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0x9f0f:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x87ca:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6220.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7022:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Process Memory Space: skid.x86.elf PID: 6220	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
Process Memory Space: skid.x86.elf PID: 6220	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xb05:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb19:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb2d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb41:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb55:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb69:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb7d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb91:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbcd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbe1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbf5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc09:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc1d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc31:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc45:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc59:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc6d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc81:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc95:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 8 entries

Snort Signatures

ET DNS Query to a *.top domain - Likely Hostile - Source IP: 192.168.2.23 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.238.8.8.835585532023883 06/05/23-12:39:54.262216
SID:	2023883
Source Port:	35585
Destination Port:	53
Protocol:	UDP
Classtype:	Potentially Bad Traffic

ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response - Source IP: 41.216.181.42 - Destination IP: 192.168.2.23

Timestamp:	41.216.181.42192.168.2.2356999484842030489 06/05/23-12:41:51.819200
SID:	2030489
Source Port:	56999
Destination Port:	48484
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.23 - Destination IP: 41.216.181.42

Timestamp:	192.168.2.2341.216.181.4248484569992030490 06/05/23-12:39:54.411245
SID:	2030490
Source Port:	48484
Destination Port:	56999
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: skid.x86.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: skid.x86.elf	ReversingLabs: Detection: 67%
Source: skid.x86.elf	Virustotal: Detection: 64%			Perma Link

Machine Learning detection for sample

Source: skid.x86.elf

Joe Sandbox ML: detected

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2023883 ET DNS Query to a *.top domain - Likely Hostile 192.168.2.23:35585 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2030490 ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) 192.168.2.23:48484 -> 41.216.181.42:56999
Source: Traffic	Snort IDS: 2030489 ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response 41.216.181.42:56999 -> 192.168.2.23:48484

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 98.78.170.94:2323
Source: global traffic	TCP traffic: 192.168.2.23:48484 -> 41.216.181.42:56999
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 175.95.197.128:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 25.171.221.72:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 27.165.244.16:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 154.57.44.32:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 5.65.224.4:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 116.221.168.218:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 47.48.224.118:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 142.116.91.148:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 88.103.31.75:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 102.57.43.169:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 60.115.250.52:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 121.116.111.235:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 134.29.114.223:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 199.63.130.198:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 31.235.218.73:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 75.61.230.109:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 68.133.85.238:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 120.232.168.64:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 64.13.65.38:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 217.195.196.149:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 2.42.10.12:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 223.15.144.233:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 60.104.181.51:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 23.196.186.167:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 124.98.208.77:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 117.5.246.244:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 92.165.61.197:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 20.2.129.210:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 213.232.6.179:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 208.53.17.21:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 59.218.218.180:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 23.159.102.120:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 217.190.155.148:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 211.251.144.245:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 82.9.205.127:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 207.4.115.14:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 156.34.77.180:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 68.137.250.75:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 32.34.179.71:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 95.179.207.108:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 128.90.220.127:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 211.19.99.231:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 79.115.45.120:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 135.133.252.8:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 217.233.26.88:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 83.149.26.9:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 166.216.35.32:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 38.121.245.162:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 195.230.102.182:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 123.164.75.175:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 53.184.185.117:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 120.225.126.104:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 65.98.113.97:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 221.68.11.5:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 34.74.220.240:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 136.77.113.254:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 36.236.96.191:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 117.128.212.137:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 191.98.119.126:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 70.240.48.228:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 175.143.54.81:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 142.230.82.17:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 197.170.189.205:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 58.98.97.64:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 12.40.174.4:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 122.64.81.226:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 112.224.150.151:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 75.209.215.252:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 135.234.40.140:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 199.8.0.90:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 65.150.226.11:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 17.241.141.9:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 90.193.43.180:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 193.222.200.249:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 158.56.104.19:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 157.210.235.6:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 142.220.73.124:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 68.87.40.66:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 78.217.171.75:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 187.57.53.109:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 109.188.132.239:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 71.54.156.204:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 25.130.211.215:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 54.181.37.248:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 165.247.198.158:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 24.77.87.133:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 65.112.162.170:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 196.188.128.170:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 125.191.228.137:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 148.190.228.26:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 150.192.140.207:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 70.55.50.191:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 37.28.96.128:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 93.217.63.180:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 150.50.151.118:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 207.253.178.218:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 151.136.199.51:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 161.254.38.219:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 128.148.117.176:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 63.214.205.205:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 51.208.6.155:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 142.211.114.246:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 157.184.88.0:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 49.96.0.214:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 212.104.102.80:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 35.252.108.218:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 64.50.100.122:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 190.178.165.118:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 59.215.22.131:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 153.113.111.54:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 176.182.81.205:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 130.86.239.193:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 219.24.20.19:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 160.239.210.18:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 119.136.29.19:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 150.96.139.74:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 205.49.115.6:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 163.38.179.203:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 144.229.159.100:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 94.92.55.124:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 166.185.166.203:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 8.82.7.230:2323
Source: global traffic	TCP traffic: 192.168.2.23:34782 -> 64.149.113.94:2323

Source: unknown

DNS traffic detected: queries for: helanhaiya.999apk.top

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 98.78.170.94
Source: unknown	TCP traffic detected without corresponding DNS query: 149.104.18.41
Source: unknown	TCP traffic detected without corresponding DNS query: 222.118.14.208
Source: unknown	TCP traffic detected without corresponding DNS query: 106.151.249.73
Source: unknown	TCP traffic detected without corresponding DNS query: 123.223.101.197
Source: unknown	TCP traffic detected without corresponding DNS query: 118.242.203.123
Source: unknown	TCP traffic detected without corresponding DNS query: 104.134.232.94
Source: unknown	TCP traffic detected without corresponding DNS query: 118.33.254.12
Source: unknown	TCP traffic detected without corresponding DNS query: 128.215.113.63
Source: unknown	TCP traffic detected without corresponding DNS query: 192.237.3.151
Source: unknown	TCP traffic detected without corresponding DNS query: 175.95.197.128
Source: unknown	TCP traffic detected without corresponding DNS query: 190.127.118.203
Source: unknown	TCP traffic detected without corresponding DNS query: 102.70.103.223
Source: unknown	TCP traffic detected without corresponding DNS query: 140.6.70.157
Source: unknown	TCP traffic detected without corresponding DNS query: 173.22.221.241
Source: unknown	TCP traffic detected without corresponding DNS query: 5.64.107.63
Source: unknown	TCP traffic detected without corresponding DNS query: 58.167.60.48
Source: unknown	TCP traffic detected without corresponding DNS query: 80.246.216.24
Source: unknown	TCP traffic detected without corresponding DNS query: 153.99.37.85
Source: unknown	TCP traffic detected without corresponding DNS query: 17.250.145.75
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 219.131.213.165
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.97.210
Source: unknown	TCP traffic detected without corresponding DNS query: 73.113.161.199
Source: unknown	TCP traffic detected without corresponding DNS query: 160.98.103.101
Source: unknown	TCP traffic detected without corresponding DNS query: 25.171.221.72
Source: unknown	TCP traffic detected without corresponding DNS query: 130.217.252.127
Source: unknown	TCP traffic detected without corresponding DNS query: 183.197.125.181
Source: unknown	TCP traffic detected without corresponding DNS query: 43.25.242.120
Source: unknown	TCP traffic detected without corresponding DNS query: 12.143.109.198
Source: unknown	TCP traffic detected without corresponding DNS query: 120.142.200.139
Source: unknown	TCP traffic detected without corresponding DNS query: 27.165.244.16
Source: unknown	TCP traffic detected without corresponding DNS query: 195.129.100.122
Source: unknown	TCP traffic detected without corresponding DNS query: 138.155.209.250
Source: unknown	TCP traffic detected without corresponding DNS query: 92.229.234.137
Source: unknown	TCP traffic detected without corresponding DNS query: 183.209.234.188
Source: unknown	TCP traffic detected without corresponding DNS query: 18.53.72.120
Source: unknown	TCP traffic detected without corresponding DNS query: 92.146.197.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.130.56.163
Source: unknown	TCP traffic detected without corresponding DNS query: 113.88.0.139
Source: unknown	TCP traffic detected without corresponding DNS query: 218.200.246.20
Source: unknown	TCP traffic detected without corresponding DNS query: 76.204.191.249
Source: unknown	TCP traffic detected without corresponding DNS query: 154.57.44.32
Source: unknown	TCP traffic detected without corresponding DNS query: 206.200.238.75
Source: unknown	TCP traffic detected without corresponding DNS query: 97.0.64.226
Source: unknown	TCP traffic detected without corresponding DNS query: 203.73.14.160
Source: unknown	TCP traffic detected without corresponding DNS query: 148.246.168.27
Source: unknown	TCP traffic detected without corresponding DNS query: 123.68.56.56
Source: unknown	TCP traffic detected without corresponding DNS query: 66.34.153.164

System Summary

Malicious sample detected (through community Yara rule)

Source: skid.x86.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth (Nextron Systems)
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_5bf62ce4 Author: unknown
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_5f7b67b8 Author: unknown
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0bce98a2 Author: unknown
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth (Nextron Systems)
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_5bf62ce4 Author: unknown
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_5f7b67b8 Author: unknown
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0bce98a2 Author: unknown
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: Process Memory Space: skid.x86.elf PID: 6220, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: skid.x86.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth (Nextron Systems), description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b, modified = 2023-01-27
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_5bf62ce4 reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ffc398303f7208e77c4fbdfb50ac896e531b7cee3be2fa820bc8d70cfb20af3, id = 5bf62ce4-619b-4d46-b221-c5bf552474bb, last_modified = 2021-09-16
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_5f7b67b8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6cb5fb0b7c132e9c11ac72da43278025b60810ea3733c9c6d6ca966163185940, id = 5f7b67b8-3d7b-48a4-8f03-b6f2c92be92e, last_modified = 2021-09-16
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0bce98a2 reference_sample = 1b20df8df7f84ad29d81ccbe276f49a6488c2214077b13da858656c027531c80, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 993d0d2e24152d0fb72cc5d5add395bed26671c3935f73386341398b91cb0e6e, id = 0bce98a2-113e-41e1-95c9-9e1852b26142, last_modified = 2021-09-16
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: skid.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth (Nextron Systems), description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b, modified = 2023-01-27
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_5bf62ce4 reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ffc398303f7208e77c4fbdfb50ac896e531b7cee3be2fa820bc8d70cfb20af3, id = 5bf62ce4-619b-4d46-b221-c5bf552474bb, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_5f7b67b8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6cb5fb0b7c132e9c11ac72da43278025b60810ea3733c9c6d6ca966163185940, id = 5f7b67b8-3d7b-48a4-8f03-b6f2c92be92e, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0bce98a2 reference_sample = 1b20df8df7f84ad29d81ccbe276f49a6488c2214077b13da858656c027531c80, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 993d0d2e24152d0fb72cc5d5add395bed26671c3935f73386341398b91cb0e6e, id = 0bce98a2-113e-41e1-95c9-9e1852b26142, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: Process Memory Space: skid.x86.elf PID: 6220, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: ELF static info symbol of initial sample

.symtab present: no

Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: HTTP/1.1 200 OKarmarm7mipsmipselx86_64sh4ppcm68k/bin/busybox/bin/watchdog/bin/systemdbinrm -rf && mkdir ; > && mv ; chmod 777 3f

Source: classification engine

Classification label: mal88.troj.linELF@0/0@1/0

Persistence and Installation Behavior

Sets full permissions to files and/or directories

Source: /bin/sh (PID: 6225)

Chmod executable with 777: /usr/bin/chmod -> chmod 777 bin/systemd

Jump to behavior

Source: /bin/sh (PID: 6223)

Mkdir executable: /usr/bin/mkdir -> mkdir bin

Jump to behavior

Source: /usr/bin/chmod (PID: 6225)

File: /tmp/bin/systemd (bits: - usr: rwx grp: rwx all: rwx)

Jump to behavior

Source: /bin/sh (PID: 6225)

Chmod executable: /usr/bin/chmod -> chmod 777 bin/systemd

Jump to behavior

Source: /tmp/skid.x86.elf (PID: 6221)

Shell command executed: sh -c "rm -rf bin/systemd && mkdir bin; >bin/systemd && mv /tmp/skid.x86.elf bin/systemd; chmod 777 bin/systemd"

Jump to behavior

Source: /bin/sh (PID: 6222)

Rm executable: /usr/bin/rm -> rm -rf bin/systemd

Jump to behavior

Stealing of Sensitive Information

Yara detected Moobot

Source: Yara match	File source: skid.x86.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: skid.x86.elf PID: 6220, type: MEMORYSTR

Remote Access Functionality

Yara detected Moobot

Source: Yara match	File source: skid.x86.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: skid.x86.elf PID: 6220, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Scripting	Path Interception	Path Interception	2 File and Directory Permissions Modification	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Scripting	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Non-Standard Port	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	2 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
skid.x86.elf	68%	ReversingLabs	Linux.Trojan.Mirai
skid.x86.elf	65%	Virustotal		Browse
skid.x86.elf	100%	Avira	EXP/ELF.Gafgyt.Gen.X
skid.x86.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
helanhaiya.999apk.top	41.216.181.42	true	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
184.196.136.127	unknown	United States	10507	SPCSUS	false
85.108.99.123	unknown	Turkey	9121	TTNETTR	false
201.67.252.116	unknown	Brazil	8167	BrasilTelecomSA-FilialDistritoFederalBR	false
211.19.99.231	unknown	Japan	9595	XEPHIONNTT-MECorporationJP	false
158.244.252.182	unknown	United States	1540	DNIC-ASBLK-01534-01546US	false
129.152.82.172	unknown	United States	7160	NETDYNAMICSUS	false
43.25.242.120	unknown	Japan	4249	LILLY-ASUS	false
154.151.96.94	unknown	Morocco	6713	IAM-ASMA	false
212.4.181.253	unknown	Germany	20676	PLUSNETDE	false
53.138.85.104	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
111.190.164.77	unknown	Japan	37903	EMOBILEYmobileCorporationJP	false
137.139.238.28	unknown	United States	46887	LIGHTOWERUS	false
1.94.86.45	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
152.56.100.36	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
211.96.231.49	unknown	China	17816	CHINA169-GZChinaUnicomIPnetworkChina169Guangdongprovi	false
216.245.79.211	unknown	United States	13009	VDATAGB	false
128.76.202.164	unknown	Denmark	3292	TDCTDCASDK	false
121.228.36.24	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
66.45.1.91	unknown	United States	7381	SRS-6-Z-7381US	false
17.50.29.95	unknown	United States	714	APPLE-ENGINEERINGUS	false
36.136.52.243	unknown	China	56044	CMNET-AS-LIAONINGChinaMobilecommunicationscorporationC	false
112.73.253.161	unknown	China	135373	EFLYPRO-AS-APEFLYNETWORKLIMITEDHK	false
53.27.139.206	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
196.176.100.207	unknown	Tunisia	37693	TUNISIANATN	false
40.54.150.227	unknown	United States	4249	LILLY-ASUS	false
113.88.0.139	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
51.45.103.35	unknown	United States	2686	ATGS-MMD-ASUS	false
166.217.156.115	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
82.244.44.58	unknown	France	12322	PROXADFR	false
162.73.42.64	unknown	Canada	7155	VIASAT-SP-BACKBONEUS	false
91.127.204.119	unknown	Slovakia (SLOVAK Republic)	6855	SK-TELEKOMSK	false
206.232.250.45	unknown	United States	174	COGENT-174US	false
188.152.134.43	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
210.71.210.205	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
197.94.254.146	unknown	South Africa	10474	OPTINETZA	false
88.119.14.237	unknown	Lithuania	8764	TELIA-LIETUVALT	false
154.85.83.112	unknown	Seychelles	35916	MULTA-ASN1US	false
132.232.17.31	unknown	China	45090	CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa	false
92.229.234.137	unknown	Germany	6805	TDDE-ASN1DE	false
86.219.81.165	unknown	France	3215	FranceTelecom-OrangeFR	false
175.111.76.177	unknown	Japan	17941	BIT-ISLEEquinixJpapanEnterpriseKKJP	false
150.231.72.146	unknown	United States	3999	PENN-STATEUS	false
152.245.130.182	unknown	Brazil	26599	TELEFONICABRASILSABR	false
192.155.85.1	unknown	United States	63949	LINODE-APLinodeLLCUS	false
181.244.123.27	unknown	Colombia	26611	COMCELSACO	false
135.234.40.140	unknown	United States	10455	LUCENT-CIOUS	false
54.156.139.122	unknown	United States	14618	AMAZON-AESUS	false
144.42.210.145	unknown	United States	27402	IBC-N1US	false
181.151.54.175	unknown	Colombia	26611	COMCELSACO	false
82.242.29.106	unknown	France	12322	PROXADFR	false
135.242.176.63	unknown	United States	10455	LUCENT-CIOUS	false
200.86.85.106	unknown	Chile	22047	VTRBANDAANCHASACL	false
96.111.16.166	unknown	United States	7922	COMCAST-7922US	false
182.31.31.87	unknown	Korea Republic of	9694	SEOKYUNG-CATV-AS-KRSeokyungCableTelevisionCoLtdKR	false
168.21.56.51	unknown	United States	3479	PEACHNET-AS1US	false
157.184.88.0	unknown	United States	22192	SSHENETUS	false
63.29.205.97	unknown	United States	701	UUNETUS	false
117.5.246.244	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
92.198.83.234	unknown	Germany	20676	PLUSNETDE	false
111.252.24.213	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
128.183.250.228	unknown	United States	1749	AS1749US	false
35.119.55.98	unknown	United States	237	MERIT-AS-14US	false
137.100.88.45	unknown	United States	1234	FORTUM-ASFortumEU	false
124.149.130.211	unknown	Australia	7545	TPG-INTERNET-APTPGTelecomLimitedAU	false
161.145.38.3	unknown	United States	263740	CorporacionLaceibanetsocietyHN	false
144.97.255.58	unknown	Australia	3634	SFASU-ASUS	false
69.61.142.200	unknown	United States	6181	FUSE-NETUS	false
98.84.200.65	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
110.116.169.77	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
133.47.120.125	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
51.158.166.250	unknown	France	12876	OnlineSASFR	false
5.190.132.217	unknown	Iran (ISLAMIC Republic Of)	58224	TCIIR	false
40.167.139.108	unknown	United States	4249	LILLY-ASUS	false
157.213.222.66	unknown	United States	4704	SANNETRakutenMobileIncJP	false
18.210.116.187	unknown	United States	14618	AMAZON-AESUS	false
69.62.213.161	unknown	United States	14051	SUREWESTUS	false
206.129.154.197	unknown	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
167.153.99.48	unknown	United States	22252	AS22252US	false
73.112.73.171	unknown	United States	7922	COMCAST-7922US	false
160.64.91.45	unknown	Australia	715	WOODYNET-2US	false
196.92.1.80	unknown	Morocco	6713	IAM-ASMA	false
199.73.5.252	unknown	United States	7029	WINDSTREAMUS	false
186.27.126.201	unknown	Bolivia	28024	NuevatelPCSdeBoliviaSABO	false
140.202.241.136	unknown	United States	1464	DNIC-ASBLK-01464-01465US	false
75.87.147.233	unknown	United States	11427	TWC-11427-TEXASUS	false
179.49.64.253	unknown	Peru	262168	COLINANETSAPE	false
188.38.191.79	unknown	Turkey	15897	VODAFONETURKEYTR	false
161.64.132.25	unknown	Macau	7582	UMAC-AS-APUniversityofMacauMO	false
181.152.238.48	unknown	Colombia	26611	COMCELSACO	false
105.49.81.238	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
203.73.14.160	unknown	Taiwan; Republic of China (ROC)	4780	SEEDNETDigitalUnitedIncTW	false
152.68.7.219	unknown	United States	6400	CompaniaDominicanadeTelefonosSADO	false
200.217.210.145	unknown	Brazil	7738	TelemarNorteLesteSABR	false
25.112.68.121	unknown	United Kingdom	7922	COMCAST-7922US	false
117.221.145.110	unknown	India	9829	BSNL-NIBNationalInternetBackboneIN	false
57.196.188.198	unknown	Belgium	2686	ATGS-MMD-ASUS	false
213.186.116.137	unknown	Ukraine	6849	UKRTELNETUA	false
8.31.226.46	unknown	United States	31849	PINNACLEUS	false
81.156.252.108	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
42.189.175.50	unknown	Malaysia	4788	TMNET-AS-APTMNetInternetServiceProviderMY	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
158.244.252.182	pWJF4uPCHW	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SPCSUS	rMlHCR4VZf.elf	Get hash	malicious	Mirai	Browse	68.246.214.215
	lxykcEZVFQ.elf	Get hash	malicious	Mirai	Browse	99.207.142.55
	yvW97t11aH.elf	Get hash	malicious	Unknown	Browse	173.140.234.165
	0qwUWowFUE.elf	Get hash	malicious	Mirai	Browse	173.138.106.230
	WDn95FC0sS.elf	Get hash	malicious	Unknown	Browse	173.109.41.149
	ijMjLBs5OT.elf	Get hash	malicious	Unknown	Browse	184.208.146.196
	NLK7krsoxK.elf	Get hash	malicious	Mirai	Browse	70.13.65.105
	KKveTTgaAAsecNNaaaa.x86.elf	Get hash	malicious	Mirai	Browse	24.221.153.233
	UK4ouvcZEA.elf	Get hash	malicious	Mirai	Browse	184.200.156.154
	uwVvr9YXPn.elf	Get hash	malicious	Mirai	Browse	99.207.177.216
	JUsM9UZd5S.elf	Get hash	malicious	Mirai	Browse	173.125.229.38
	76jchSM1O1.elf	Get hash	malicious	Mirai	Browse	174.146.219.169
	4FvxWvpyEa.elf	Get hash	malicious	Mirai	Browse	184.230.31.12
	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Mirai	Browse	174.145.65.129
	b7a6BXtHVg.elf	Get hash	malicious	Mirai	Browse	108.96.179.144
	UMyY7qXi7b.elf	Get hash	malicious	Mirai	Browse	174.158.98.69
	udxyqUncDs.elf	Get hash	malicious	Gafgyt, Mirai	Browse	184.193.182.204
	KipHfbWc5u.elf	Get hash	malicious	Mirai	Browse	173.126.60.204
	CT1zp877iP.elf	Get hash	malicious	Mirai	Browse	68.31.240.196
	LEo7jDCX96.elf	Get hash	malicious	Mirai	Browse	99.204.51.134

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.602489018234933
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	skid.x86.elf
File size:	59024
MD5:	55d4a13cf99c261de7ce8d36af10b30f
SHA1:	9bca6814565883837ce448c55188f05a9f44d95f
SHA256:	0a7fc068703663d5332986725d8b5aa76327cffb06452ccdcb8678c28bd7b332
SHA512:	47eb7622c35d786403bf705592f1e49f1c0491543b1bc7f7fc5d6204431c43094a347f7a4e6c8056b416a6a676bb12bce4082d934a1692893a432654646fbc31
SSDEEP:	1536:tqOI1jURarhcJrGrQZNnBPBi/lcs0iBVVrFhwbZnm:txI1jUR6OrGsZ5BP0dcsFrHhwbZnm
TLSH:	46435B84EA43DCB2D80B1571247B6F377A76E1E91274F792D7A8AA32EC81702D407D9C
File Content Preview:	.ELF....................d...4...........4. ...(.....................<...<...............@...@r..@r......`)..........Q.td............................U..S............h........[]...$.............U......=.t...t..5....dr.....dr......u........t....h<b..........

Static ELF Info

ELF header
Class:
Data:
Version:
Machine:
Version Number:
Type:
OS/ABI:
ABI Version:
Entry Point Address:
Flags:
ELF Header Size:
Program Header Offset:
Program Header Size:
Number of Program Headers:
Section Header Offset:
Section Header Size:
Number of Section Headers:
Header String Table Index:

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xba16	0x0	0x6	AX	16
.fini	PROGBITS	0x8053ac6	0xbac6	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8053ae0	0xbae0	0x275c	0x0	0x2	A	32
.ctors	PROGBITS	0x8057240	0xe240	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8057248	0xe248	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8057260	0xe260	0x260	0x0	0x3	WA	32
.bss	NOBITS	0x80574c0	0xe4c0	0x26e0	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0xe4c0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xe23c	0xe23c	6.6396	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0xe240	0x8057240	0x8057240	0x280	0x2960	3.4755	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.238.8.8.835585532023883 06/05/23-12:39:54.262216	UDP	2023883	ET DNS Query to a *.top domain - Likely Hostile	35585	53	192.168.2.23	8.8.8.8
41.216.181.42192.168.2.2356999484842030489 06/05/23-12:41:51.819200	TCP	2030489	ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response	56999	48484	41.216.181.42	192.168.2.23
192.168.2.2341.216.181.4248484569992030490 06/05/23-12:39:54.411245	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	48484	56999	192.168.2.23	41.216.181.42

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 5, 2023 12:39:54.263034105 CEST	34782	2323	192.168.2.23	98.78.170.94
Jun 5, 2023 12:39:54.263044119 CEST	34782	23	192.168.2.23	149.104.18.41
Jun 5, 2023 12:39:54.263071060 CEST	34782	23	192.168.2.23	222.118.14.208
Jun 5, 2023 12:39:54.263071060 CEST	34782	23	192.168.2.23	106.151.249.73
Jun 5, 2023 12:39:54.263098955 CEST	34782	23	192.168.2.23	123.223.101.197
Jun 5, 2023 12:39:54.263098001 CEST	34782	23	192.168.2.23	118.242.203.123
Jun 5, 2023 12:39:54.263098001 CEST	34782	23	192.168.2.23	104.134.232.94
Jun 5, 2023 12:39:54.263112068 CEST	34782	23	192.168.2.23	118.33.254.12
Jun 5, 2023 12:39:54.263112068 CEST	34782	23	192.168.2.23	128.215.113.63
Jun 5, 2023 12:39:54.263336897 CEST	34782	23	192.168.2.23	192.237.3.151
Jun 5, 2023 12:39:54.376750946 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:39:54.410903931 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:39:54.411140919 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:39:54.411245108 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:39:54.476715088 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:39:54.481417894 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:39:54.481605053 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:39:54.520725012 CEST	23	34782	222.118.14.208	192.168.2.23
Jun 5, 2023 12:39:55.264314890 CEST	34782	2323	192.168.2.23	175.95.197.128
Jun 5, 2023 12:39:55.264314890 CEST	34782	23	192.168.2.23	190.127.118.203
Jun 5, 2023 12:39:55.264332056 CEST	34782	23	192.168.2.23	102.70.103.223
Jun 5, 2023 12:39:55.264354944 CEST	34782	23	192.168.2.23	140.6.70.157
Jun 5, 2023 12:39:55.264357090 CEST	34782	23	192.168.2.23	173.22.221.241
Jun 5, 2023 12:39:55.264357090 CEST	34782	23	192.168.2.23	5.64.107.63
Jun 5, 2023 12:39:55.264378071 CEST	34782	23	192.168.2.23	58.167.60.48
Jun 5, 2023 12:39:55.264378071 CEST	34782	23	192.168.2.23	80.246.216.24
Jun 5, 2023 12:39:55.264385939 CEST	34782	23	192.168.2.23	153.99.37.85
Jun 5, 2023 12:39:55.264415026 CEST	34782	23	192.168.2.23	17.250.145.75
Jun 5, 2023 12:39:55.428296089 CEST	42836	443	192.168.2.23	91.189.91.43
Jun 5, 2023 12:39:56.196238041 CEST	42516	80	192.168.2.23	109.202.202.202
Jun 5, 2023 12:39:56.265580893 CEST	34782	23	192.168.2.23	219.131.213.165
Jun 5, 2023 12:39:56.265582085 CEST	34782	23	192.168.2.23	20.12.97.210
Jun 5, 2023 12:39:56.265583992 CEST	34782	23	192.168.2.23	73.113.161.199
Jun 5, 2023 12:39:56.265587091 CEST	34782	23	192.168.2.23	160.98.103.101
Jun 5, 2023 12:39:56.265604973 CEST	34782	2323	192.168.2.23	25.171.221.72
Jun 5, 2023 12:39:56.265610933 CEST	34782	23	192.168.2.23	130.217.252.127
Jun 5, 2023 12:39:56.265610933 CEST	34782	23	192.168.2.23	183.197.125.181
Jun 5, 2023 12:39:56.265620947 CEST	34782	23	192.168.2.23	43.25.242.120
Jun 5, 2023 12:39:56.265623093 CEST	34782	23	192.168.2.23	12.143.109.198
Jun 5, 2023 12:39:56.265678883 CEST	34782	23	192.168.2.23	120.142.200.139
Jun 5, 2023 12:39:56.544004917 CEST	23	34782	120.142.200.139	192.168.2.23
Jun 5, 2023 12:39:57.266712904 CEST	34782	2323	192.168.2.23	27.165.244.16
Jun 5, 2023 12:39:57.266730070 CEST	34782	23	192.168.2.23	195.129.100.122
Jun 5, 2023 12:39:57.266730070 CEST	34782	23	192.168.2.23	138.155.209.250
Jun 5, 2023 12:39:57.266755104 CEST	34782	23	192.168.2.23	92.229.234.137
Jun 5, 2023 12:39:57.266766071 CEST	34782	23	192.168.2.23	183.209.234.188
Jun 5, 2023 12:39:57.266814947 CEST	34782	23	192.168.2.23	18.53.72.120
Jun 5, 2023 12:39:57.266814947 CEST	34782	23	192.168.2.23	92.146.197.82
Jun 5, 2023 12:39:57.266825914 CEST	34782	23	192.168.2.23	184.130.56.163
Jun 5, 2023 12:39:57.266825914 CEST	34782	23	192.168.2.23	113.88.0.139
Jun 5, 2023 12:39:57.266891003 CEST	34782	23	192.168.2.23	218.200.246.20
Jun 5, 2023 12:39:58.268011093 CEST	34782	23	192.168.2.23	76.204.191.249
Jun 5, 2023 12:39:58.268014908 CEST	34782	2323	192.168.2.23	154.57.44.32
Jun 5, 2023 12:39:58.268023014 CEST	34782	23	192.168.2.23	206.200.238.75
Jun 5, 2023 12:39:58.268084049 CEST	34782	23	192.168.2.23	97.0.64.226
Jun 5, 2023 12:39:58.268109083 CEST	34782	23	192.168.2.23	203.73.14.160
Jun 5, 2023 12:39:58.268107891 CEST	34782	23	192.168.2.23	148.246.168.27
Jun 5, 2023 12:39:58.268107891 CEST	34782	23	192.168.2.23	123.68.56.56
Jun 5, 2023 12:39:58.268107891 CEST	34782	23	192.168.2.23	66.34.153.164
Jun 5, 2023 12:39:58.268171072 CEST	34782	23	192.168.2.23	179.145.189.27
Jun 5, 2023 12:39:58.268181086 CEST	34782	23	192.168.2.23	50.202.45.68
Jun 5, 2023 12:39:59.269304991 CEST	34782	2323	192.168.2.23	5.65.224.4
Jun 5, 2023 12:39:59.269304991 CEST	34782	23	192.168.2.23	4.175.84.92
Jun 5, 2023 12:39:59.269315958 CEST	34782	23	192.168.2.23	81.243.151.202
Jun 5, 2023 12:39:59.269325018 CEST	34782	23	192.168.2.23	2.141.74.199
Jun 5, 2023 12:39:59.269380093 CEST	34782	23	192.168.2.23	208.56.186.134
Jun 5, 2023 12:39:59.269387007 CEST	34782	23	192.168.2.23	205.44.84.152
Jun 5, 2023 12:39:59.269392967 CEST	34782	23	192.168.2.23	57.206.2.46
Jun 5, 2023 12:39:59.269397020 CEST	34782	23	192.168.2.23	171.218.121.177
Jun 5, 2023 12:39:59.269407034 CEST	34782	23	192.168.2.23	162.234.70.210
Jun 5, 2023 12:39:59.269506931 CEST	34782	23	192.168.2.23	216.245.79.211
Jun 5, 2023 12:40:00.270621061 CEST	34782	2323	192.168.2.23	116.221.168.218
Jun 5, 2023 12:40:00.270621061 CEST	34782	23	192.168.2.23	14.138.157.172
Jun 5, 2023 12:40:00.270634890 CEST	34782	23	192.168.2.23	117.221.145.110
Jun 5, 2023 12:40:00.270658016 CEST	34782	23	192.168.2.23	190.223.112.136
Jun 5, 2023 12:40:00.270693064 CEST	34782	23	192.168.2.23	49.164.121.195
Jun 5, 2023 12:40:00.270709038 CEST	34782	23	192.168.2.23	57.247.196.232
Jun 5, 2023 12:40:00.270719051 CEST	34782	23	192.168.2.23	202.103.37.201
Jun 5, 2023 12:40:00.270719051 CEST	34782	23	192.168.2.23	75.126.3.218
Jun 5, 2023 12:40:00.270719051 CEST	34782	23	192.168.2.23	142.29.248.234
Jun 5, 2023 12:40:00.270745993 CEST	34782	23	192.168.2.23	217.128.10.175
Jun 5, 2023 12:40:00.567187071 CEST	23	34782	14.138.157.172	192.168.2.23
Jun 5, 2023 12:40:01.271938086 CEST	34782	2323	192.168.2.23	47.48.224.118
Jun 5, 2023 12:40:01.271961927 CEST	34782	23	192.168.2.23	145.204.160.239
Jun 5, 2023 12:40:01.271961927 CEST	34782	23	192.168.2.23	81.23.126.80
Jun 5, 2023 12:40:01.271961927 CEST	34782	23	192.168.2.23	46.27.171.214
Jun 5, 2023 12:40:01.271967888 CEST	34782	23	192.168.2.23	145.185.216.248
Jun 5, 2023 12:40:01.271970987 CEST	34782	23	192.168.2.23	89.148.76.150
Jun 5, 2023 12:40:01.271967888 CEST	34782	23	192.168.2.23	51.158.166.250
Jun 5, 2023 12:40:01.271974087 CEST	34782	23	192.168.2.23	137.177.148.17
Jun 5, 2023 12:40:01.271970987 CEST	34782	23	192.168.2.23	169.56.69.110
Jun 5, 2023 12:40:01.271975040 CEST	34782	23	192.168.2.23	8.27.145.40
Jun 5, 2023 12:40:01.325568914 CEST	23	34782	46.27.171.214	192.168.2.23
Jun 5, 2023 12:40:02.273080111 CEST	34782	2323	192.168.2.23	142.116.91.148
Jun 5, 2023 12:40:02.273087978 CEST	34782	23	192.168.2.23	151.152.146.124
Jun 5, 2023 12:40:02.273087978 CEST	34782	23	192.168.2.23	124.26.158.254
Jun 5, 2023 12:40:02.273087978 CEST	34782	23	192.168.2.23	156.18.45.50
Jun 5, 2023 12:40:02.273112059 CEST	34782	23	192.168.2.23	85.67.47.41
Jun 5, 2023 12:40:02.273116112 CEST	34782	23	192.168.2.23	144.97.255.58
Jun 5, 2023 12:40:02.273132086 CEST	34782	23	192.168.2.23	108.66.56.250
Jun 5, 2023 12:40:02.273144007 CEST	34782	23	192.168.2.23	188.147.143.218
Jun 5, 2023 12:40:02.273144007 CEST	34782	23	192.168.2.23	50.3.91.238
Jun 5, 2023 12:40:02.273190975 CEST	34782	23	192.168.2.23	203.116.23.154
Jun 5, 2023 12:40:03.274233103 CEST	34782	2323	192.168.2.23	88.103.31.75
Jun 5, 2023 12:40:03.274241924 CEST	34782	23	192.168.2.23	1.94.86.45
Jun 5, 2023 12:40:03.274270058 CEST	34782	23	192.168.2.23	2.107.232.78
Jun 5, 2023 12:40:03.274271965 CEST	34782	23	192.168.2.23	136.142.10.145
Jun 5, 2023 12:40:03.274271965 CEST	34782	23	192.168.2.23	203.47.216.15
Jun 5, 2023 12:40:03.274270058 CEST	34782	23	192.168.2.23	147.217.179.177
Jun 5, 2023 12:40:03.274271965 CEST	34782	23	192.168.2.23	63.116.67.124
Jun 5, 2023 12:40:03.274272919 CEST	34782	23	192.168.2.23	107.116.23.178
Jun 5, 2023 12:40:03.274277925 CEST	34782	23	192.168.2.23	109.2.121.152
Jun 5, 2023 12:40:03.274272919 CEST	34782	23	192.168.2.23	80.221.143.186
Jun 5, 2023 12:40:03.807848930 CEST	23	34782	50.3.91.238	192.168.2.23
Jun 5, 2023 12:40:04.275317907 CEST	34782	2323	192.168.2.23	102.57.43.169
Jun 5, 2023 12:40:04.275317907 CEST	34782	23	192.168.2.23	125.206.18.149
Jun 5, 2023 12:40:04.275326967 CEST	34782	23	192.168.2.23	38.12.15.96
Jun 5, 2023 12:40:04.275374889 CEST	34782	23	192.168.2.23	117.148.184.15
Jun 5, 2023 12:40:04.275374889 CEST	34782	23	192.168.2.23	97.3.215.163
Jun 5, 2023 12:40:04.275382996 CEST	34782	23	192.168.2.23	179.69.110.200
Jun 5, 2023 12:40:04.275453091 CEST	34782	23	192.168.2.23	128.204.170.56
Jun 5, 2023 12:40:04.275492907 CEST	34782	23	192.168.2.23	40.82.97.212
Jun 5, 2023 12:40:04.275492907 CEST	34782	23	192.168.2.23	113.247.21.114
Jun 5, 2023 12:40:04.275492907 CEST	34782	23	192.168.2.23	130.28.138.157
Jun 5, 2023 12:40:04.491328001 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:40:04.574717045 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:40:05.276377916 CEST	34782	23	192.168.2.23	183.136.2.119
Jun 5, 2023 12:40:05.276406050 CEST	34782	2323	192.168.2.23	60.115.250.52
Jun 5, 2023 12:40:05.276407003 CEST	34782	23	192.168.2.23	161.64.132.25
Jun 5, 2023 12:40:05.276437044 CEST	34782	23	192.168.2.23	97.254.95.207
Jun 5, 2023 12:40:05.276442051 CEST	34782	23	192.168.2.23	184.196.136.127
Jun 5, 2023 12:40:05.276516914 CEST	34782	23	192.168.2.23	201.174.172.155
Jun 5, 2023 12:40:05.276521921 CEST	34782	23	192.168.2.23	57.232.28.169
Jun 5, 2023 12:40:05.276521921 CEST	34782	23	192.168.2.23	1.53.206.62
Jun 5, 2023 12:40:05.276523113 CEST	34782	23	192.168.2.23	199.39.41.162
Jun 5, 2023 12:40:05.276535988 CEST	34782	23	192.168.2.23	150.4.49.168
Jun 5, 2023 12:40:06.277584076 CEST	34782	2323	192.168.2.23	121.116.111.235
Jun 5, 2023 12:40:06.277643919 CEST	34782	23	192.168.2.23	200.217.210.145
Jun 5, 2023 12:40:06.277650118 CEST	34782	23	192.168.2.23	134.129.39.247
Jun 5, 2023 12:40:06.277650118 CEST	34782	23	192.168.2.23	216.225.225.232
Jun 5, 2023 12:40:06.277650118 CEST	34782	23	192.168.2.23	175.71.144.51
Jun 5, 2023 12:40:06.277678967 CEST	34782	23	192.168.2.23	47.118.144.250
Jun 5, 2023 12:40:06.277686119 CEST	34782	23	192.168.2.23	156.39.170.7
Jun 5, 2023 12:40:06.277713060 CEST	34782	23	192.168.2.23	162.188.18.156
Jun 5, 2023 12:40:06.277713060 CEST	34782	23	192.168.2.23	196.118.77.252
Jun 5, 2023 12:40:06.277713060 CEST	34782	23	192.168.2.23	157.0.111.166
Jun 5, 2023 12:40:07.278913021 CEST	34782	2323	192.168.2.23	134.29.114.223
Jun 5, 2023 12:40:07.278913975 CEST	34782	23	192.168.2.23	48.203.53.92
Jun 5, 2023 12:40:07.278955936 CEST	34782	23	192.168.2.23	113.214.47.179
Jun 5, 2023 12:40:07.278963089 CEST	34782	23	192.168.2.23	219.57.255.130
Jun 5, 2023 12:40:07.278963089 CEST	34782	23	192.168.2.23	51.93.238.158
Jun 5, 2023 12:40:07.278975010 CEST	34782	23	192.168.2.23	92.207.216.171
Jun 5, 2023 12:40:07.278975010 CEST	34782	23	192.168.2.23	128.117.63.168
Jun 5, 2023 12:40:07.278975010 CEST	34782	23	192.168.2.23	34.159.54.26
Jun 5, 2023 12:40:07.279031992 CEST	34782	23	192.168.2.23	106.102.80.89
Jun 5, 2023 12:40:07.279040098 CEST	34782	23	192.168.2.23	192.158.173.26
Jun 5, 2023 12:40:08.280196905 CEST	34782	23	192.168.2.23	67.99.90.98
Jun 5, 2023 12:40:08.280199051 CEST	34782	2323	192.168.2.23	199.63.130.198
Jun 5, 2023 12:40:08.280211926 CEST	34782	23	192.168.2.23	100.217.216.168
Jun 5, 2023 12:40:08.280257940 CEST	34782	23	192.168.2.23	194.68.104.149
Jun 5, 2023 12:40:08.280299902 CEST	34782	23	192.168.2.23	24.255.208.173
Jun 5, 2023 12:40:08.280364037 CEST	34782	23	192.168.2.23	112.235.96.37
Jun 5, 2023 12:40:08.280368090 CEST	34782	23	192.168.2.23	45.208.6.214
Jun 5, 2023 12:40:08.280385017 CEST	34782	23	192.168.2.23	86.71.148.85
Jun 5, 2023 12:40:08.280390024 CEST	34782	23	192.168.2.23	201.67.252.116
Jun 5, 2023 12:40:08.280385017 CEST	34782	23	192.168.2.23	144.140.171.120
Jun 5, 2023 12:40:09.281541109 CEST	34782	2323	192.168.2.23	31.235.218.73
Jun 5, 2023 12:40:09.281541109 CEST	34782	23	192.168.2.23	112.73.253.161
Jun 5, 2023 12:40:09.281542063 CEST	34782	23	192.168.2.23	132.139.44.165
Jun 5, 2023 12:40:09.281562090 CEST	34782	23	192.168.2.23	203.209.29.219
Jun 5, 2023 12:40:09.281563044 CEST	34782	23	192.168.2.23	64.86.107.215
Jun 5, 2023 12:40:09.281609058 CEST	34782	23	192.168.2.23	88.138.58.241
Jun 5, 2023 12:40:09.281646013 CEST	34782	23	192.168.2.23	166.252.207.63
Jun 5, 2023 12:40:09.281662941 CEST	34782	23	192.168.2.23	60.33.11.184
Jun 5, 2023 12:40:09.281677008 CEST	34782	23	192.168.2.23	218.250.45.135
Jun 5, 2023 12:40:09.281689882 CEST	34782	23	192.168.2.23	207.107.211.109
Jun 5, 2023 12:40:10.275413990 CEST	43928	443	192.168.2.23	91.189.91.42
Jun 5, 2023 12:40:10.282834053 CEST	34782	23	192.168.2.23	197.94.254.146
Jun 5, 2023 12:40:10.282834053 CEST	34782	23	192.168.2.23	63.57.220.77
Jun 5, 2023 12:40:10.282851934 CEST	34782	23	192.168.2.23	126.240.182.226
Jun 5, 2023 12:40:10.282851934 CEST	34782	23	192.168.2.23	53.27.139.206
Jun 5, 2023 12:40:10.282852888 CEST	34782	23	192.168.2.23	101.161.103.100
Jun 5, 2023 12:40:10.282852888 CEST	34782	23	192.168.2.23	78.59.203.184
Jun 5, 2023 12:40:10.282857895 CEST	34782	23	192.168.2.23	121.174.173.116
Jun 5, 2023 12:40:10.282857895 CEST	34782	23	192.168.2.23	92.198.83.234
Jun 5, 2023 12:40:10.282860994 CEST	34782	23	192.168.2.23	157.216.157.157
Jun 5, 2023 12:40:10.282871008 CEST	34782	2323	192.168.2.23	75.61.230.109
Jun 5, 2023 12:40:11.284095049 CEST	34782	23	192.168.2.23	91.47.241.196
Jun 5, 2023 12:40:11.284105062 CEST	34782	23	192.168.2.23	86.219.81.165
Jun 5, 2023 12:40:11.284130096 CEST	34782	23	192.168.2.23	152.173.98.195
Jun 5, 2023 12:40:11.284140110 CEST	34782	23	192.168.2.23	124.252.46.19
Jun 5, 2023 12:40:11.284140110 CEST	34782	23	192.168.2.23	180.210.250.143
Jun 5, 2023 12:40:11.284157991 CEST	34782	23	192.168.2.23	80.15.147.224
Jun 5, 2023 12:40:11.284157991 CEST	34782	2323	192.168.2.23	68.133.85.238
Jun 5, 2023 12:40:11.284157991 CEST	34782	23	192.168.2.23	105.206.230.142
Jun 5, 2023 12:40:11.284188032 CEST	34782	23	192.168.2.23	168.101.110.154
Jun 5, 2023 12:40:11.284188986 CEST	34782	23	192.168.2.23	124.78.6.38
Jun 5, 2023 12:40:11.774826050 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:40:11.775135994 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:40:12.285202980 CEST	34782	2323	192.168.2.23	120.232.168.64
Jun 5, 2023 12:40:12.285231113 CEST	34782	23	192.168.2.23	128.49.195.19
Jun 5, 2023 12:40:12.285290956 CEST	34782	23	192.168.2.23	124.154.176.195
Jun 5, 2023 12:40:12.285290956 CEST	34782	23	192.168.2.23	2.100.47.101
Jun 5, 2023 12:40:12.285303116 CEST	34782	23	192.168.2.23	184.28.51.162
Jun 5, 2023 12:40:12.285309076 CEST	34782	23	192.168.2.23	154.10.78.169
Jun 5, 2023 12:40:12.285320044 CEST	34782	23	192.168.2.23	84.236.22.68
Jun 5, 2023 12:40:12.285343885 CEST	34782	23	192.168.2.23	68.1.36.121
Jun 5, 2023 12:40:12.285373926 CEST	34782	23	192.168.2.23	1.8.191.35
Jun 5, 2023 12:40:12.285398006 CEST	34782	23	192.168.2.23	43.155.70.236
Jun 5, 2023 12:40:13.286530972 CEST	34782	23	192.168.2.23	182.115.86.218
Jun 5, 2023 12:40:13.286528111 CEST	34782	2323	192.168.2.23	64.13.65.38
Jun 5, 2023 12:40:13.286652088 CEST	34782	23	192.168.2.23	223.1.196.59
Jun 5, 2023 12:40:13.286662102 CEST	34782	23	192.168.2.23	66.45.1.91
Jun 5, 2023 12:40:13.286662102 CEST	34782	23	192.168.2.23	152.171.122.223
Jun 5, 2023 12:40:13.286699057 CEST	34782	23	192.168.2.23	66.11.126.227
Jun 5, 2023 12:40:13.286726952 CEST	34782	23	192.168.2.23	5.190.132.217
Jun 5, 2023 12:40:13.286734104 CEST	34782	23	192.168.2.23	217.89.87.127
Jun 5, 2023 12:40:13.286735058 CEST	34782	23	192.168.2.23	1.122.175.103
Jun 5, 2023 12:40:13.286735058 CEST	34782	23	192.168.2.23	141.184.221.157
Jun 5, 2023 12:40:13.416676998 CEST	23	34782	5.190.132.217	192.168.2.23
Jun 5, 2023 12:40:14.287189007 CEST	34782	2323	192.168.2.23	217.195.196.149
Jun 5, 2023 12:40:14.287199974 CEST	34782	23	192.168.2.23	58.232.211.226
Jun 5, 2023 12:40:14.287198067 CEST	34782	23	192.168.2.23	74.42.229.200
Jun 5, 2023 12:40:14.287199974 CEST	34782	23	192.168.2.23	12.45.92.223
Jun 5, 2023 12:40:14.287200928 CEST	34782	23	192.168.2.23	164.52.113.139
Jun 5, 2023 12:40:14.287206888 CEST	34782	23	192.168.2.23	64.221.83.223
Jun 5, 2023 12:40:14.287206888 CEST	34782	23	192.168.2.23	87.117.20.3
Jun 5, 2023 12:40:14.287251949 CEST	34782	23	192.168.2.23	190.13.162.205
Jun 5, 2023 12:40:14.287262917 CEST	34782	23	192.168.2.23	186.93.245.171
Jun 5, 2023 12:40:14.287265062 CEST	34782	23	192.168.2.23	49.139.117.14
Jun 5, 2023 12:40:15.288405895 CEST	34782	2323	192.168.2.23	2.42.10.12
Jun 5, 2023 12:40:15.288436890 CEST	34782	23	192.168.2.23	160.64.91.45
Jun 5, 2023 12:40:15.288456917 CEST	34782	23	192.168.2.23	50.53.4.175
Jun 5, 2023 12:40:15.288456917 CEST	34782	23	192.168.2.23	197.195.196.64
Jun 5, 2023 12:40:15.288515091 CEST	34782	23	192.168.2.23	18.186.111.78
Jun 5, 2023 12:40:15.288517952 CEST	34782	23	192.168.2.23	135.173.13.84
Jun 5, 2023 12:40:15.288517952 CEST	34782	23	192.168.2.23	111.190.164.77
Jun 5, 2023 12:40:15.288532972 CEST	34782	23	192.168.2.23	192.167.20.201
Jun 5, 2023 12:40:15.288541079 CEST	34782	23	192.168.2.23	48.240.79.104
Jun 5, 2023 12:40:15.288611889 CEST	34782	23	192.168.2.23	18.243.231.113
Jun 5, 2023 12:40:16.289731979 CEST	34782	23	192.168.2.23	177.209.57.254
Jun 5, 2023 12:40:16.289741993 CEST	34782	2323	192.168.2.23	223.15.144.233
Jun 5, 2023 12:40:16.289758921 CEST	34782	23	192.168.2.23	185.250.71.56
Jun 5, 2023 12:40:16.289758921 CEST	34782	23	192.168.2.23	160.251.54.36
Jun 5, 2023 12:40:16.289781094 CEST	34782	23	192.168.2.23	180.220.207.105
Jun 5, 2023 12:40:16.289844990 CEST	34782	23	192.168.2.23	65.111.85.58
Jun 5, 2023 12:40:16.289879084 CEST	34782	23	192.168.2.23	89.27.119.113
Jun 5, 2023 12:40:16.289884090 CEST	34782	23	192.168.2.23	140.112.229.214
Jun 5, 2023 12:40:16.289882898 CEST	34782	23	192.168.2.23	193.200.34.122
Jun 5, 2023 12:40:16.289887905 CEST	34782	23	192.168.2.23	158.104.173.136
Jun 5, 2023 12:40:17.291078091 CEST	34782	23	192.168.2.23	208.249.187.223
Jun 5, 2023 12:40:17.291084051 CEST	34782	2323	192.168.2.23	60.104.181.51
Jun 5, 2023 12:40:17.291084051 CEST	34782	23	192.168.2.23	43.89.188.104
Jun 5, 2023 12:40:17.291141987 CEST	34782	23	192.168.2.23	18.210.116.187
Jun 5, 2023 12:40:17.291151047 CEST	34782	23	192.168.2.23	103.44.228.202
Jun 5, 2023 12:40:17.291155100 CEST	34782	23	192.168.2.23	106.5.24.98
Jun 5, 2023 12:40:17.291155100 CEST	34782	23	192.168.2.23	79.235.27.202
Jun 5, 2023 12:40:17.291174889 CEST	34782	23	192.168.2.23	50.204.37.61
Jun 5, 2023 12:40:17.291174889 CEST	34782	23	192.168.2.23	171.193.172.142
Jun 5, 2023 12:40:17.291234970 CEST	34782	23	192.168.2.23	9.191.65.237
Jun 5, 2023 12:40:18.292332888 CEST	34782	23	192.168.2.23	48.223.208.141
Jun 5, 2023 12:40:18.292378902 CEST	34782	23	192.168.2.23	25.114.91.38
Jun 5, 2023 12:40:18.292382002 CEST	34782	2323	192.168.2.23	23.196.186.167
Jun 5, 2023 12:40:18.292411089 CEST	34782	23	192.168.2.23	151.17.179.177
Jun 5, 2023 12:40:18.292409897 CEST	34782	23	192.168.2.23	49.92.128.84
Jun 5, 2023 12:40:18.292423964 CEST	34782	23	192.168.2.23	129.23.18.255
Jun 5, 2023 12:40:18.292439938 CEST	34782	23	192.168.2.23	58.183.207.213
Jun 5, 2023 12:40:18.292483091 CEST	34782	23	192.168.2.23	140.33.87.233
Jun 5, 2023 12:40:18.292540073 CEST	34782	23	192.168.2.23	60.234.251.21
Jun 5, 2023 12:40:18.292546988 CEST	34782	23	192.168.2.23	92.243.212.143
Jun 5, 2023 12:40:19.293688059 CEST	34782	2323	192.168.2.23	124.98.208.77
Jun 5, 2023 12:40:19.293709040 CEST	34782	23	192.168.2.23	219.104.64.69
Jun 5, 2023 12:40:19.293709993 CEST	34782	23	192.168.2.23	36.2.179.95
Jun 5, 2023 12:40:19.293736935 CEST	34782	23	192.168.2.23	61.198.192.243
Jun 5, 2023 12:40:19.293759108 CEST	34782	23	192.168.2.23	159.128.199.130
Jun 5, 2023 12:40:19.293770075 CEST	34782	23	192.168.2.23	40.167.139.108
Jun 5, 2023 12:40:19.293770075 CEST	34782	23	192.168.2.23	71.40.186.214
Jun 5, 2023 12:40:19.293782949 CEST	34782	23	192.168.2.23	119.191.127.150
Jun 5, 2023 12:40:19.293803930 CEST	34782	23	192.168.2.23	189.46.176.113
Jun 5, 2023 12:40:19.293812037 CEST	34782	23	192.168.2.23	64.31.54.179
Jun 5, 2023 12:40:20.294962883 CEST	34782	2323	192.168.2.23	117.5.246.244
Jun 5, 2023 12:40:20.295000076 CEST	34782	23	192.168.2.23	181.244.123.27
Jun 5, 2023 12:40:20.295000076 CEST	34782	23	192.168.2.23	80.44.245.38
Jun 5, 2023 12:40:20.295008898 CEST	34782	23	192.168.2.23	82.157.7.12
Jun 5, 2023 12:40:20.295011044 CEST	34782	23	192.168.2.23	78.69.92.102
Jun 5, 2023 12:40:20.295008898 CEST	34782	23	192.168.2.23	34.71.197.54
Jun 5, 2023 12:40:20.295094013 CEST	34782	23	192.168.2.23	75.87.147.233
Jun 5, 2023 12:40:20.295377970 CEST	34782	23	192.168.2.23	133.203.184.48
Jun 5, 2023 12:40:20.295397997 CEST	34782	23	192.168.2.23	51.131.169.139
Jun 5, 2023 12:40:20.295414925 CEST	34782	23	192.168.2.23	96.87.39.146
Jun 5, 2023 12:40:20.328382969 CEST	23	34782	78.69.92.102	192.168.2.23
Jun 5, 2023 12:40:21.296633005 CEST	34782	2323	192.168.2.23	92.165.61.197
Jun 5, 2023 12:40:21.296668053 CEST	34782	23	192.168.2.23	37.101.15.163
Jun 5, 2023 12:40:21.296669960 CEST	34782	23	192.168.2.23	98.214.49.215
Jun 5, 2023 12:40:21.296668053 CEST	34782	23	192.168.2.23	146.64.201.5
Jun 5, 2023 12:40:21.296672106 CEST	34782	23	192.168.2.23	145.181.24.178
Jun 5, 2023 12:40:21.296672106 CEST	34782	23	192.168.2.23	87.25.4.110
Jun 5, 2023 12:40:21.296700954 CEST	34782	23	192.168.2.23	218.110.173.127
Jun 5, 2023 12:40:21.296729088 CEST	34782	23	192.168.2.23	75.36.137.134
Jun 5, 2023 12:40:21.296732903 CEST	34782	23	192.168.2.23	170.6.72.46
Jun 5, 2023 12:40:21.296732903 CEST	34782	23	192.168.2.23	88.119.14.237
Jun 5, 2023 12:40:22.298043966 CEST	34782	2323	192.168.2.23	20.2.129.210
Jun 5, 2023 12:40:22.298063993 CEST	34782	23	192.168.2.23	80.170.218.41
Jun 5, 2023 12:40:22.298084021 CEST	34782	23	192.168.2.23	138.15.242.131
Jun 5, 2023 12:40:22.298084021 CEST	34782	23	192.168.2.23	162.33.253.13
Jun 5, 2023 12:40:22.298095942 CEST	34782	23	192.168.2.23	212.4.181.253
Jun 5, 2023 12:40:22.298119068 CEST	34782	23	192.168.2.23	139.59.10.212
Jun 5, 2023 12:40:22.298121929 CEST	34782	23	192.168.2.23	117.117.161.89
Jun 5, 2023 12:40:22.298118114 CEST	34782	23	192.168.2.23	186.0.176.98
Jun 5, 2023 12:40:22.298127890 CEST	34782	23	192.168.2.23	137.100.88.45
Jun 5, 2023 12:40:22.298127890 CEST	34782	23	192.168.2.23	218.137.111.176
Jun 5, 2023 12:40:22.562793016 CEST	42836	443	192.168.2.23	91.189.91.43
Jun 5, 2023 12:40:23.299199104 CEST	34782	2323	192.168.2.23	213.232.6.179
Jun 5, 2023 12:40:23.299211979 CEST	34782	23	192.168.2.23	78.229.185.223
Jun 5, 2023 12:40:23.299211979 CEST	34782	23	192.168.2.23	67.137.14.58
Jun 5, 2023 12:40:23.299227953 CEST	34782	23	192.168.2.23	202.237.64.158
Jun 5, 2023 12:40:23.299226046 CEST	34782	23	192.168.2.23	190.151.242.174
Jun 5, 2023 12:40:23.299242020 CEST	34782	23	192.168.2.23	13.123.211.5
Jun 5, 2023 12:40:23.299249887 CEST	34782	23	192.168.2.23	192.41.215.150
Jun 5, 2023 12:40:23.299303055 CEST	34782	23	192.168.2.23	184.135.183.29
Jun 5, 2023 12:40:23.299303055 CEST	34782	23	192.168.2.23	123.120.34.56
Jun 5, 2023 12:40:23.299309015 CEST	34782	23	192.168.2.23	90.130.187.162
Jun 5, 2023 12:40:24.300442934 CEST	34782	23	192.168.2.23	168.207.44.119
Jun 5, 2023 12:40:24.300456047 CEST	34782	2323	192.168.2.23	208.53.17.21
Jun 5, 2023 12:40:24.300467968 CEST	34782	23	192.168.2.23	95.71.8.250
Jun 5, 2023 12:40:24.300477028 CEST	34782	23	192.168.2.23	189.252.51.250
Jun 5, 2023 12:40:24.300498009 CEST	34782	23	192.168.2.23	162.79.250.244
Jun 5, 2023 12:40:24.300496101 CEST	34782	23	192.168.2.23	40.156.223.108
Jun 5, 2023 12:40:24.300496101 CEST	34782	23	192.168.2.23	130.168.103.130
Jun 5, 2023 12:40:24.300538063 CEST	34782	23	192.168.2.23	201.130.231.142
Jun 5, 2023 12:40:24.300546885 CEST	34782	23	192.168.2.23	186.27.126.201
Jun 5, 2023 12:40:24.300559044 CEST	34782	23	192.168.2.23	169.250.161.107
Jun 5, 2023 12:40:25.301717997 CEST	34782	2323	192.168.2.23	59.218.218.180
Jun 5, 2023 12:40:25.301717997 CEST	34782	23	192.168.2.23	129.249.35.225
Jun 5, 2023 12:40:25.301723003 CEST	34782	23	192.168.2.23	173.224.172.63
Jun 5, 2023 12:40:25.301723003 CEST	34782	23	192.168.2.23	197.110.180.225
Jun 5, 2023 12:40:25.301739931 CEST	34782	23	192.168.2.23	165.19.47.61
Jun 5, 2023 12:40:25.301743984 CEST	34782	23	192.168.2.23	96.111.16.166
Jun 5, 2023 12:40:25.301754951 CEST	34782	23	192.168.2.23	129.42.90.75
Jun 5, 2023 12:40:25.301755905 CEST	34782	23	192.168.2.23	126.211.136.115
Jun 5, 2023 12:40:25.301755905 CEST	34782	23	192.168.2.23	71.194.102.174
Jun 5, 2023 12:40:25.301814079 CEST	34782	23	192.168.2.23	162.148.40.95
Jun 5, 2023 12:40:26.302903891 CEST	34782	23	192.168.2.23	133.240.24.134
Jun 5, 2023 12:40:26.302903891 CEST	34782	23	192.168.2.23	138.61.20.95
Jun 5, 2023 12:40:26.302903891 CEST	34782	23	192.168.2.23	182.162.63.20
Jun 5, 2023 12:40:26.302903891 CEST	34782	23	192.168.2.23	175.111.76.177
Jun 5, 2023 12:40:26.302910089 CEST	34782	23	192.168.2.23	196.161.27.117
Jun 5, 2023 12:40:26.302910089 CEST	34782	2323	192.168.2.23	23.159.102.120
Jun 5, 2023 12:40:26.302978039 CEST	34782	23	192.168.2.23	47.252.159.217
Jun 5, 2023 12:40:26.302982092 CEST	34782	23	192.168.2.23	220.40.215.222
Jun 5, 2023 12:40:26.302989006 CEST	34782	23	192.168.2.23	151.39.33.206
Jun 5, 2023 12:40:26.302989960 CEST	34782	23	192.168.2.23	190.127.53.100
Jun 5, 2023 12:40:26.658622026 CEST	42516	80	192.168.2.23	109.202.202.202
Jun 5, 2023 12:40:27.304040909 CEST	34782	2323	192.168.2.23	217.190.155.148
Jun 5, 2023 12:40:27.304076910 CEST	34782	23	192.168.2.23	116.62.162.218
Jun 5, 2023 12:40:27.304091930 CEST	34782	23	192.168.2.23	203.110.239.141
Jun 5, 2023 12:40:27.304091930 CEST	34782	23	192.168.2.23	101.120.180.70
Jun 5, 2023 12:40:27.304100990 CEST	34782	23	192.168.2.23	174.135.6.238
Jun 5, 2023 12:40:27.304111958 CEST	34782	23	192.168.2.23	90.43.61.179
Jun 5, 2023 12:40:27.304115057 CEST	34782	23	192.168.2.23	69.53.71.33
Jun 5, 2023 12:40:27.304152012 CEST	34782	23	192.168.2.23	37.141.24.73
Jun 5, 2023 12:40:27.304152012 CEST	34782	23	192.168.2.23	114.32.26.150
Jun 5, 2023 12:40:27.304213047 CEST	34782	23	192.168.2.23	157.213.222.66
Jun 5, 2023 12:40:28.305428982 CEST	34782	23	192.168.2.23	68.71.124.44
Jun 5, 2023 12:40:28.305455923 CEST	34782	23	192.168.2.23	189.154.108.158
Jun 5, 2023 12:40:28.305455923 CEST	34782	23	192.168.2.23	217.59.107.170
Jun 5, 2023 12:40:28.305455923 CEST	34782	23	192.168.2.23	170.68.24.46
Jun 5, 2023 12:40:28.305485964 CEST	34782	23	192.168.2.23	50.12.118.190
Jun 5, 2023 12:40:28.305495024 CEST	34782	2323	192.168.2.23	211.251.144.245
Jun 5, 2023 12:40:28.305495024 CEST	34782	23	192.168.2.23	72.56.161.189
Jun 5, 2023 12:40:28.305509090 CEST	34782	23	192.168.2.23	195.189.125.228
Jun 5, 2023 12:40:28.305510998 CEST	34782	23	192.168.2.23	111.252.24.213
Jun 5, 2023 12:40:28.305510998 CEST	34782	23	192.168.2.23	44.13.214.129
Jun 5, 2023 12:40:28.563848019 CEST	2323	34782	211.251.144.245	192.168.2.23
Jun 5, 2023 12:40:29.306639910 CEST	34782	2323	192.168.2.23	82.9.205.127
Jun 5, 2023 12:40:29.306674957 CEST	34782	23	192.168.2.23	132.232.17.31
Jun 5, 2023 12:40:29.306687117 CEST	34782	23	192.168.2.23	41.122.13.247
Jun 5, 2023 12:40:29.306689978 CEST	34782	23	192.168.2.23	154.85.83.112
Jun 5, 2023 12:40:29.306689978 CEST	34782	23	192.168.2.23	212.193.102.37
Jun 5, 2023 12:40:29.306704044 CEST	34782	23	192.168.2.23	34.80.194.7
Jun 5, 2023 12:40:29.306715965 CEST	34782	23	192.168.2.23	153.227.119.2
Jun 5, 2023 12:40:29.306716919 CEST	34782	23	192.168.2.23	164.228.51.174
Jun 5, 2023 12:40:29.306721926 CEST	34782	23	192.168.2.23	69.61.142.200
Jun 5, 2023 12:40:29.306773901 CEST	34782	23	192.168.2.23	39.38.82.192
Jun 5, 2023 12:40:29.360841036 CEST	23	34782	212.193.102.37	192.168.2.23
Jun 5, 2023 12:40:30.307890892 CEST	34782	23	192.168.2.23	196.235.157.137
Jun 5, 2023 12:40:30.307899952 CEST	34782	23	192.168.2.23	158.32.44.212
Jun 5, 2023 12:40:30.307899952 CEST	34782	23	192.168.2.23	172.208.7.178
Jun 5, 2023 12:40:30.307920933 CEST	34782	2323	192.168.2.23	207.4.115.14
Jun 5, 2023 12:40:30.307920933 CEST	34782	23	192.168.2.23	4.182.96.91
Jun 5, 2023 12:40:30.307920933 CEST	34782	23	192.168.2.23	114.67.162.232
Jun 5, 2023 12:40:30.307974100 CEST	34782	23	192.168.2.23	196.16.121.21
Jun 5, 2023 12:40:30.307974100 CEST	34782	23	192.168.2.23	223.46.39.158
Jun 5, 2023 12:40:30.308015108 CEST	34782	23	192.168.2.23	115.86.222.85
Jun 5, 2023 12:40:30.308042049 CEST	34782	23	192.168.2.23	160.92.47.219
Jun 5, 2023 12:40:31.309190035 CEST	34782	2323	192.168.2.23	156.34.77.180
Jun 5, 2023 12:40:31.309190035 CEST	34782	23	192.168.2.23	73.122.127.253
Jun 5, 2023 12:40:31.309190035 CEST	34782	23	192.168.2.23	91.251.49.106
Jun 5, 2023 12:40:31.309216976 CEST	34782	23	192.168.2.23	80.94.173.113
Jun 5, 2023 12:40:31.309216976 CEST	34782	23	192.168.2.23	134.77.189.135
Jun 5, 2023 12:40:31.309248924 CEST	34782	23	192.168.2.23	145.203.49.0
Jun 5, 2023 12:40:31.309248924 CEST	34782	23	192.168.2.23	196.191.21.194
Jun 5, 2023 12:40:31.309248924 CEST	34782	23	192.168.2.23	142.205.72.90
Jun 5, 2023 12:40:31.309297085 CEST	34782	23	192.168.2.23	72.17.45.6
Jun 5, 2023 12:40:31.309323072 CEST	34782	23	192.168.2.23	208.40.78.197
Jun 5, 2023 12:40:31.785872936 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:40:31.786108017 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:40:32.310226917 CEST	34782	23	192.168.2.23	153.163.149.7
Jun 5, 2023 12:40:32.310231924 CEST	34782	23	192.168.2.23	20.114.205.100
Jun 5, 2023 12:40:32.310240030 CEST	34782	2323	192.168.2.23	68.137.250.75
Jun 5, 2023 12:40:32.310259104 CEST	34782	23	192.168.2.23	191.42.43.41
Jun 5, 2023 12:40:32.310260057 CEST	34782	23	192.168.2.23	112.31.165.190
Jun 5, 2023 12:40:32.310292959 CEST	34782	23	192.168.2.23	136.205.206.156
Jun 5, 2023 12:40:32.310292959 CEST	34782	23	192.168.2.23	27.22.125.191
Jun 5, 2023 12:40:32.310313940 CEST	34782	23	192.168.2.23	196.156.205.16
Jun 5, 2023 12:40:32.310327053 CEST	34782	23	192.168.2.23	62.223.34.151
Jun 5, 2023 12:40:32.310327053 CEST	34782	23	192.168.2.23	25.26.2.187
Jun 5, 2023 12:40:33.311433077 CEST	34782	23	192.168.2.23	81.30.132.228
Jun 5, 2023 12:40:33.311438084 CEST	34782	2323	192.168.2.23	32.34.179.71
Jun 5, 2023 12:40:33.311450005 CEST	34782	23	192.168.2.23	40.122.147.36
Jun 5, 2023 12:40:33.311450005 CEST	34782	23	192.168.2.23	103.252.141.178
Jun 5, 2023 12:40:33.311497927 CEST	34782	23	192.168.2.23	140.202.241.136
Jun 5, 2023 12:40:33.311513901 CEST	34782	23	192.168.2.23	147.114.149.220
Jun 5, 2023 12:40:33.311553001 CEST	34782	23	192.168.2.23	103.158.239.184
Jun 5, 2023 12:40:33.311567068 CEST	34782	23	192.168.2.23	107.43.12.21
Jun 5, 2023 12:40:33.311578035 CEST	34782	23	192.168.2.23	206.94.26.174
Jun 5, 2023 12:40:33.311578035 CEST	34782	23	192.168.2.23	99.26.17.109
Jun 5, 2023 12:40:34.312747002 CEST	34782	2323	192.168.2.23	95.179.207.108
Jun 5, 2023 12:40:34.312764883 CEST	34782	23	192.168.2.23	38.102.163.150
Jun 5, 2023 12:40:34.312768936 CEST	34782	23	192.168.2.23	170.125.213.251
Jun 5, 2023 12:40:34.312833071 CEST	34782	23	192.168.2.23	122.7.54.17
Jun 5, 2023 12:40:34.312838078 CEST	34782	23	192.168.2.23	47.102.89.32
Jun 5, 2023 12:40:34.312855959 CEST	34782	23	192.168.2.23	191.148.212.98
Jun 5, 2023 12:40:34.312866926 CEST	34782	23	192.168.2.23	73.122.65.114
Jun 5, 2023 12:40:34.312877893 CEST	34782	23	192.168.2.23	50.120.10.130
Jun 5, 2023 12:40:34.312906027 CEST	34782	23	192.168.2.23	72.153.245.23
Jun 5, 2023 12:40:34.312980890 CEST	34782	23	192.168.2.23	114.133.103.69
Jun 5, 2023 12:40:34.491477966 CEST	23	34782	38.102.163.150	192.168.2.23
Jun 5, 2023 12:40:35.314145088 CEST	34782	23	192.168.2.23	122.174.154.66
Jun 5, 2023 12:40:35.314157009 CEST	34782	23	192.168.2.23	124.90.100.249
Jun 5, 2023 12:40:35.314174891 CEST	34782	23	192.168.2.23	66.190.156.117
Jun 5, 2023 12:40:35.314174891 CEST	34782	23	192.168.2.23	9.60.72.144
Jun 5, 2023 12:40:35.314198017 CEST	34782	2323	192.168.2.23	128.90.220.127
Jun 5, 2023 12:40:35.314198971 CEST	34782	23	192.168.2.23	181.151.54.175
Jun 5, 2023 12:40:35.314218044 CEST	34782	23	192.168.2.23	69.250.126.184
Jun 5, 2023 12:40:35.314218044 CEST	34782	23	192.168.2.23	186.84.126.103
Jun 5, 2023 12:40:35.314241886 CEST	34782	23	192.168.2.23	199.223.141.249
Jun 5, 2023 12:40:35.314265013 CEST	34782	23	192.168.2.23	135.7.136.1
Jun 5, 2023 12:40:36.315387011 CEST	34782	2323	192.168.2.23	211.19.99.231
Jun 5, 2023 12:40:36.315387011 CEST	34782	23	192.168.2.23	142.5.159.139
Jun 5, 2023 12:40:36.315411091 CEST	34782	23	192.168.2.23	42.99.11.3
Jun 5, 2023 12:40:36.315411091 CEST	34782	23	192.168.2.23	91.127.204.119
Jun 5, 2023 12:40:36.315421104 CEST	34782	23	192.168.2.23	12.159.44.148
Jun 5, 2023 12:40:36.315424919 CEST	34782	23	192.168.2.23	87.225.242.221
Jun 5, 2023 12:40:36.315443039 CEST	34782	23	192.168.2.23	18.241.239.64
Jun 5, 2023 12:40:36.315468073 CEST	34782	23	192.168.2.23	118.134.34.207
Jun 5, 2023 12:40:36.315479040 CEST	34782	23	192.168.2.23	194.51.84.48
Jun 5, 2023 12:40:36.315495014 CEST	34782	23	192.168.2.23	82.77.130.22
Jun 5, 2023 12:40:37.316520929 CEST	34782	2323	192.168.2.23	79.115.45.120
Jun 5, 2023 12:40:37.316539049 CEST	34782	23	192.168.2.23	66.152.206.38
Jun 5, 2023 12:40:37.316539049 CEST	34782	23	192.168.2.23	39.47.15.38
Jun 5, 2023 12:40:37.316587925 CEST	34782	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:40:37.316622019 CEST	34782	23	192.168.2.23	19.177.213.15
Jun 5, 2023 12:40:37.316620111 CEST	34782	23	192.168.2.23	124.149.130.211
Jun 5, 2023 12:40:37.316622019 CEST	34782	23	192.168.2.23	195.26.156.199
Jun 5, 2023 12:40:37.316626072 CEST	34782	23	192.168.2.23	47.116.176.43
Jun 5, 2023 12:40:37.316631079 CEST	34782	23	192.168.2.23	110.34.8.67
Jun 5, 2023 12:40:37.316673040 CEST	34782	23	192.168.2.23	221.53.16.123
Jun 5, 2023 12:40:37.472635031 CEST	23	34782	128.110.77.117	192.168.2.23
Jun 5, 2023 12:40:37.472932100 CEST	34782	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:40:38.317831993 CEST	34782	2323	192.168.2.23	135.133.252.8
Jun 5, 2023 12:40:38.317894936 CEST	34782	23	192.168.2.23	130.183.214.112
Jun 5, 2023 12:40:38.317928076 CEST	34782	23	192.168.2.23	162.155.229.6
Jun 5, 2023 12:40:38.317936897 CEST	34782	23	192.168.2.23	134.172.234.223
Jun 5, 2023 12:40:38.317991018 CEST	34782	23	192.168.2.23	43.111.90.208
Jun 5, 2023 12:40:38.317991018 CEST	34782	23	192.168.2.23	204.19.61.107
Jun 5, 2023 12:40:38.318025112 CEST	34782	23	192.168.2.23	157.217.243.212
Jun 5, 2023 12:40:38.318032026 CEST	34782	23	192.168.2.23	121.79.44.126
Jun 5, 2023 12:40:38.318053007 CEST	34782	23	192.168.2.23	133.47.120.125
Jun 5, 2023 12:40:38.318097115 CEST	34782	23	192.168.2.23	150.91.165.248
Jun 5, 2023 12:40:38.318209887 CEST	37100	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:40:38.475812912 CEST	23	37100	128.110.77.117	192.168.2.23
Jun 5, 2023 12:40:38.476062059 CEST	37100	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:40:39.477204084 CEST	34782	2323	192.168.2.23	217.233.26.88
Jun 5, 2023 12:40:39.477230072 CEST	34782	23	192.168.2.23	152.56.100.36
Jun 5, 2023 12:40:39.477247953 CEST	34782	23	192.168.2.23	84.81.88.170
Jun 5, 2023 12:40:39.477288008 CEST	34782	23	192.168.2.23	23.137.196.191
Jun 5, 2023 12:40:39.477323055 CEST	34782	23	192.168.2.23	164.189.37.95
Jun 5, 2023 12:40:39.477323055 CEST	34782	23	192.168.2.23	150.196.253.153
Jun 5, 2023 12:40:39.477358103 CEST	34782	23	192.168.2.23	168.223.52.9
Jun 5, 2023 12:40:39.477374077 CEST	34782	23	192.168.2.23	69.78.40.91
Jun 5, 2023 12:40:39.477369070 CEST	34782	23	192.168.2.23	211.142.21.43
Jun 5, 2023 12:40:39.477370024 CEST	34782	23	192.168.2.23	44.145.11.149
Jun 5, 2023 12:40:40.478482962 CEST	34782	2323	192.168.2.23	83.149.26.9
Jun 5, 2023 12:40:40.478482962 CEST	34782	23	192.168.2.23	73.3.253.63
Jun 5, 2023 12:40:40.478490114 CEST	34782	23	192.168.2.23	176.204.122.173
Jun 5, 2023 12:40:40.478558064 CEST	34782	23	192.168.2.23	63.148.96.18
Jun 5, 2023 12:40:40.478564024 CEST	34782	23	192.168.2.23	197.196.27.75
Jun 5, 2023 12:40:40.478574991 CEST	34782	23	192.168.2.23	27.173.220.25
Jun 5, 2023 12:40:40.478585958 CEST	34782	23	192.168.2.23	14.60.181.162
Jun 5, 2023 12:40:40.478599072 CEST	34782	23	192.168.2.23	192.53.243.226
Jun 5, 2023 12:40:40.478631020 CEST	34782	23	192.168.2.23	164.177.234.73
Jun 5, 2023 12:40:40.478677988 CEST	34782	23	192.168.2.23	189.61.111.154
Jun 5, 2023 12:40:40.740228891 CEST	23	34782	14.60.181.162	192.168.2.23
Jun 5, 2023 12:40:41.479836941 CEST	34782	23	192.168.2.23	85.5.175.230
Jun 5, 2023 12:40:41.479836941 CEST	34782	23	192.168.2.23	63.29.205.97
Jun 5, 2023 12:40:41.479836941 CEST	34782	23	192.168.2.23	62.152.245.118
Jun 5, 2023 12:40:41.479836941 CEST	34782	23	192.168.2.23	36.125.173.41
Jun 5, 2023 12:40:41.479870081 CEST	34782	2323	192.168.2.23	166.216.35.32
Jun 5, 2023 12:40:41.479876041 CEST	34782	23	192.168.2.23	155.217.235.104
Jun 5, 2023 12:40:41.479876995 CEST	34782	23	192.168.2.23	149.148.13.198
Jun 5, 2023 12:40:41.479883909 CEST	34782	23	192.168.2.23	182.98.21.129
Jun 5, 2023 12:40:41.479933023 CEST	34782	23	192.168.2.23	167.90.82.157
Jun 5, 2023 12:40:41.479933023 CEST	34782	23	192.168.2.23	153.49.222.171
Jun 5, 2023 12:40:42.480942965 CEST	34782	2323	192.168.2.23	38.121.245.162
Jun 5, 2023 12:40:42.480969906 CEST	34782	23	192.168.2.23	111.159.153.188
Jun 5, 2023 12:40:42.480992079 CEST	34782	23	192.168.2.23	91.11.199.208
Jun 5, 2023 12:40:42.481044054 CEST	34782	23	192.168.2.23	203.73.107.114
Jun 5, 2023 12:40:42.481050014 CEST	34782	23	192.168.2.23	23.130.6.206
Jun 5, 2023 12:40:42.481074095 CEST	34782	23	192.168.2.23	152.137.234.229
Jun 5, 2023 12:40:42.481070995 CEST	34782	23	192.168.2.23	103.127.129.191
Jun 5, 2023 12:40:42.481076956 CEST	34782	23	192.168.2.23	128.76.202.164
Jun 5, 2023 12:40:42.481075048 CEST	34782	23	192.168.2.23	77.75.77.226
Jun 5, 2023 12:40:42.481137037 CEST	34782	23	192.168.2.23	17.204.64.230
Jun 5, 2023 12:40:43.482297897 CEST	34782	2323	192.168.2.23	195.230.102.182
Jun 5, 2023 12:40:43.482330084 CEST	34782	23	192.168.2.23	130.92.7.26
Jun 5, 2023 12:40:43.482357979 CEST	34782	23	192.168.2.23	165.202.66.70
Jun 5, 2023 12:40:43.482379913 CEST	34782	23	192.168.2.23	114.238.16.211
Jun 5, 2023 12:40:43.482403040 CEST	34782	23	192.168.2.23	165.15.33.34
Jun 5, 2023 12:40:43.482445002 CEST	34782	23	192.168.2.23	196.50.213.67
Jun 5, 2023 12:40:43.482450962 CEST	34782	23	192.168.2.23	196.176.100.207
Jun 5, 2023 12:40:43.482490063 CEST	34782	23	192.168.2.23	147.237.111.254
Jun 5, 2023 12:40:43.482490063 CEST	34782	23	192.168.2.23	190.220.248.77
Jun 5, 2023 12:40:43.482490063 CEST	34782	23	192.168.2.23	184.251.198.138
Jun 5, 2023 12:40:43.539906979 CEST	2323	34782	195.230.102.182	192.168.2.23
Jun 5, 2023 12:40:44.483567953 CEST	34782	23	192.168.2.23	71.130.157.54
Jun 5, 2023 12:40:44.483573914 CEST	34782	2323	192.168.2.23	123.164.75.175
Jun 5, 2023 12:40:44.483622074 CEST	34782	23	192.168.2.23	111.227.95.150
Jun 5, 2023 12:40:44.483637094 CEST	34782	23	192.168.2.23	135.242.176.63
Jun 5, 2023 12:40:44.483700037 CEST	34782	23	192.168.2.23	146.69.204.29
Jun 5, 2023 12:40:44.483700037 CEST	34782	23	192.168.2.23	114.90.1.105
Jun 5, 2023 12:40:44.483702898 CEST	34782	23	192.168.2.23	140.98.160.110
Jun 5, 2023 12:40:44.483730078 CEST	34782	23	192.168.2.23	124.106.114.211
Jun 5, 2023 12:40:44.483745098 CEST	34782	23	192.168.2.23	173.195.51.16
Jun 5, 2023 12:40:44.483797073 CEST	34782	23	192.168.2.23	196.150.52.80
Jun 5, 2023 12:40:45.484915972 CEST	34782	2323	192.168.2.23	53.184.185.117
Jun 5, 2023 12:40:45.484926939 CEST	34782	23	192.168.2.23	211.96.231.49
Jun 5, 2023 12:40:45.484915972 CEST	34782	23	192.168.2.23	69.62.79.76
Jun 5, 2023 12:40:45.484926939 CEST	34782	23	192.168.2.23	162.200.218.56
Jun 5, 2023 12:40:45.484940052 CEST	34782	23	192.168.2.23	50.15.35.178
Jun 5, 2023 12:40:45.484941959 CEST	34782	23	192.168.2.23	165.22.127.247
Jun 5, 2023 12:40:45.484949112 CEST	34782	23	192.168.2.23	45.152.121.203
Jun 5, 2023 12:40:45.485017061 CEST	34782	23	192.168.2.23	8.31.226.46
Jun 5, 2023 12:40:45.485018969 CEST	34782	23	192.168.2.23	223.115.85.63
Jun 5, 2023 12:40:45.485028028 CEST	34782	23	192.168.2.23	20.28.196.132
Jun 5, 2023 12:40:46.486110926 CEST	34782	23	192.168.2.23	157.179.140.68
Jun 5, 2023 12:40:46.486118078 CEST	34782	2323	192.168.2.23	120.225.126.104
Jun 5, 2023 12:40:46.486119986 CEST	34782	23	192.168.2.23	166.217.156.115
Jun 5, 2023 12:40:46.486136913 CEST	34782	23	192.168.2.23	182.211.67.42
Jun 5, 2023 12:40:46.486180067 CEST	34782	23	192.168.2.23	164.203.220.28
Jun 5, 2023 12:40:46.486198902 CEST	34782	23	192.168.2.23	175.171.183.83
Jun 5, 2023 12:40:46.486207008 CEST	34782	23	192.168.2.23	179.84.15.141
Jun 5, 2023 12:40:46.486207008 CEST	34782	23	192.168.2.23	82.87.81.211
Jun 5, 2023 12:40:46.486212969 CEST	34782	23	192.168.2.23	148.186.72.22
Jun 5, 2023 12:40:46.486249924 CEST	34782	23	192.168.2.23	45.157.32.169
Jun 5, 2023 12:40:46.631277084 CEST	23	34782	166.217.156.115	192.168.2.23
Jun 5, 2023 12:40:47.487303972 CEST	34782	2323	192.168.2.23	65.98.113.97
Jun 5, 2023 12:40:47.487318993 CEST	34782	23	192.168.2.23	98.84.200.65
Jun 5, 2023 12:40:47.487325907 CEST	34782	23	192.168.2.23	162.73.42.64
Jun 5, 2023 12:40:47.487344980 CEST	34782	23	192.168.2.23	158.208.204.111
Jun 5, 2023 12:40:47.487385988 CEST	34782	23	192.168.2.23	24.131.0.250
Jun 5, 2023 12:40:47.487392902 CEST	34782	23	192.168.2.23	219.162.216.40
Jun 5, 2023 12:40:47.487369061 CEST	34782	23	192.168.2.23	138.214.78.248
Jun 5, 2023 12:40:47.487369061 CEST	34782	23	192.168.2.23	60.176.216.166
Jun 5, 2023 12:40:47.487426043 CEST	34782	23	192.168.2.23	197.99.112.228
Jun 5, 2023 12:40:47.487488031 CEST	34782	23	192.168.2.23	148.5.47.227
Jun 5, 2023 12:40:48.488518953 CEST	34782	2323	192.168.2.23	221.68.11.5
Jun 5, 2023 12:40:48.488553047 CEST	34782	23	192.168.2.23	218.31.68.126
Jun 5, 2023 12:40:48.488583088 CEST	34782	23	192.168.2.23	44.229.235.152
Jun 5, 2023 12:40:48.488583088 CEST	34782	23	192.168.2.23	95.19.179.163
Jun 5, 2023 12:40:48.488594055 CEST	34782	23	192.168.2.23	152.245.130.182
Jun 5, 2023 12:40:48.488595009 CEST	34782	23	192.168.2.23	84.163.59.177
Jun 5, 2023 12:40:48.488609076 CEST	34782	23	192.168.2.23	218.37.198.104
Jun 5, 2023 12:40:48.488610029 CEST	34782	23	192.168.2.23	129.152.82.172
Jun 5, 2023 12:40:48.488610029 CEST	34782	23	192.168.2.23	48.165.161.135
Jun 5, 2023 12:40:48.488610029 CEST	34782	23	192.168.2.23	92.17.49.207
Jun 5, 2023 12:40:49.489618063 CEST	34782	2323	192.168.2.23	34.74.220.240
Jun 5, 2023 12:40:49.489664078 CEST	34782	23	192.168.2.23	147.117.36.91
Jun 5, 2023 12:40:49.489666939 CEST	34782	23	192.168.2.23	18.97.10.58
Jun 5, 2023 12:40:49.489733934 CEST	34782	23	192.168.2.23	202.235.196.183
Jun 5, 2023 12:40:49.489741087 CEST	34782	23	192.168.2.23	148.43.111.251
Jun 5, 2023 12:40:49.489742041 CEST	34782	23	192.168.2.23	75.41.203.3
Jun 5, 2023 12:40:49.489752054 CEST	34782	23	192.168.2.23	176.88.251.10
Jun 5, 2023 12:40:49.489756107 CEST	34782	23	192.168.2.23	170.84.96.206
Jun 5, 2023 12:40:49.489758968 CEST	34782	23	192.168.2.23	180.83.6.228
Jun 5, 2023 12:40:49.489758968 CEST	34782	23	192.168.2.23	68.229.91.23
Jun 5, 2023 12:40:50.490770102 CEST	34782	23	192.168.2.23	51.212.210.141
Jun 5, 2023 12:40:50.490770102 CEST	34782	23	192.168.2.23	96.187.60.246
Jun 5, 2023 12:40:50.490770102 CEST	34782	23	192.168.2.23	120.248.10.40
Jun 5, 2023 12:40:50.490772963 CEST	34782	23	192.168.2.23	218.69.161.153
Jun 5, 2023 12:40:50.490772963 CEST	34782	23	192.168.2.23	203.33.96.202
Jun 5, 2023 12:40:50.490783930 CEST	34782	2323	192.168.2.23	136.77.113.254
Jun 5, 2023 12:40:50.490818977 CEST	34782	23	192.168.2.23	211.131.207.27
Jun 5, 2023 12:40:50.490819931 CEST	34782	23	192.168.2.23	204.176.221.26
Jun 5, 2023 12:40:50.490833998 CEST	34782	23	192.168.2.23	17.49.163.203
Jun 5, 2023 12:40:50.490863085 CEST	34782	23	192.168.2.23	102.227.56.105
Jun 5, 2023 12:40:51.233299971 CEST	43928	443	192.168.2.23	91.189.91.42
Jun 5, 2023 12:40:51.492001057 CEST	34782	23	192.168.2.23	98.43.16.144
Jun 5, 2023 12:40:51.492001057 CEST	34782	2323	192.168.2.23	36.236.96.191
Jun 5, 2023 12:40:51.492003918 CEST	34782	23	192.168.2.23	39.231.25.226
Jun 5, 2023 12:40:51.492014885 CEST	34782	23	192.168.2.23	167.67.48.85
Jun 5, 2023 12:40:51.492059946 CEST	34782	23	192.168.2.23	121.50.151.171
Jun 5, 2023 12:40:51.492070913 CEST	34782	23	192.168.2.23	68.205.48.87
Jun 5, 2023 12:40:51.492077112 CEST	34782	23	192.168.2.23	122.225.76.82
Jun 5, 2023 12:40:51.492078066 CEST	34782	23	192.168.2.23	58.232.105.149
Jun 5, 2023 12:40:51.492088079 CEST	34782	23	192.168.2.23	41.248.97.49
Jun 5, 2023 12:40:51.492141008 CEST	34782	23	192.168.2.23	138.57.207.239
Jun 5, 2023 12:40:51.794397116 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:40:51.794646025 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:40:52.493201971 CEST	34782	2323	192.168.2.23	117.128.212.137
Jun 5, 2023 12:40:52.493204117 CEST	34782	23	192.168.2.23	27.185.57.255
Jun 5, 2023 12:40:52.493211031 CEST	34782	23	192.168.2.23	140.143.13.226
Jun 5, 2023 12:40:52.493211031 CEST	34782	23	192.168.2.23	130.81.176.123
Jun 5, 2023 12:40:52.493213892 CEST	34782	23	192.168.2.23	197.7.175.139
Jun 5, 2023 12:40:52.493213892 CEST	34782	23	192.168.2.23	59.102.72.223
Jun 5, 2023 12:40:52.493216991 CEST	34782	23	192.168.2.23	67.171.80.89
Jun 5, 2023 12:40:52.493227959 CEST	34782	23	192.168.2.23	9.184.110.44
Jun 5, 2023 12:40:52.493227959 CEST	34782	23	192.168.2.23	197.34.253.90
Jun 5, 2023 12:40:52.493227959 CEST	34782	23	192.168.2.23	145.200.182.179
Jun 5, 2023 12:40:53.494283915 CEST	34782	2323	192.168.2.23	191.98.119.126
Jun 5, 2023 12:40:53.494307995 CEST	34782	23	192.168.2.23	147.186.6.22
Jun 5, 2023 12:40:53.494371891 CEST	34782	23	192.168.2.23	25.77.165.143
Jun 5, 2023 12:40:53.494379997 CEST	34782	23	192.168.2.23	9.94.178.122
Jun 5, 2023 12:40:53.494385958 CEST	34782	23	192.168.2.23	34.6.139.8
Jun 5, 2023 12:40:53.494385958 CEST	34782	23	192.168.2.23	154.151.96.94
Jun 5, 2023 12:40:53.494389057 CEST	34782	23	192.168.2.23	18.51.22.21
Jun 5, 2023 12:40:53.494389057 CEST	34782	23	192.168.2.23	89.217.27.223
Jun 5, 2023 12:40:53.494396925 CEST	34782	23	192.168.2.23	115.153.22.170
Jun 5, 2023 12:40:53.494396925 CEST	34782	23	192.168.2.23	99.64.168.67
Jun 5, 2023 12:40:54.014980078 CEST	23	34782	197.7.175.139	192.168.2.23
Jun 5, 2023 12:40:54.495456934 CEST	34782	2323	192.168.2.23	70.240.48.228
Jun 5, 2023 12:40:54.495481968 CEST	34782	23	192.168.2.23	178.143.0.3
Jun 5, 2023 12:40:54.495482922 CEST	34782	23	192.168.2.23	146.134.202.164
Jun 5, 2023 12:40:54.495486975 CEST	34782	23	192.168.2.23	2.126.58.6
Jun 5, 2023 12:40:54.495487928 CEST	34782	23	192.168.2.23	79.22.153.135
Jun 5, 2023 12:40:54.495517015 CEST	34782	23	192.168.2.23	18.11.157.128
Jun 5, 2023 12:40:54.495517015 CEST	34782	23	192.168.2.23	137.84.64.214
Jun 5, 2023 12:40:54.495512962 CEST	34782	23	192.168.2.23	53.138.85.104
Jun 5, 2023 12:40:54.495512962 CEST	34782	23	192.168.2.23	119.38.73.84
Jun 5, 2023 12:40:54.495512962 CEST	34782	23	192.168.2.23	117.119.236.75
Jun 5, 2023 12:40:55.496680021 CEST	34782	2323	192.168.2.23	175.143.54.81
Jun 5, 2023 12:40:55.496700048 CEST	34782	23	192.168.2.23	48.85.182.13
Jun 5, 2023 12:40:55.496768951 CEST	34782	23	192.168.2.23	165.212.159.134
Jun 5, 2023 12:40:55.496783018 CEST	34782	23	192.168.2.23	188.152.134.43
Jun 5, 2023 12:40:55.496782064 CEST	34782	23	192.168.2.23	85.30.10.254
Jun 5, 2023 12:40:55.496836901 CEST	34782	23	192.168.2.23	88.162.49.166
Jun 5, 2023 12:40:55.496850967 CEST	34782	23	192.168.2.23	204.223.15.200
Jun 5, 2023 12:40:55.496850014 CEST	34782	23	192.168.2.23	44.6.121.35
Jun 5, 2023 12:40:55.496850014 CEST	34782	23	192.168.2.23	97.140.197.249
Jun 5, 2023 12:40:55.496860981 CEST	34782	23	192.168.2.23	152.34.113.88
Jun 5, 2023 12:40:56.498097897 CEST	34782	2323	192.168.2.23	142.230.82.17
Jun 5, 2023 12:40:56.498111010 CEST	34782	23	192.168.2.23	191.6.90.44
Jun 5, 2023 12:40:56.498111010 CEST	34782	23	192.168.2.23	142.173.84.96
Jun 5, 2023 12:40:56.498155117 CEST	34782	23	192.168.2.23	38.27.136.243
Jun 5, 2023 12:40:56.498168945 CEST	34782	23	192.168.2.23	84.85.163.132
Jun 5, 2023 12:40:56.498217106 CEST	34782	23	192.168.2.23	112.195.148.63
Jun 5, 2023 12:40:56.498218060 CEST	34782	23	192.168.2.23	46.65.173.191
Jun 5, 2023 12:40:56.498218060 CEST	34782	23	192.168.2.23	43.249.85.146
Jun 5, 2023 12:40:56.498231888 CEST	34782	23	192.168.2.23	69.62.213.161
Jun 5, 2023 12:40:56.498294115 CEST	34782	23	192.168.2.23	46.30.218.77
Jun 5, 2023 12:40:57.499402046 CEST	34782	23	192.168.2.23	81.156.252.108
Jun 5, 2023 12:40:57.499406099 CEST	34782	2323	192.168.2.23	197.170.189.205
Jun 5, 2023 12:40:57.499437094 CEST	34782	23	192.168.2.23	170.215.237.29
Jun 5, 2023 12:40:57.499456882 CEST	34782	23	192.168.2.23	42.189.175.50
Jun 5, 2023 12:40:57.499510050 CEST	34782	23	192.168.2.23	163.118.104.73
Jun 5, 2023 12:40:57.499510050 CEST	34782	23	192.168.2.23	69.11.46.113
Jun 5, 2023 12:40:57.499526978 CEST	34782	23	192.168.2.23	50.87.227.28
Jun 5, 2023 12:40:57.499546051 CEST	34782	23	192.168.2.23	32.162.60.175
Jun 5, 2023 12:40:57.499557972 CEST	34782	23	192.168.2.23	71.23.159.88
Jun 5, 2023 12:40:57.499600887 CEST	34782	23	192.168.2.23	201.246.125.72
Jun 5, 2023 12:40:57.678157091 CEST	23	34782	50.87.227.28	192.168.2.23
Jun 5, 2023 12:40:58.500787020 CEST	34782	2323	192.168.2.23	58.98.97.64
Jun 5, 2023 12:40:58.500858068 CEST	34782	23	192.168.2.23	92.230.14.54
Jun 5, 2023 12:40:58.500860929 CEST	34782	23	192.168.2.23	134.186.95.59
Jun 5, 2023 12:40:58.500916004 CEST	34782	23	192.168.2.23	62.15.23.210
Jun 5, 2023 12:40:58.500925064 CEST	34782	23	192.168.2.23	125.64.32.41
Jun 5, 2023 12:40:58.500941992 CEST	34782	23	192.168.2.23	112.204.89.168
Jun 5, 2023 12:40:58.500952005 CEST	34782	23	192.168.2.23	210.71.210.205
Jun 5, 2023 12:40:58.501019955 CEST	34782	23	192.168.2.23	169.219.67.162
Jun 5, 2023 12:40:58.501019955 CEST	34782	23	192.168.2.23	99.158.204.164
Jun 5, 2023 12:40:58.501055002 CEST	34782	23	192.168.2.23	199.204.248.194
Jun 5, 2023 12:40:59.502142906 CEST	34782	2323	192.168.2.23	12.40.174.4
Jun 5, 2023 12:40:59.502181053 CEST	34782	23	192.168.2.23	19.156.101.224
Jun 5, 2023 12:40:59.502181053 CEST	34782	23	192.168.2.23	208.6.126.82
Jun 5, 2023 12:40:59.502213001 CEST	34782	23	192.168.2.23	54.156.139.122
Jun 5, 2023 12:40:59.502230883 CEST	34782	23	192.168.2.23	121.188.175.234
Jun 5, 2023 12:40:59.502262115 CEST	34782	23	192.168.2.23	17.50.29.95
Jun 5, 2023 12:40:59.502266884 CEST	34782	23	192.168.2.23	165.249.12.26
Jun 5, 2023 12:40:59.502315998 CEST	34782	23	192.168.2.23	45.188.145.84
Jun 5, 2023 12:40:59.502341986 CEST	34782	23	192.168.2.23	168.131.158.127
Jun 5, 2023 12:40:59.502352953 CEST	34782	23	192.168.2.23	89.42.149.16
Jun 5, 2023 12:41:00.503482103 CEST	34782	23	192.168.2.23	204.57.151.86
Jun 5, 2023 12:41:00.503514051 CEST	34782	2323	192.168.2.23	122.64.81.226
Jun 5, 2023 12:41:00.503514051 CEST	34782	23	192.168.2.23	121.228.36.24
Jun 5, 2023 12:41:00.503514051 CEST	34782	23	192.168.2.23	81.122.114.198
Jun 5, 2023 12:41:00.503545046 CEST	34782	23	192.168.2.23	133.244.79.94
Jun 5, 2023 12:41:00.503551960 CEST	34782	23	192.168.2.23	177.173.57.43
Jun 5, 2023 12:41:00.503551960 CEST	34782	23	192.168.2.23	17.238.127.232
Jun 5, 2023 12:41:00.503560066 CEST	34782	23	192.168.2.23	181.23.155.213
Jun 5, 2023 12:41:00.503560066 CEST	34782	23	192.168.2.23	104.151.205.91
Jun 5, 2023 12:41:00.503612995 CEST	34782	23	192.168.2.23	192.155.85.1
Jun 5, 2023 12:41:01.504626036 CEST	34782	23	192.168.2.23	141.119.158.248
Jun 5, 2023 12:41:01.504623890 CEST	34782	2323	192.168.2.23	112.224.150.151
Jun 5, 2023 12:41:01.504693031 CEST	34782	23	192.168.2.23	88.184.140.42
Jun 5, 2023 12:41:01.504795074 CEST	34782	23	192.168.2.23	117.53.104.231
Jun 5, 2023 12:41:01.504801989 CEST	34782	23	192.168.2.23	43.59.65.4
Jun 5, 2023 12:41:01.504812002 CEST	34782	23	192.168.2.23	178.249.80.195
Jun 5, 2023 12:41:01.504831076 CEST	34782	23	192.168.2.23	73.121.200.165
Jun 5, 2023 12:41:01.504836082 CEST	34782	23	192.168.2.23	190.57.42.44
Jun 5, 2023 12:41:01.504836082 CEST	34782	23	192.168.2.23	40.54.150.227
Jun 5, 2023 12:41:01.504836082 CEST	34782	23	192.168.2.23	199.211.11.79
Jun 5, 2023 12:41:02.505935907 CEST	34782	2323	192.168.2.23	75.209.215.252
Jun 5, 2023 12:41:02.505943060 CEST	34782	23	192.168.2.23	160.211.140.5
Jun 5, 2023 12:41:02.505943060 CEST	34782	23	192.168.2.23	209.12.229.91
Jun 5, 2023 12:41:02.505944967 CEST	34782	23	192.168.2.23	81.208.208.2
Jun 5, 2023 12:41:02.505958080 CEST	34782	23	192.168.2.23	37.136.88.193
Jun 5, 2023 12:41:02.506021976 CEST	34782	23	192.168.2.23	94.81.15.250
Jun 5, 2023 12:41:02.506026983 CEST	34782	23	192.168.2.23	130.103.210.215
Jun 5, 2023 12:41:02.506042004 CEST	34782	23	192.168.2.23	172.208.203.65
Jun 5, 2023 12:41:02.506099939 CEST	34782	23	192.168.2.23	60.49.51.229
Jun 5, 2023 12:41:02.506100893 CEST	34782	23	192.168.2.23	116.194.108.159
Jun 5, 2023 12:41:03.507246971 CEST	34782	2323	192.168.2.23	135.234.40.140
Jun 5, 2023 12:41:03.507282019 CEST	34782	23	192.168.2.23	97.192.166.206
Jun 5, 2023 12:41:03.507318974 CEST	34782	23	192.168.2.23	62.74.6.177
Jun 5, 2023 12:41:03.507349014 CEST	34782	23	192.168.2.23	44.226.141.197
Jun 5, 2023 12:41:03.507359982 CEST	34782	23	192.168.2.23	194.65.55.141
Jun 5, 2023 12:41:03.507360935 CEST	34782	23	192.168.2.23	47.6.55.219
Jun 5, 2023 12:41:03.507364035 CEST	34782	23	192.168.2.23	43.156.196.54
Jun 5, 2023 12:41:03.507369041 CEST	34782	23	192.168.2.23	205.51.237.169
Jun 5, 2023 12:41:03.507402897 CEST	34782	23	192.168.2.23	38.96.61.30
Jun 5, 2023 12:41:03.507409096 CEST	34782	23	192.168.2.23	8.13.231.4
Jun 5, 2023 12:41:04.508712053 CEST	34782	2323	192.168.2.23	199.8.0.90
Jun 5, 2023 12:41:04.508732080 CEST	34782	23	192.168.2.23	64.216.9.251
Jun 5, 2023 12:41:04.508760929 CEST	34782	23	192.168.2.23	144.144.247.31
Jun 5, 2023 12:41:04.508769035 CEST	34782	23	192.168.2.23	205.140.231.118
Jun 5, 2023 12:41:04.508773088 CEST	34782	23	192.168.2.23	57.196.188.198
Jun 5, 2023 12:41:04.508773088 CEST	34782	23	192.168.2.23	8.153.133.230
Jun 5, 2023 12:41:04.508773088 CEST	34782	23	192.168.2.23	94.248.184.47
Jun 5, 2023 12:41:04.508817911 CEST	34782	23	192.168.2.23	112.15.30.166
Jun 5, 2023 12:41:04.508856058 CEST	34782	23	192.168.2.23	105.14.59.4
Jun 5, 2023 12:41:04.508860111 CEST	34782	23	192.168.2.23	146.171.130.26
Jun 5, 2023 12:41:05.509999037 CEST	34782	23	192.168.2.23	112.240.88.95
Jun 5, 2023 12:41:05.509999990 CEST	34782	2323	192.168.2.23	65.150.226.11
Jun 5, 2023 12:41:05.510015965 CEST	34782	23	192.168.2.23	66.94.190.35
Jun 5, 2023 12:41:05.510035992 CEST	34782	23	192.168.2.23	48.156.96.148
Jun 5, 2023 12:41:05.510082006 CEST	34782	23	192.168.2.23	170.232.140.234
Jun 5, 2023 12:41:05.510086060 CEST	34782	23	192.168.2.23	205.31.105.165
Jun 5, 2023 12:41:05.510106087 CEST	34782	23	192.168.2.23	5.167.54.61
Jun 5, 2023 12:41:05.510117054 CEST	34782	23	192.168.2.23	48.247.231.33
Jun 5, 2023 12:41:05.510149956 CEST	34782	23	192.168.2.23	97.8.53.143
Jun 5, 2023 12:41:05.510159016 CEST	34782	23	192.168.2.23	96.14.188.181
Jun 5, 2023 12:41:05.649296999 CEST	23	34782	66.94.190.35	192.168.2.23
Jun 5, 2023 12:41:06.511332035 CEST	34782	2323	192.168.2.23	17.241.141.9
Jun 5, 2023 12:41:06.511363029 CEST	34782	23	192.168.2.23	145.165.51.22
Jun 5, 2023 12:41:06.511373997 CEST	34782	23	192.168.2.23	200.211.83.186
Jun 5, 2023 12:41:06.511388063 CEST	34782	23	192.168.2.23	218.17.2.57
Jun 5, 2023 12:41:06.511440039 CEST	34782	23	192.168.2.23	139.168.90.94
Jun 5, 2023 12:41:06.511442900 CEST	34782	23	192.168.2.23	34.222.46.244
Jun 5, 2023 12:41:06.511444092 CEST	34782	23	192.168.2.23	161.145.38.3
Jun 5, 2023 12:41:06.511442900 CEST	34782	23	192.168.2.23	36.136.52.243
Jun 5, 2023 12:41:06.511445999 CEST	34782	23	192.168.2.23	63.243.31.71
Jun 5, 2023 12:41:06.511523008 CEST	34782	23	192.168.2.23	146.90.52.98
Jun 5, 2023 12:41:07.512639999 CEST	34782	2323	192.168.2.23	90.193.43.180
Jun 5, 2023 12:41:07.512733936 CEST	34782	23	192.168.2.23	147.179.159.31
Jun 5, 2023 12:41:07.512733936 CEST	34782	23	192.168.2.23	145.166.34.162
Jun 5, 2023 12:41:07.512739897 CEST	34782	23	192.168.2.23	78.18.220.15
Jun 5, 2023 12:41:07.512757063 CEST	34782	23	192.168.2.23	62.218.235.203
Jun 5, 2023 12:41:07.512655020 CEST	34782	23	192.168.2.23	48.76.212.117
Jun 5, 2023 12:41:07.512782097 CEST	34782	23	192.168.2.23	122.5.203.68
Jun 5, 2023 12:41:07.512797117 CEST	34782	23	192.168.2.23	108.94.73.32
Jun 5, 2023 12:41:07.512797117 CEST	34782	23	192.168.2.23	42.227.12.71
Jun 5, 2023 12:41:07.512852907 CEST	34782	23	192.168.2.23	208.197.208.137
Jun 5, 2023 12:41:08.513830900 CEST	34782	23	192.168.2.23	5.112.34.235
Jun 5, 2023 12:41:08.513845921 CEST	34782	2323	192.168.2.23	193.222.200.249
Jun 5, 2023 12:41:08.513871908 CEST	34782	23	192.168.2.23	110.116.169.77
Jun 5, 2023 12:41:08.513916016 CEST	34782	23	192.168.2.23	98.192.86.63
Jun 5, 2023 12:41:08.513916016 CEST	34782	23	192.168.2.23	201.104.104.65
Jun 5, 2023 12:41:08.513916969 CEST	34782	23	192.168.2.23	169.139.247.213
Jun 5, 2023 12:41:08.513916969 CEST	34782	23	192.168.2.23	77.148.145.105
Jun 5, 2023 12:41:08.513937950 CEST	34782	23	192.168.2.23	88.204.11.217
Jun 5, 2023 12:41:08.513937950 CEST	34782	23	192.168.2.23	35.100.177.152
Jun 5, 2023 12:41:08.514003992 CEST	34782	23	192.168.2.23	87.54.211.108
Jun 5, 2023 12:41:09.515017033 CEST	34782	2323	192.168.2.23	158.56.104.19
Jun 5, 2023 12:41:09.515022039 CEST	34782	23	192.168.2.23	105.176.60.126
Jun 5, 2023 12:41:09.515079975 CEST	34782	23	192.168.2.23	19.129.117.122
Jun 5, 2023 12:41:09.515110016 CEST	34782	23	192.168.2.23	218.5.66.219
Jun 5, 2023 12:41:09.515110016 CEST	34782	23	192.168.2.23	197.130.125.13
Jun 5, 2023 12:41:09.515129089 CEST	34782	23	192.168.2.23	13.224.48.24
Jun 5, 2023 12:41:09.515125036 CEST	34782	23	192.168.2.23	31.114.2.98
Jun 5, 2023 12:41:09.515130043 CEST	34782	23	192.168.2.23	200.165.23.115
Jun 5, 2023 12:41:09.515132904 CEST	34782	23	192.168.2.23	90.40.207.128
Jun 5, 2023 12:41:09.515194893 CEST	34782	23	192.168.2.23	190.17.15.75
Jun 5, 2023 12:41:10.016427040 CEST	37100	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:41:10.516443968 CEST	34782	2323	192.168.2.23	157.210.235.6
Jun 5, 2023 12:41:10.516444921 CEST	34782	23	192.168.2.23	115.55.232.76
Jun 5, 2023 12:41:10.516444921 CEST	34782	23	192.168.2.23	146.108.237.28
Jun 5, 2023 12:41:10.516460896 CEST	34782	23	192.168.2.23	140.37.38.230
Jun 5, 2023 12:41:10.516460896 CEST	34782	23	192.168.2.23	137.74.152.163
Jun 5, 2023 12:41:10.516465902 CEST	34782	23	192.168.2.23	213.186.116.137
Jun 5, 2023 12:41:10.516473055 CEST	34782	23	192.168.2.23	35.57.119.42
Jun 5, 2023 12:41:10.516473055 CEST	34782	23	192.168.2.23	183.192.162.149
Jun 5, 2023 12:41:10.516525984 CEST	34782	23	192.168.2.23	23.64.47.52
Jun 5, 2023 12:41:10.516525984 CEST	34782	23	192.168.2.23	76.35.173.125
Jun 5, 2023 12:41:10.976335049 CEST	37100	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:41:11.517647028 CEST	34782	2323	192.168.2.23	142.220.73.124
Jun 5, 2023 12:41:11.517652988 CEST	34782	23	192.168.2.23	57.173.79.190
Jun 5, 2023 12:41:11.517652988 CEST	34782	23	192.168.2.23	40.74.207.27
Jun 5, 2023 12:41:11.517724037 CEST	34782	23	192.168.2.23	42.237.161.91
Jun 5, 2023 12:41:11.517724037 CEST	34782	23	192.168.2.23	23.3.212.145
Jun 5, 2023 12:41:11.517740965 CEST	34782	23	192.168.2.23	17.131.90.120
Jun 5, 2023 12:41:11.517750978 CEST	34782	23	192.168.2.23	173.203.44.254
Jun 5, 2023 12:41:11.517750978 CEST	34782	23	192.168.2.23	170.154.140.136
Jun 5, 2023 12:41:11.517832041 CEST	34782	23	192.168.2.23	198.127.10.86
Jun 5, 2023 12:41:11.517832041 CEST	34782	23	192.168.2.23	219.178.75.125
Jun 5, 2023 12:41:11.799442053 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:41:11.799607038 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:41:12.518955946 CEST	34782	2323	192.168.2.23	68.87.40.66
Jun 5, 2023 12:41:12.518985033 CEST	34782	23	192.168.2.23	191.186.154.71
Jun 5, 2023 12:41:12.518985033 CEST	34782	23	192.168.2.23	142.157.194.158
Jun 5, 2023 12:41:12.519005060 CEST	34782	23	192.168.2.23	103.81.60.208
Jun 5, 2023 12:41:12.519016981 CEST	34782	23	192.168.2.23	177.39.224.58
Jun 5, 2023 12:41:12.519021034 CEST	34782	23	192.168.2.23	61.197.53.138
Jun 5, 2023 12:41:12.519025087 CEST	34782	23	192.168.2.23	98.157.215.2
Jun 5, 2023 12:41:12.519026995 CEST	34782	23	192.168.2.23	85.108.99.123
Jun 5, 2023 12:41:12.519026041 CEST	34782	23	192.168.2.23	140.146.176.110
Jun 5, 2023 12:41:12.519072056 CEST	34782	23	192.168.2.23	76.133.227.228
Jun 5, 2023 12:41:12.896239996 CEST	37100	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:41:13.520118952 CEST	34782	23	192.168.2.23	142.151.31.18
Jun 5, 2023 12:41:13.520123005 CEST	34782	2323	192.168.2.23	78.217.171.75
Jun 5, 2023 12:41:13.520149946 CEST	34782	23	192.168.2.23	108.88.250.26
Jun 5, 2023 12:41:13.520150900 CEST	34782	23	192.168.2.23	115.191.86.160
Jun 5, 2023 12:41:13.520149946 CEST	34782	23	192.168.2.23	94.119.228.252
Jun 5, 2023 12:41:13.520158052 CEST	34782	23	192.168.2.23	110.61.239.188
Jun 5, 2023 12:41:13.520159006 CEST	34782	23	192.168.2.23	171.39.220.240
Jun 5, 2023 12:41:13.520159006 CEST	34782	23	192.168.2.23	205.13.132.188
Jun 5, 2023 12:41:13.520190001 CEST	34782	23	192.168.2.23	71.255.125.169
Jun 5, 2023 12:41:13.520190001 CEST	34782	23	192.168.2.23	168.114.73.120
Jun 5, 2023 12:41:14.521291971 CEST	34782	23	192.168.2.23	187.12.47.158
Jun 5, 2023 12:41:14.521291971 CEST	34782	23	192.168.2.23	64.93.228.55
Jun 5, 2023 12:41:14.521292925 CEST	34782	23	192.168.2.23	74.17.69.238
Jun 5, 2023 12:41:14.521313906 CEST	34782	23	192.168.2.23	199.220.11.162
Jun 5, 2023 12:41:14.521342039 CEST	34782	23	192.168.2.23	218.152.195.46
Jun 5, 2023 12:41:14.521341085 CEST	34782	23	192.168.2.23	79.245.253.20
Jun 5, 2023 12:41:14.521354914 CEST	34782	2323	192.168.2.23	187.57.53.109
Jun 5, 2023 12:41:14.521354914 CEST	34782	23	192.168.2.23	134.223.217.102
Jun 5, 2023 12:41:14.521383047 CEST	34782	23	192.168.2.23	106.192.32.125
Jun 5, 2023 12:41:14.521420002 CEST	34782	23	192.168.2.23	118.241.241.186
Jun 5, 2023 12:41:15.522667885 CEST	34782	2323	192.168.2.23	109.188.132.239
Jun 5, 2023 12:41:15.522671938 CEST	34782	23	192.168.2.23	50.171.92.221
Jun 5, 2023 12:41:15.522667885 CEST	34782	23	192.168.2.23	69.150.115.54
Jun 5, 2023 12:41:15.522667885 CEST	34782	23	192.168.2.23	189.197.21.172
Jun 5, 2023 12:41:15.522711992 CEST	34782	23	192.168.2.23	76.206.69.129
Jun 5, 2023 12:41:15.522736073 CEST	34782	23	192.168.2.23	9.18.128.171
Jun 5, 2023 12:41:15.522736073 CEST	34782	23	192.168.2.23	45.64.81.50
Jun 5, 2023 12:41:15.522802114 CEST	34782	23	192.168.2.23	159.164.158.253
Jun 5, 2023 12:41:15.522802114 CEST	34782	23	192.168.2.23	174.152.43.56
Jun 5, 2023 12:41:15.523021936 CEST	34782	23	192.168.2.23	12.218.55.122
Jun 5, 2023 12:41:16.524012089 CEST	34782	23	192.168.2.23	110.134.255.76
Jun 5, 2023 12:41:16.524019957 CEST	34782	2323	192.168.2.23	71.54.156.204
Jun 5, 2023 12:41:16.524019957 CEST	34782	23	192.168.2.23	20.201.85.26
Jun 5, 2023 12:41:16.524079084 CEST	34782	23	192.168.2.23	157.235.183.145
Jun 5, 2023 12:41:16.524096012 CEST	34782	23	192.168.2.23	19.56.84.41
Jun 5, 2023 12:41:16.524100065 CEST	34782	23	192.168.2.23	74.92.146.214
Jun 5, 2023 12:41:16.524112940 CEST	34782	23	192.168.2.23	143.19.106.179
Jun 5, 2023 12:41:16.524136066 CEST	34782	23	192.168.2.23	8.179.196.62
Jun 5, 2023 12:41:16.524159908 CEST	34782	23	192.168.2.23	14.98.125.208
Jun 5, 2023 12:41:16.524161100 CEST	34782	23	192.168.2.23	109.165.150.182
Jun 5, 2023 12:41:16.806843996 CEST	23	34782	110.134.255.76	192.168.2.23
Jun 5, 2023 12:41:16.832010984 CEST	37100	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:41:17.525377035 CEST	34782	2323	192.168.2.23	25.130.211.215
Jun 5, 2023 12:41:17.525391102 CEST	34782	23	192.168.2.23	177.144.247.168
Jun 5, 2023 12:41:17.525445938 CEST	34782	23	192.168.2.23	126.128.162.116
Jun 5, 2023 12:41:17.525448084 CEST	34782	23	192.168.2.23	183.163.87.140
Jun 5, 2023 12:41:17.525454044 CEST	34782	23	192.168.2.23	180.170.164.166
Jun 5, 2023 12:41:17.525487900 CEST	34782	23	192.168.2.23	138.244.134.208
Jun 5, 2023 12:41:17.525522947 CEST	34782	23	192.168.2.23	57.99.12.59
Jun 5, 2023 12:41:17.525558949 CEST	34782	23	192.168.2.23	190.6.152.65
Jun 5, 2023 12:41:17.525558949 CEST	34782	23	192.168.2.23	204.240.21.138
Jun 5, 2023 12:41:17.525597095 CEST	34782	23	192.168.2.23	14.187.128.191
Jun 5, 2023 12:41:18.526738882 CEST	34782	2323	192.168.2.23	54.181.37.248
Jun 5, 2023 12:41:18.526746988 CEST	34782	23	192.168.2.23	66.95.34.20
Jun 5, 2023 12:41:18.526746988 CEST	34782	23	192.168.2.23	158.50.142.127
Jun 5, 2023 12:41:18.526797056 CEST	34782	23	192.168.2.23	139.35.35.2
Jun 5, 2023 12:41:18.526798010 CEST	34782	23	192.168.2.23	118.38.189.148
Jun 5, 2023 12:41:18.526809931 CEST	34782	23	192.168.2.23	110.134.80.102
Jun 5, 2023 12:41:18.526886940 CEST	34782	23	192.168.2.23	143.146.191.250
Jun 5, 2023 12:41:18.526886940 CEST	34782	23	192.168.2.23	167.153.99.48
Jun 5, 2023 12:41:18.526905060 CEST	34782	23	192.168.2.23	62.58.237.120
Jun 5, 2023 12:41:18.526901007 CEST	34782	23	192.168.2.23	120.246.213.145
Jun 5, 2023 12:41:19.527759075 CEST	34782	2323	192.168.2.23	165.247.198.158
Jun 5, 2023 12:41:19.527798891 CEST	34782	23	192.168.2.23	204.116.230.245
Jun 5, 2023 12:41:19.527798891 CEST	34782	23	192.168.2.23	112.146.144.115
Jun 5, 2023 12:41:19.527800083 CEST	34782	23	192.168.2.23	81.248.156.32
Jun 5, 2023 12:41:19.527803898 CEST	34782	23	192.168.2.23	206.181.185.232
Jun 5, 2023 12:41:19.527800083 CEST	34782	23	192.168.2.23	154.134.179.177
Jun 5, 2023 12:41:19.527817965 CEST	34782	23	192.168.2.23	48.229.139.28
Jun 5, 2023 12:41:19.527818918 CEST	34782	23	192.168.2.23	35.71.122.191
Jun 5, 2023 12:41:19.527818918 CEST	34782	23	192.168.2.23	188.77.217.252
Jun 5, 2023 12:41:19.527882099 CEST	34782	23	192.168.2.23	92.34.159.100
Jun 5, 2023 12:41:20.528997898 CEST	34782	2323	192.168.2.23	24.77.87.133
Jun 5, 2023 12:41:20.528997898 CEST	34782	23	192.168.2.23	189.173.40.48
Jun 5, 2023 12:41:20.529035091 CEST	34782	23	192.168.2.23	134.7.193.15
Jun 5, 2023 12:41:20.529035091 CEST	34782	23	192.168.2.23	2.175.169.51
Jun 5, 2023 12:41:20.529072046 CEST	34782	23	192.168.2.23	82.108.48.180
Jun 5, 2023 12:41:20.529072046 CEST	34782	23	192.168.2.23	154.119.114.47
Jun 5, 2023 12:41:20.529072046 CEST	34782	23	192.168.2.23	135.115.99.250
Jun 5, 2023 12:41:20.529119015 CEST	34782	23	192.168.2.23	43.214.211.21
Jun 5, 2023 12:41:20.529119015 CEST	34782	23	192.168.2.23	66.200.227.240
Jun 5, 2023 12:41:20.529119015 CEST	34782	23	192.168.2.23	222.26.30.46
Jun 5, 2023 12:41:21.530191898 CEST	34782	2323	192.168.2.23	65.112.162.170
Jun 5, 2023 12:41:21.530194044 CEST	34782	23	192.168.2.23	102.147.52.166
Jun 5, 2023 12:41:21.530193090 CEST	34782	23	192.168.2.23	209.196.43.6
Jun 5, 2023 12:41:21.530203104 CEST	34782	23	192.168.2.23	18.253.94.38
Jun 5, 2023 12:41:21.530214071 CEST	34782	23	192.168.2.23	20.110.252.55
Jun 5, 2023 12:41:21.530236959 CEST	34782	23	192.168.2.23	72.219.116.63
Jun 5, 2023 12:41:21.530236959 CEST	34782	23	192.168.2.23	67.80.246.85
Jun 5, 2023 12:41:21.530236959 CEST	34782	23	192.168.2.23	49.155.215.197
Jun 5, 2023 12:41:21.530237913 CEST	34782	23	192.168.2.23	114.86.127.58
Jun 5, 2023 12:41:21.530271053 CEST	34782	23	192.168.2.23	77.197.216.216
Jun 5, 2023 12:41:22.531291962 CEST	34782	2323	192.168.2.23	196.188.128.170
Jun 5, 2023 12:41:22.531326056 CEST	34782	23	192.168.2.23	169.242.39.114
Jun 5, 2023 12:41:22.531356096 CEST	34782	23	192.168.2.23	82.242.29.106
Jun 5, 2023 12:41:22.531395912 CEST	34782	23	192.168.2.23	130.129.224.169
Jun 5, 2023 12:41:22.531407118 CEST	34782	23	192.168.2.23	137.139.238.28
Jun 5, 2023 12:41:22.531407118 CEST	34782	23	192.168.2.23	95.75.115.206
Jun 5, 2023 12:41:22.531414986 CEST	34782	23	192.168.2.23	52.161.222.73
Jun 5, 2023 12:41:22.531455994 CEST	34782	23	192.168.2.23	216.202.235.44
Jun 5, 2023 12:41:22.531470060 CEST	34782	23	192.168.2.23	207.211.40.49
Jun 5, 2023 12:41:22.531471968 CEST	34782	23	192.168.2.23	54.199.135.138
Jun 5, 2023 12:41:23.532648087 CEST	34782	2323	192.168.2.23	125.191.228.137
Jun 5, 2023 12:41:23.532689095 CEST	34782	23	192.168.2.23	32.70.245.200
Jun 5, 2023 12:41:23.532689095 CEST	34782	23	192.168.2.23	25.112.68.121
Jun 5, 2023 12:41:23.532730103 CEST	34782	23	192.168.2.23	54.126.163.130
Jun 5, 2023 12:41:23.532733917 CEST	34782	23	192.168.2.23	182.31.31.87
Jun 5, 2023 12:41:23.532737017 CEST	34782	23	192.168.2.23	78.102.93.136
Jun 5, 2023 12:41:23.532797098 CEST	34782	23	192.168.2.23	170.237.158.176
Jun 5, 2023 12:41:23.532798052 CEST	34782	23	192.168.2.23	1.193.198.219
Jun 5, 2023 12:41:23.532843113 CEST	34782	23	192.168.2.23	101.83.31.58
Jun 5, 2023 12:41:23.532843113 CEST	34782	23	192.168.2.23	72.70.121.31
Jun 5, 2023 12:41:23.790307045 CEST	23	34782	182.31.31.87	192.168.2.23
Jun 5, 2023 12:41:24.511600971 CEST	37100	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:41:24.533967972 CEST	34782	2323	192.168.2.23	148.190.228.26
Jun 5, 2023 12:41:24.533977985 CEST	34782	23	192.168.2.23	43.175.105.242
Jun 5, 2023 12:41:24.533987045 CEST	34782	23	192.168.2.23	49.61.156.255
Jun 5, 2023 12:41:24.533987045 CEST	34782	23	192.168.2.23	47.78.144.213
Jun 5, 2023 12:41:24.534014940 CEST	34782	23	192.168.2.23	39.130.4.142
Jun 5, 2023 12:41:24.534044027 CEST	34782	23	192.168.2.23	5.192.65.146
Jun 5, 2023 12:41:24.534044027 CEST	34782	23	192.168.2.23	47.254.215.10
Jun 5, 2023 12:41:24.534086943 CEST	34782	23	192.168.2.23	100.201.253.89
Jun 5, 2023 12:41:24.534090042 CEST	34782	23	192.168.2.23	68.28.12.89
Jun 5, 2023 12:41:24.534128904 CEST	34782	23	192.168.2.23	208.42.22.72
Jun 5, 2023 12:41:25.535214901 CEST	34782	2323	192.168.2.23	150.192.140.207
Jun 5, 2023 12:41:25.535226107 CEST	34782	23	192.168.2.23	72.61.219.14
Jun 5, 2023 12:41:25.535238028 CEST	34782	23	192.168.2.23	102.166.240.3
Jun 5, 2023 12:41:25.535237074 CEST	34782	23	192.168.2.23	109.181.134.2
Jun 5, 2023 12:41:25.535237074 CEST	34782	23	192.168.2.23	9.255.106.115
Jun 5, 2023 12:41:25.535237074 CEST	34782	23	192.168.2.23	45.227.15.156
Jun 5, 2023 12:41:25.535254002 CEST	34782	23	192.168.2.23	112.29.3.124
Jun 5, 2023 12:41:25.535270929 CEST	34782	23	192.168.2.23	94.53.251.4
Jun 5, 2023 12:41:25.535274029 CEST	34782	23	192.168.2.23	202.58.22.75
Jun 5, 2023 12:41:25.535322905 CEST	34782	23	192.168.2.23	188.21.253.89
Jun 5, 2023 12:41:26.536348104 CEST	34782	2323	192.168.2.23	70.55.50.191
Jun 5, 2023 12:41:26.536366940 CEST	34782	23	192.168.2.23	67.105.120.41
Jun 5, 2023 12:41:26.536377907 CEST	34782	23	192.168.2.23	157.201.139.144
Jun 5, 2023 12:41:26.536392927 CEST	34782	23	192.168.2.23	62.134.40.133
Jun 5, 2023 12:41:26.536425114 CEST	34782	23	192.168.2.23	216.28.233.159
Jun 5, 2023 12:41:26.536469936 CEST	34782	23	192.168.2.23	42.76.31.30
Jun 5, 2023 12:41:26.536525011 CEST	34782	23	192.168.2.23	187.10.131.54
Jun 5, 2023 12:41:26.536547899 CEST	34782	23	192.168.2.23	35.159.252.52
Jun 5, 2023 12:41:26.536596060 CEST	34782	23	192.168.2.23	82.142.76.37
Jun 5, 2023 12:41:26.536619902 CEST	34782	23	192.168.2.23	221.110.97.189
Jun 5, 2023 12:41:27.537672997 CEST	34782	2323	192.168.2.23	37.28.96.128
Jun 5, 2023 12:41:27.537693024 CEST	34782	23	192.168.2.23	85.41.240.212
Jun 5, 2023 12:41:27.537714005 CEST	34782	23	192.168.2.23	38.253.24.56
Jun 5, 2023 12:41:27.537714005 CEST	34782	23	192.168.2.23	23.193.37.72
Jun 5, 2023 12:41:27.537725925 CEST	34782	23	192.168.2.23	68.59.91.243
Jun 5, 2023 12:41:27.537739038 CEST	34782	23	192.168.2.23	110.252.76.78
Jun 5, 2023 12:41:27.537755966 CEST	34782	23	192.168.2.23	145.84.247.98
Jun 5, 2023 12:41:27.537811995 CEST	34782	23	192.168.2.23	113.183.11.94
Jun 5, 2023 12:41:27.537811995 CEST	34782	23	192.168.2.23	207.160.76.40
Jun 5, 2023 12:41:27.537919998 CEST	34782	23	192.168.2.23	1.248.186.48
Jun 5, 2023 12:41:28.538914919 CEST	34782	23	192.168.2.23	78.31.228.86
Jun 5, 2023 12:41:28.538925886 CEST	34782	23	192.168.2.23	156.221.90.43
Jun 5, 2023 12:41:28.538925886 CEST	34782	23	192.168.2.23	175.122.72.81
Jun 5, 2023 12:41:28.538935900 CEST	34782	2323	192.168.2.23	93.217.63.180
Jun 5, 2023 12:41:28.538935900 CEST	34782	23	192.168.2.23	157.141.215.183
Jun 5, 2023 12:41:28.538949013 CEST	34782	23	192.168.2.23	52.103.40.161
Jun 5, 2023 12:41:28.538963079 CEST	34782	23	192.168.2.23	78.31.202.10
Jun 5, 2023 12:41:28.538973093 CEST	34782	23	192.168.2.23	213.185.69.90
Jun 5, 2023 12:41:28.538968086 CEST	34782	23	192.168.2.23	133.242.186.178
Jun 5, 2023 12:41:28.538973093 CEST	34782	23	192.168.2.23	145.253.185.135
Jun 5, 2023 12:41:29.540066004 CEST	34782	2323	192.168.2.23	150.50.151.118
Jun 5, 2023 12:41:29.540086031 CEST	34782	23	192.168.2.23	162.57.43.76
Jun 5, 2023 12:41:29.540086985 CEST	34782	23	192.168.2.23	209.159.174.237
Jun 5, 2023 12:41:29.540103912 CEST	34782	23	192.168.2.23	130.12.35.229
Jun 5, 2023 12:41:29.540179968 CEST	34782	23	192.168.2.23	86.175.190.155
Jun 5, 2023 12:41:29.540180922 CEST	34782	23	192.168.2.23	62.152.255.128
Jun 5, 2023 12:41:29.540184021 CEST	34782	23	192.168.2.23	44.113.105.22
Jun 5, 2023 12:41:29.540194988 CEST	34782	23	192.168.2.23	126.232.203.180
Jun 5, 2023 12:41:29.540191889 CEST	34782	23	192.168.2.23	206.129.154.197
Jun 5, 2023 12:41:29.540196896 CEST	34782	23	192.168.2.23	207.169.110.78
Jun 5, 2023 12:41:30.541338921 CEST	34782	2323	192.168.2.23	207.253.178.218
Jun 5, 2023 12:41:30.541338921 CEST	34782	23	192.168.2.23	130.117.214.177
Jun 5, 2023 12:41:30.541409016 CEST	34782	23	192.168.2.23	104.34.42.137
Jun 5, 2023 12:41:30.541409969 CEST	34782	23	192.168.2.23	5.144.117.214
Jun 5, 2023 12:41:30.541425943 CEST	34782	23	192.168.2.23	85.201.72.61
Jun 5, 2023 12:41:30.541420937 CEST	34782	23	192.168.2.23	92.27.148.201
Jun 5, 2023 12:41:30.541425943 CEST	34782	23	192.168.2.23	147.164.37.215
Jun 5, 2023 12:41:30.541428089 CEST	34782	23	192.168.2.23	71.127.90.101
Jun 5, 2023 12:41:30.541428089 CEST	34782	23	192.168.2.23	168.21.56.51
Jun 5, 2023 12:41:30.541449070 CEST	34782	23	192.168.2.23	134.174.88.103
Jun 5, 2023 12:41:31.542454958 CEST	34782	2323	192.168.2.23	151.136.199.51
Jun 5, 2023 12:41:31.542458057 CEST	34782	23	192.168.2.23	140.109.99.199
Jun 5, 2023 12:41:31.542462111 CEST	34782	23	192.168.2.23	143.209.59.16
Jun 5, 2023 12:41:31.542505980 CEST	34782	23	192.168.2.23	213.24.213.110
Jun 5, 2023 12:41:31.542538881 CEST	34782	23	192.168.2.23	57.37.226.42
Jun 5, 2023 12:41:31.542563915 CEST	34782	23	192.168.2.23	17.130.36.2
Jun 5, 2023 12:41:31.542562962 CEST	34782	23	192.168.2.23	44.174.255.157
Jun 5, 2023 12:41:31.542646885 CEST	34782	23	192.168.2.23	192.201.90.187
Jun 5, 2023 12:41:31.542664051 CEST	34782	23	192.168.2.23	5.151.88.106
Jun 5, 2023 12:41:31.542670012 CEST	34782	23	192.168.2.23	86.220.19.120
Jun 5, 2023 12:41:31.811232090 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:41:31.811444044 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:41:32.543169975 CEST	34782	2323	192.168.2.23	161.254.38.219
Jun 5, 2023 12:41:32.543190956 CEST	34782	23	192.168.2.23	91.246.53.241
Jun 5, 2023 12:41:32.543190956 CEST	34782	23	192.168.2.23	161.223.47.45
Jun 5, 2023 12:41:32.543224096 CEST	34782	23	192.168.2.23	157.89.156.119
Jun 5, 2023 12:41:32.543252945 CEST	34782	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:32.543287039 CEST	34782	23	192.168.2.23	113.239.117.241
Jun 5, 2023 12:41:32.543308020 CEST	34782	23	192.168.2.23	101.5.181.170
Jun 5, 2023 12:41:32.543308020 CEST	34782	23	192.168.2.23	106.140.167.16
Jun 5, 2023 12:41:32.543320894 CEST	34782	23	192.168.2.23	142.126.175.248
Jun 5, 2023 12:41:32.543355942 CEST	34782	23	192.168.2.23	149.214.135.90
Jun 5, 2023 12:41:32.596862078 CEST	23	34782	91.246.53.241	192.168.2.23
Jun 5, 2023 12:41:32.814771891 CEST	23	34782	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:32.814915895 CEST	34782	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:33.544513941 CEST	34782	2323	192.168.2.23	128.148.117.176
Jun 5, 2023 12:41:33.544513941 CEST	34782	23	192.168.2.23	187.91.67.59
Jun 5, 2023 12:41:33.544540882 CEST	34782	23	192.168.2.23	12.236.69.122
Jun 5, 2023 12:41:33.544584036 CEST	34782	23	192.168.2.23	80.197.121.135
Jun 5, 2023 12:41:33.544620037 CEST	34782	23	192.168.2.23	74.209.104.75
Jun 5, 2023 12:41:33.544620991 CEST	34782	23	192.168.2.23	123.38.25.66
Jun 5, 2023 12:41:33.544626951 CEST	34782	23	192.168.2.23	37.58.135.214
Jun 5, 2023 12:41:33.544673920 CEST	34782	23	192.168.2.23	110.87.227.57
Jun 5, 2023 12:41:33.544692993 CEST	34782	23	192.168.2.23	100.244.183.186
Jun 5, 2023 12:41:33.544743061 CEST	34782	23	192.168.2.23	188.38.191.79
Jun 5, 2023 12:41:33.544809103 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:33.819906950 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:33.820102930 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:34.171974897 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:34.172205925 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:34.172339916 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:34.446677923 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:34.446902990 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:34.447069883 CEST	34782	2323	192.168.2.23	63.214.205.205
Jun 5, 2023 12:41:34.447112083 CEST	34782	23	192.168.2.23	120.92.29.137
Jun 5, 2023 12:41:34.447112083 CEST	34782	23	192.168.2.23	31.72.48.231
Jun 5, 2023 12:41:34.447114944 CEST	34782	23	192.168.2.23	18.125.14.53
Jun 5, 2023 12:41:34.447174072 CEST	34782	23	192.168.2.23	155.224.176.175
Jun 5, 2023 12:41:34.447206020 CEST	34782	23	192.168.2.23	201.203.1.157
Jun 5, 2023 12:41:34.447200060 CEST	34782	23	192.168.2.23	137.123.147.191
Jun 5, 2023 12:41:34.447205067 CEST	34782	23	192.168.2.23	112.184.141.187
Jun 5, 2023 12:41:34.447205067 CEST	34782	23	192.168.2.23	180.72.34.176
Jun 5, 2023 12:41:34.447273016 CEST	34782	23	192.168.2.23	221.8.95.142
Jun 5, 2023 12:41:34.537982941 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:34.538310051 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:34.708319902 CEST	23	34782	112.184.141.187	192.168.2.23
Jun 5, 2023 12:41:34.829950094 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:34.830177069 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:35.104072094 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:35.104280949 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:35.104353905 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:35.478082895 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:35.478307962 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:35.840430021 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:35.840645075 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:35.840835094 CEST	34782	2323	192.168.2.23	51.208.6.155
Jun 5, 2023 12:41:35.840835094 CEST	34782	23	192.168.2.23	96.124.93.228
Jun 5, 2023 12:41:35.840871096 CEST	34782	23	192.168.2.23	200.86.85.106
Jun 5, 2023 12:41:35.840898037 CEST	34782	23	192.168.2.23	219.183.5.152
Jun 5, 2023 12:41:35.840929031 CEST	34782	23	192.168.2.23	14.111.67.198
Jun 5, 2023 12:41:35.840934038 CEST	34782	23	192.168.2.23	81.81.104.99
Jun 5, 2023 12:41:35.840934038 CEST	34782	23	192.168.2.23	186.153.73.25
Jun 5, 2023 12:41:35.840944052 CEST	34782	23	192.168.2.23	218.177.92.254
Jun 5, 2023 12:41:35.840967894 CEST	34782	23	192.168.2.23	179.49.64.253
Jun 5, 2023 12:41:35.840967894 CEST	34782	23	192.168.2.23	134.63.196.13
Jun 5, 2023 12:41:36.115406990 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:36.115637064 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:36.115781069 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:36.398639917 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:36.398818970 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:36.398987055 CEST	34782	2323	192.168.2.23	142.211.114.246
Jun 5, 2023 12:41:36.399029016 CEST	34782	23	192.168.2.23	97.39.102.186
Jun 5, 2023 12:41:36.399044037 CEST	34782	23	192.168.2.23	99.8.168.112
Jun 5, 2023 12:41:36.399063110 CEST	34782	23	192.168.2.23	176.250.234.184
Jun 5, 2023 12:41:36.399066925 CEST	34782	23	192.168.2.23	197.216.170.152
Jun 5, 2023 12:41:36.399096012 CEST	34782	23	192.168.2.23	130.33.78.160
Jun 5, 2023 12:41:36.399112940 CEST	34782	23	192.168.2.23	172.223.170.205
Jun 5, 2023 12:41:36.399113894 CEST	34782	23	192.168.2.23	220.128.102.108
Jun 5, 2023 12:41:36.399141073 CEST	34782	23	192.168.2.23	158.244.252.182
Jun 5, 2023 12:41:36.399171114 CEST	34782	23	192.168.2.23	199.73.5.252
Jun 5, 2023 12:41:36.671952009 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:36.715017080 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:36.988886118 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:36.989094973 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:36.989154100 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:37.357762098 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:37.357955933 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:37.710933924 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:37.711122036 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:37.711239100 CEST	34782	2323	192.168.2.23	157.184.88.0
Jun 5, 2023 12:41:37.711251020 CEST	34782	23	192.168.2.23	185.228.89.152
Jun 5, 2023 12:41:37.711293936 CEST	34782	23	192.168.2.23	176.167.181.183
Jun 5, 2023 12:41:37.711303949 CEST	34782	23	192.168.2.23	199.144.236.235
Jun 5, 2023 12:41:37.711322069 CEST	34782	23	192.168.2.23	5.89.234.217
Jun 5, 2023 12:41:37.711338997 CEST	34782	23	192.168.2.23	210.7.10.120
Jun 5, 2023 12:41:37.711364985 CEST	34782	23	192.168.2.23	19.233.255.174
Jun 5, 2023 12:41:37.711370945 CEST	34782	23	192.168.2.23	171.172.194.18
Jun 5, 2023 12:41:37.711394072 CEST	34782	23	192.168.2.23	207.165.244.154
Jun 5, 2023 12:41:37.711400986 CEST	34782	23	192.168.2.23	82.235.229.137
Jun 5, 2023 12:41:37.983913898 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:37.984150887 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:37.984330893 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:38.267889977 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:38.268209934 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:38.268392086 CEST	34782	2323	192.168.2.23	49.96.0.214
Jun 5, 2023 12:41:38.268476963 CEST	34782	23	192.168.2.23	51.124.146.196
Jun 5, 2023 12:41:38.268490076 CEST	34782	23	192.168.2.23	198.29.183.172
Jun 5, 2023 12:41:38.268490076 CEST	34782	23	192.168.2.23	41.58.177.211
Jun 5, 2023 12:41:38.268501043 CEST	34782	23	192.168.2.23	27.156.215.64
Jun 5, 2023 12:41:38.268579960 CEST	34782	23	192.168.2.23	167.201.49.219
Jun 5, 2023 12:41:38.268579960 CEST	34782	23	192.168.2.23	82.36.153.65
Jun 5, 2023 12:41:38.268595934 CEST	34782	23	192.168.2.23	218.59.72.230
Jun 5, 2023 12:41:38.268611908 CEST	34782	23	192.168.2.23	126.196.143.73
Jun 5, 2023 12:41:38.268649101 CEST	34782	23	192.168.2.23	179.231.146.142
Jun 5, 2023 12:41:38.541835070 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:38.582896948 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:38.856509924 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:38.856748104 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:38.856816053 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:39.228005886 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:39.228225946 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:39.580113888 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:39.580341101 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:39.580374002 CEST	34782	23	192.168.2.23	122.126.251.64
Jun 5, 2023 12:41:39.580395937 CEST	34782	2323	192.168.2.23	212.104.102.80
Jun 5, 2023 12:41:39.580395937 CEST	34782	23	192.168.2.23	185.192.174.28
Jun 5, 2023 12:41:39.580403090 CEST	34782	23	192.168.2.23	1.23.58.70
Jun 5, 2023 12:41:39.580409050 CEST	34782	23	192.168.2.23	177.254.133.50
Jun 5, 2023 12:41:39.580409050 CEST	34782	23	192.168.2.23	73.112.73.171
Jun 5, 2023 12:41:39.580446959 CEST	34782	23	192.168.2.23	157.126.140.145
Jun 5, 2023 12:41:39.580446959 CEST	34782	23	192.168.2.23	131.78.230.249
Jun 5, 2023 12:41:39.580452919 CEST	34782	23	192.168.2.23	196.92.1.80
Jun 5, 2023 12:41:39.580456972 CEST	34782	23	192.168.2.23	51.58.73.107
Jun 5, 2023 12:41:39.629844904 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:39.630089045 CEST	51522	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:39.630121946 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:39.870780945 CEST	37100	23	192.168.2.23	128.110.77.117
Jun 5, 2023 12:41:39.893723011 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:39.893938065 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:39.904851913 CEST	23	51522	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:40.201699018 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:40.201867104 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:40.201998949 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:40.202075005 CEST	34782	2323	192.168.2.23	35.252.108.218
Jun 5, 2023 12:41:40.202085972 CEST	34782	23	192.168.2.23	51.45.103.35
Jun 5, 2023 12:41:40.202104092 CEST	34782	23	192.168.2.23	18.128.199.38
Jun 5, 2023 12:41:40.202146053 CEST	34782	23	192.168.2.23	23.143.109.31
Jun 5, 2023 12:41:40.202192068 CEST	34782	23	192.168.2.23	112.187.205.209
Jun 5, 2023 12:41:40.202197075 CEST	34782	23	192.168.2.23	13.21.211.39
Jun 5, 2023 12:41:40.202199936 CEST	34782	23	192.168.2.23	171.74.38.199
Jun 5, 2023 12:41:40.202200890 CEST	34782	23	192.168.2.23	1.58.151.164
Jun 5, 2023 12:41:40.202199936 CEST	34782	23	192.168.2.23	113.79.204.236
Jun 5, 2023 12:41:40.202318907 CEST	34782	23	192.168.2.23	131.143.199.33
Jun 5, 2023 12:41:40.459372997 CEST	23	34782	112.187.205.209	192.168.2.23
Jun 5, 2023 12:41:40.465734005 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:40.465965986 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:40.558505058 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:40.558728933 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:40.857825994 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:40.858017921 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:41.119556904 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:41.119754076 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:41.119879007 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:41.477720976 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:41.477962971 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:41.819588900 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:41.819849014 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:41.819905043 CEST	34782	2323	192.168.2.23	64.50.100.122
Jun 5, 2023 12:41:41.819916964 CEST	34782	23	192.168.2.23	131.205.46.145
Jun 5, 2023 12:41:41.819924116 CEST	34782	23	192.168.2.23	138.37.166.47
Jun 5, 2023 12:41:41.819930077 CEST	34782	23	192.168.2.23	4.168.194.127
Jun 5, 2023 12:41:41.819943905 CEST	34782	23	192.168.2.23	48.200.48.186
Jun 5, 2023 12:41:41.819943905 CEST	34782	23	192.168.2.23	147.59.70.40
Jun 5, 2023 12:41:41.819943905 CEST	34782	23	192.168.2.23	35.160.37.180
Jun 5, 2023 12:41:41.819988966 CEST	34782	23	192.168.2.23	160.196.166.212
Jun 5, 2023 12:41:41.820019960 CEST	34782	23	192.168.2.23	118.116.9.180
Jun 5, 2023 12:41:41.820019960 CEST	34782	23	192.168.2.23	220.91.237.92
Jun 5, 2023 12:41:42.081773043 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:42.081945896 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:42.082072973 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:42.377737045 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:42.377948999 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:42.378122091 CEST	34782	23	192.168.2.23	159.157.177.87
Jun 5, 2023 12:41:42.378196001 CEST	34782	23	192.168.2.23	173.31.216.77
Jun 5, 2023 12:41:42.378206015 CEST	34782	23	192.168.2.23	4.255.115.108
Jun 5, 2023 12:41:42.378206968 CEST	34782	2323	192.168.2.23	190.178.165.118
Jun 5, 2023 12:41:42.378221035 CEST	34782	23	192.168.2.23	197.166.214.52
Jun 5, 2023 12:41:42.378228903 CEST	34782	23	192.168.2.23	62.41.57.3
Jun 5, 2023 12:41:42.378240108 CEST	34782	23	192.168.2.23	181.138.123.196
Jun 5, 2023 12:41:42.378274918 CEST	34782	23	192.168.2.23	2.209.175.9
Jun 5, 2023 12:41:42.378361940 CEST	34782	23	192.168.2.23	38.143.19.39
Jun 5, 2023 12:41:42.378361940 CEST	34782	23	192.168.2.23	128.45.106.161
Jun 5, 2023 12:41:42.639889956 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:42.682619095 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:42.945703030 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:42.945966005 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:42.946037054 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:43.299729109 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:43.299921036 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:43.639836073 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:43.640033007 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:43.640183926 CEST	34782	2323	192.168.2.23	59.215.22.131
Jun 5, 2023 12:41:43.640242100 CEST	34782	23	192.168.2.23	203.99.236.182
Jun 5, 2023 12:41:43.640270948 CEST	34782	23	192.168.2.23	131.54.5.210
Jun 5, 2023 12:41:43.640270948 CEST	34782	23	192.168.2.23	201.150.58.11
Jun 5, 2023 12:41:43.640305996 CEST	34782	23	192.168.2.23	202.173.202.12
Jun 5, 2023 12:41:43.640327930 CEST	34782	23	192.168.2.23	217.88.112.184
Jun 5, 2023 12:41:43.640328884 CEST	34782	23	192.168.2.23	152.228.68.192
Jun 5, 2023 12:41:43.640337944 CEST	34782	23	192.168.2.23	141.250.3.29
Jun 5, 2023 12:41:43.640362024 CEST	34782	23	192.168.2.23	89.188.89.235
Jun 5, 2023 12:41:43.640367031 CEST	34782	23	192.168.2.23	84.23.29.174
Jun 5, 2023 12:41:43.903548956 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:43.903765917 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:43.903918982 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:44.199606895 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:44.199908018 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:44.199961901 CEST	34782	23	192.168.2.23	17.121.31.24
Jun 5, 2023 12:41:44.199960947 CEST	34782	23	192.168.2.23	195.228.194.39
Jun 5, 2023 12:41:44.199969053 CEST	34782	2323	192.168.2.23	153.113.111.54
Jun 5, 2023 12:41:44.199975967 CEST	34782	23	192.168.2.23	89.196.139.208
Jun 5, 2023 12:41:44.199994087 CEST	34782	23	192.168.2.23	91.92.211.158
Jun 5, 2023 12:41:44.199994087 CEST	34782	23	192.168.2.23	188.12.236.142
Jun 5, 2023 12:41:44.199995041 CEST	34782	23	192.168.2.23	82.244.44.58
Jun 5, 2023 12:41:44.200018883 CEST	34782	23	192.168.2.23	213.23.95.239
Jun 5, 2023 12:41:44.200027943 CEST	34782	23	192.168.2.23	85.64.251.61
Jun 5, 2023 12:41:44.200047970 CEST	34782	23	192.168.2.23	116.200.215.127
Jun 5, 2023 12:41:44.465629101 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:44.506539106 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:44.771259069 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:44.771491051 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:44.771568060 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:45.130640030 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:45.130858898 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:45.461731911 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:45.461922884 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:45.462089062 CEST	34782	23	192.168.2.23	90.30.41.30
Jun 5, 2023 12:41:45.462088108 CEST	34782	2323	192.168.2.23	176.182.81.205
Jun 5, 2023 12:41:45.462126017 CEST	34782	23	192.168.2.23	35.119.55.98
Jun 5, 2023 12:41:45.462155104 CEST	34782	23	192.168.2.23	119.255.51.135
Jun 5, 2023 12:41:45.462157965 CEST	34782	23	192.168.2.23	128.183.250.228
Jun 5, 2023 12:41:45.462199926 CEST	34782	23	192.168.2.23	196.79.232.41
Jun 5, 2023 12:41:45.462210894 CEST	34782	23	192.168.2.23	106.53.135.93
Jun 5, 2023 12:41:45.462212086 CEST	34782	23	192.168.2.23	184.187.182.209
Jun 5, 2023 12:41:45.462215900 CEST	34782	23	192.168.2.23	66.77.74.50
Jun 5, 2023 12:41:45.462215900 CEST	34782	23	192.168.2.23	113.174.11.133
Jun 5, 2023 12:41:45.509758949 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:45.510099888 CEST	51524	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:45.510133982 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:45.773672104 CEST	23	51524	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:45.778893948 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:45.779203892 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:46.098829985 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:46.099073887 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:46.099275112 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:46.367116928 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:46.367326021 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:46.367356062 CEST	34782	2323	192.168.2.23	130.86.239.193
Jun 5, 2023 12:41:46.367382050 CEST	34782	23	192.168.2.23	57.76.96.235
Jun 5, 2023 12:41:46.367388010 CEST	34782	23	192.168.2.23	154.100.244.42
Jun 5, 2023 12:41:46.367393017 CEST	34782	23	192.168.2.23	12.156.7.212
Jun 5, 2023 12:41:46.367443085 CEST	34782	23	192.168.2.23	179.159.150.178
Jun 5, 2023 12:41:46.367448092 CEST	34782	23	192.168.2.23	17.40.187.180
Jun 5, 2023 12:41:46.367449045 CEST	34782	23	192.168.2.23	121.101.40.92
Jun 5, 2023 12:41:46.367451906 CEST	34782	23	192.168.2.23	64.177.255.80
Jun 5, 2023 12:41:46.367454052 CEST	34782	23	192.168.2.23	39.23.177.204
Jun 5, 2023 12:41:46.367456913 CEST	34782	23	192.168.2.23	149.213.255.49
Jun 5, 2023 12:41:46.465058088 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:46.465281010 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:46.756880045 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:46.757100105 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:47.025080919 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:47.025302887 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:47.025456905 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:47.385010958 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:47.385256052 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:47.717880964 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:47.718116045 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:47.718306065 CEST	34782	23	192.168.2.23	65.187.210.61
Jun 5, 2023 12:41:47.718302965 CEST	34782	2323	192.168.2.23	219.24.20.19
Jun 5, 2023 12:41:47.718441010 CEST	34782	23	192.168.2.23	111.87.88.89
Jun 5, 2023 12:41:47.718441963 CEST	34782	23	192.168.2.23	4.78.144.237
Jun 5, 2023 12:41:47.718447924 CEST	34782	23	192.168.2.23	86.63.102.226
Jun 5, 2023 12:41:47.718450069 CEST	34782	23	192.168.2.23	44.211.78.199
Jun 5, 2023 12:41:47.718518019 CEST	34782	23	192.168.2.23	206.232.250.45
Jun 5, 2023 12:41:47.718518972 CEST	34782	23	192.168.2.23	169.142.31.128
Jun 5, 2023 12:41:47.718521118 CEST	34782	23	192.168.2.23	49.194.55.14
Jun 5, 2023 12:41:47.718530893 CEST	34782	23	192.168.2.23	154.65.125.21
Jun 5, 2023 12:41:47.987018108 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:47.987195969 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:47.987338066 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:48.275001049 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:48.275207043 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:48.275412083 CEST	34782	23	192.168.2.23	152.68.7.219
Jun 5, 2023 12:41:48.275420904 CEST	34782	2323	192.168.2.23	160.239.210.18
Jun 5, 2023 12:41:48.275439978 CEST	34782	23	192.168.2.23	132.227.83.216
Jun 5, 2023 12:41:48.275477886 CEST	34782	23	192.168.2.23	145.243.108.115
Jun 5, 2023 12:41:48.275502920 CEST	34782	23	192.168.2.23	168.92.211.135
Jun 5, 2023 12:41:48.275505066 CEST	34782	23	192.168.2.23	105.46.197.112
Jun 5, 2023 12:41:48.275505066 CEST	34782	23	192.168.2.23	175.229.67.250
Jun 5, 2023 12:41:48.275520086 CEST	34782	23	192.168.2.23	126.154.20.190
Jun 5, 2023 12:41:48.275520086 CEST	34782	23	192.168.2.23	155.179.113.142
Jun 5, 2023 12:41:48.275549889 CEST	34782	23	192.168.2.23	137.112.222.169
Jun 5, 2023 12:41:48.543323040 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:48.586251974 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:48.855135918 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:48.855370998 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:48.855439901 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:49.214972019 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:49.215198994 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:49.575000048 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:49.588210106 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:49.588378906 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:49.588537931 CEST	34782	2323	192.168.2.23	119.136.29.19
Jun 5, 2023 12:41:49.588571072 CEST	34782	23	192.168.2.23	166.128.236.228
Jun 5, 2023 12:41:49.588607073 CEST	34782	23	192.168.2.23	191.172.82.147
Jun 5, 2023 12:41:49.588620901 CEST	34782	23	192.168.2.23	200.3.235.62
Jun 5, 2023 12:41:49.588639021 CEST	34782	23	192.168.2.23	175.192.202.244
Jun 5, 2023 12:41:49.588673115 CEST	34782	23	192.168.2.23	14.79.216.153
Jun 5, 2023 12:41:49.588701010 CEST	34782	23	192.168.2.23	218.47.81.121
Jun 5, 2023 12:41:49.588701010 CEST	34782	23	192.168.2.23	51.91.27.98
Jun 5, 2023 12:41:49.588711977 CEST	34782	23	192.168.2.23	113.223.60.171
Jun 5, 2023 12:41:49.588746071 CEST	34782	23	192.168.2.23	136.144.1.111
Jun 5, 2023 12:41:49.616053104 CEST	23	34782	51.91.27.98	192.168.2.23
Jun 5, 2023 12:41:49.759708881 CEST	23	34782	166.128.236.228	192.168.2.23
Jun 5, 2023 12:41:49.846617937 CEST	23	34782	14.79.216.153	192.168.2.23
Jun 5, 2023 12:41:49.856911898 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:49.857127905 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:49.857249975 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:50.144946098 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:50.145145893 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:50.414931059 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:50.415244102 CEST	34782	2323	192.168.2.23	150.96.139.74
Jun 5, 2023 12:41:50.415262938 CEST	34782	23	192.168.2.23	129.165.246.83
Jun 5, 2023 12:41:50.415291071 CEST	34782	23	192.168.2.23	66.140.242.174
Jun 5, 2023 12:41:50.415291071 CEST	34782	23	192.168.2.23	44.190.7.8
Jun 5, 2023 12:41:50.415321112 CEST	34782	23	192.168.2.23	105.49.81.238
Jun 5, 2023 12:41:50.415369987 CEST	34782	23	192.168.2.23	165.110.63.235
Jun 5, 2023 12:41:50.415374041 CEST	34782	23	192.168.2.23	124.48.85.168
Jun 5, 2023 12:41:50.415378094 CEST	34782	23	192.168.2.23	164.233.60.104
Jun 5, 2023 12:41:50.415380955 CEST	34782	23	192.168.2.23	182.85.38.132
Jun 5, 2023 12:41:50.415390015 CEST	34782	23	192.168.2.23	181.152.238.48
Jun 5, 2023 12:41:50.458192110 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:50.726838112 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:50.727032900 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:50.727081060 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:51.095839977 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:51.096122980 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:51.456053972 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:51.456851006 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:51.456978083 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:51.457133055 CEST	34782	2323	192.168.2.23	205.49.115.6
Jun 5, 2023 12:41:51.457176924 CEST	34782	23	192.168.2.23	149.121.223.124
Jun 5, 2023 12:41:51.457248926 CEST	34782	23	192.168.2.23	73.134.67.167
Jun 5, 2023 12:41:51.457248926 CEST	34782	23	192.168.2.23	108.45.160.88
Jun 5, 2023 12:41:51.457254887 CEST	34782	23	192.168.2.23	170.216.168.186
Jun 5, 2023 12:41:51.457269907 CEST	34782	23	192.168.2.23	88.110.54.146
Jun 5, 2023 12:41:51.457303047 CEST	34782	23	192.168.2.23	84.179.164.150
Jun 5, 2023 12:41:51.457329035 CEST	34782	23	192.168.2.23	64.50.233.185
Jun 5, 2023 12:41:51.457330942 CEST	34782	23	192.168.2.23	58.160.210.16
Jun 5, 2023 12:41:51.457379103 CEST	34782	23	192.168.2.23	140.208.206.202
Jun 5, 2023 12:41:51.509046078 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:51.509370089 CEST	51526	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:51.509459972 CEST	51528	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:51.776906967 CEST	23	51526	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:51.778970003 CEST	23	51528	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:51.779225111 CEST	51528	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:51.819200039 CEST	56999	48484	41.216.181.42	192.168.2.23
Jun 5, 2023 12:41:51.819456100 CEST	48484	56999	192.168.2.23	41.216.181.42
Jun 5, 2023 12:41:52.121045113 CEST	23	51528	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:52.121277094 CEST	51528	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:52.165033102 CEST	23	51528	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:52.165352106 CEST	51528	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:52.165427923 CEST	51530	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:52.434957981 CEST	23	51530	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:52.434982061 CEST	23	51528	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:52.435152054 CEST	51530	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:52.435265064 CEST	34782	23	192.168.2.23	25.190.251.80
Jun 5, 2023 12:41:52.435312986 CEST	34782	23	192.168.2.23	18.65.216.254
Jun 5, 2023 12:41:52.435317993 CEST	34782	2323	192.168.2.23	163.38.179.203
Jun 5, 2023 12:41:52.435317039 CEST	34782	23	192.168.2.23	205.156.46.242
Jun 5, 2023 12:41:52.435317993 CEST	34782	23	192.168.2.23	133.247.144.116
Jun 5, 2023 12:41:52.435326099 CEST	34782	23	192.168.2.23	132.162.20.191
Jun 5, 2023 12:41:52.435326099 CEST	34782	23	192.168.2.23	84.95.9.59
Jun 5, 2023 12:41:52.435348988 CEST	34782	23	192.168.2.23	102.23.157.79
Jun 5, 2023 12:41:52.435369968 CEST	34782	23	192.168.2.23	152.182.120.184
Jun 5, 2023 12:41:52.435384989 CEST	34782	23	192.168.2.23	59.95.181.228
Jun 5, 2023 12:41:52.764969110 CEST	23	51530	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:52.765202045 CEST	51530	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:52.804966927 CEST	23	51530	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:52.805341005 CEST	51530	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:52.805443048 CEST	51532	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:53.075145960 CEST	23	51530	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:53.079854965 CEST	23	51532	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:53.080038071 CEST	51532	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:53.409923077 CEST	23	51532	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:53.410120010 CEST	51532	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:53.410265923 CEST	34782	2323	192.168.2.23	144.229.159.100
Jun 5, 2023 12:41:53.410279036 CEST	34782	23	192.168.2.23	186.53.243.218
Jun 5, 2023 12:41:53.410314083 CEST	34782	23	192.168.2.23	79.162.144.130
Jun 5, 2023 12:41:53.410356045 CEST	34782	23	192.168.2.23	81.142.184.230
Jun 5, 2023 12:41:53.410404921 CEST	34782	23	192.168.2.23	195.144.135.109
Jun 5, 2023 12:41:53.410404921 CEST	34782	23	192.168.2.23	96.186.138.25
Jun 5, 2023 12:41:53.410410881 CEST	34782	23	192.168.2.23	113.108.43.125
Jun 5, 2023 12:41:53.410450935 CEST	34782	23	192.168.2.23	69.196.102.171
Jun 5, 2023 12:41:53.410490990 CEST	34782	23	192.168.2.23	14.112.148.216
Jun 5, 2023 12:41:53.410490990 CEST	34782	23	192.168.2.23	92.64.133.126
Jun 5, 2023 12:41:53.449953079 CEST	23	51532	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:53.450352907 CEST	51532	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:53.450378895 CEST	51534	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:53.549715042 CEST	23	34782	69.196.102.171	192.168.2.23
Jun 5, 2023 12:41:53.549987078 CEST	34782	23	192.168.2.23	69.196.102.171
Jun 5, 2023 12:41:53.723973989 CEST	23	51534	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:53.724035978 CEST	23	51532	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:53.724236012 CEST	51534	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:53.724391937 CEST	45522	23	192.168.2.23	69.196.102.171
Jun 5, 2023 12:41:53.861815929 CEST	23	45522	69.196.102.171	192.168.2.23
Jun 5, 2023 12:41:53.862099886 CEST	45522	23	192.168.2.23	69.196.102.171
Jun 5, 2023 12:41:54.049758911 CEST	23	51534	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:54.050000906 CEST	51534	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:54.090040922 CEST	23	51534	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:54.090403080 CEST	51534	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:54.090534925 CEST	51538	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:54.360879898 CEST	23	51538	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:54.361155033 CEST	51538	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:54.361249924 CEST	34782	2323	192.168.2.23	94.92.55.124
Jun 5, 2023 12:41:54.361344099 CEST	34782	23	192.168.2.23	202.198.31.134
Jun 5, 2023 12:41:54.361349106 CEST	34782	23	192.168.2.23	136.61.201.58
Jun 5, 2023 12:41:54.361411095 CEST	34782	23	192.168.2.23	144.42.210.145
Jun 5, 2023 12:41:54.361422062 CEST	34782	23	192.168.2.23	5.223.127.223
Jun 5, 2023 12:41:54.361433983 CEST	34782	23	192.168.2.23	75.236.101.50
Jun 5, 2023 12:41:54.361433983 CEST	34782	23	192.168.2.23	159.8.226.201
Jun 5, 2023 12:41:54.361499071 CEST	34782	23	192.168.2.23	68.4.212.22
Jun 5, 2023 12:41:54.361511946 CEST	34782	23	192.168.2.23	67.114.210.199
Jun 5, 2023 12:41:54.361516953 CEST	34782	23	192.168.2.23	199.77.159.38
Jun 5, 2023 12:41:54.365442038 CEST	23	51534	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:54.689110041 CEST	23	51538	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:54.689348936 CEST	51538	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:54.736483097 CEST	23	51538	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:54.736774921 CEST	51538	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:54.736896038 CEST	51540	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:55.004952908 CEST	23	51540	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:55.005208015 CEST	51540	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:55.006874084 CEST	23	51538	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:55.335037947 CEST	23	51540	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:55.335171938 CEST	51540	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:55.335246086 CEST	34782	2323	192.168.2.23	166.185.166.203
Jun 5, 2023 12:41:55.335258961 CEST	34782	23	192.168.2.23	132.201.213.77
Jun 5, 2023 12:41:55.335273981 CEST	34782	23	192.168.2.23	200.146.255.89
Jun 5, 2023 12:41:55.335293055 CEST	34782	23	192.168.2.23	142.188.17.165
Jun 5, 2023 12:41:55.335293055 CEST	34782	23	192.168.2.23	166.199.198.125
Jun 5, 2023 12:41:55.335293055 CEST	34782	23	192.168.2.23	88.180.56.20
Jun 5, 2023 12:41:55.335299969 CEST	34782	23	192.168.2.23	61.103.99.244
Jun 5, 2023 12:41:55.335315943 CEST	34782	23	192.168.2.23	69.33.93.221
Jun 5, 2023 12:41:55.335318089 CEST	34782	23	192.168.2.23	59.184.215.5
Jun 5, 2023 12:41:55.335340023 CEST	34782	23	192.168.2.23	50.49.147.213
Jun 5, 2023 12:41:55.375096083 CEST	23	51540	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:55.375282049 CEST	51540	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:55.375335932 CEST	51542	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:55.640897989 CEST	23	51542	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:55.641050100 CEST	51542	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:55.644927025 CEST	23	51540	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:55.975362062 CEST	23	51542	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:55.975604057 CEST	51542	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:56.016669035 CEST	23	51542	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:56.017047882 CEST	51542	23	192.168.2.23	181.16.93.98
Jun 5, 2023 12:41:56.282746077 CEST	23	51542	181.16.93.98	192.168.2.23
Jun 5, 2023 12:41:57.018327951 CEST	34782	2323	192.168.2.23	8.82.7.230
Jun 5, 2023 12:41:57.018415928 CEST	34782	23	192.168.2.23	25.7.74.10
Jun 5, 2023 12:41:57.018414974 CEST	34782	23	192.168.2.23	131.122.56.187
Jun 5, 2023 12:41:57.018429995 CEST	34782	23	192.168.2.23	2.189.105.216
Jun 5, 2023 12:41:57.018428087 CEST	34782	23	192.168.2.23	132.21.23.25
Jun 5, 2023 12:41:57.018474102 CEST	34782	23	192.168.2.23	212.99.171.55
Jun 5, 2023 12:41:57.018486977 CEST	34782	23	192.168.2.23	167.228.245.235
Jun 5, 2023 12:41:57.018497944 CEST	34782	23	192.168.2.23	150.231.72.146
Jun 5, 2023 12:41:57.018508911 CEST	34782	23	192.168.2.23	9.217.144.3
Jun 5, 2023 12:41:57.018537045 CEST	34782	23	192.168.2.23	120.159.156.53
Jun 5, 2023 12:41:58.019731045 CEST	34782	2323	192.168.2.23	64.149.113.94
Jun 5, 2023 12:41:58.019757032 CEST	34782	23	192.168.2.23	177.25.91.65
Jun 5, 2023 12:41:58.019800901 CEST	34782	23	192.168.2.23	60.198.179.157
Jun 5, 2023 12:41:58.019861937 CEST	34782	23	192.168.2.23	175.51.124.10
Jun 5, 2023 12:41:58.019890070 CEST	34782	23	192.168.2.23	25.160.112.102
Jun 5, 2023 12:41:58.019877911 CEST	34782	23	192.168.2.23	205.196.52.253
Jun 5, 2023 12:41:58.019922972 CEST	34782	23	192.168.2.23	193.124.159.119
Jun 5, 2023 12:41:58.019877911 CEST	34782	23	192.168.2.23	221.176.156.101
Jun 5, 2023 12:41:58.019996881 CEST	34782	23	192.168.2.23	182.78.208.45
Jun 5, 2023 12:41:58.020023108 CEST	34782	23	192.168.2.23	152.128.175.147

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 5, 2023 12:39:54.262216091 CEST	35585	53	192.168.2.23	8.8.8.8
Jun 5, 2023 12:39:54.376457930 CEST	53	35585	8.8.8.8	192.168.2.23

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jun 5, 2023 12:39:57.307768106 CEST	92.229.234.137	192.168.2.23	2d8e	(Unknown)	Destination Unreachable
Jun 5, 2023 12:40:35.484564066 CEST	66.190.156.117	192.168.2.23	9f00	(Unknown)	Destination Unreachable
Jun 5, 2023 12:40:46.512156963 CEST	45.157.32.169	192.168.2.23	e13	(Unknown)	Destination Unreachable
Jun 5, 2023 12:40:48.511743069 CEST	84.163.59.177	192.168.2.23	e4a8	(Unknown)	Destination Unreachable
Jun 5, 2023 12:40:51.659312010 CEST	68.205.48.87	192.168.2.23	34f1	(Unknown)	Destination Unreachable
Jun 5, 2023 12:40:52.797466040 CEST	210.176.44.26	192.168.2.23	d0b6	(Host unreachable)	Destination Unreachable
Jun 5, 2023 12:40:53.515249014 CEST	89.217.27.223	192.168.2.23	ff44	(Unknown)	Destination Unreachable
Jun 5, 2023 12:40:59.599452019 CEST	72.18.48.110	192.168.2.23	6ee7	(Host unreachable)	Destination Unreachable
Jun 5, 2023 12:41:21.643906116 CEST	67.80.246.85	192.168.2.23	3b57	(Unknown)	Destination Unreachable
Jun 5, 2023 12:41:22.633528948 CEST	199.109.12.26	192.168.2.23	2f82	(Time to live exceeded in transit)	Time Exceeded
Jun 5, 2023 12:41:26.708137989 CEST	216.202.235.43	192.168.2.23	83d0	(Host unreachable)	Destination Unreachable
Jun 5, 2023 12:41:28.565196991 CEST	213.185.69.90	192.168.2.23	59e9	(Unknown)	Destination Unreachable
Jun 5, 2023 12:41:42.505347013 CEST	173.31.216.77	192.168.2.23	453a	(Unknown)	Destination Unreachable
Jun 5, 2023 12:41:43.861432076 CEST	201.150.56.1	192.168.2.23	6968	(Time to live exceeded in transit)	Time Exceeded
Jun 5, 2023 12:41:54.573996067 CEST	85.39.56.131	192.168.2.23	ce35	(Time to live exceeded in transit)	Time Exceeded

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 5, 2023 12:39:54.262216091 CEST	192.168.2.23	8.8.8.8	0x2025	Standard query (0)	helanhaiya.999apk.top	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jun 5, 2023 12:39:54.376457930 CEST	8.8.8.8	192.168.2.23	0x2025	No error (0)	helanhaiya.999apk.top		41.216.181.42	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: skid.x86.elf PID: 6220, Parent PID: 6120

General

Start time:	12:39:52
Start date:	05/06/2023
Path:	/tmp/skid.x86.elf
Arguments:	/tmp/skid.x86.elf
File size:	59024 bytes
MD5 hash:	55d4a13cf99c261de7ce8d36af10b30f

Chronological Activities

Analysis Process: skid.x86.elf PID: 6221, Parent PID: 6220

General

Start time:	12:39:52
Start date:	05/06/2023
Path:	/tmp/skid.x86.elf
Arguments:	n/a
File size:	59024 bytes
MD5 hash:	55d4a13cf99c261de7ce8d36af10b30f

Chronological Activities

Analysis Process: sh PID: 6221, Parent PID: 6220

General

Start time:	12:39:52
Start date:	05/06/2023
Path:	/bin/sh
Arguments:	sh -c "rm -rf bin/systemd && mkdir bin; >bin/systemd && mv /tmp/skid.x86.elf bin/systemd; chmod 777 bin/systemd"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 6222, Parent PID: 6221

General

Start time:	12:39:52
Start date:	05/06/2023
Path:	/bin/sh
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6222, Parent PID: 6221

General

Start time:	12:39:52
Start date:	05/06/2023
Path:	/usr/bin/rm
Arguments:	rm -rf bin/systemd
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: sh PID: 6223, Parent PID: 6221

General

Start time:	12:39:52
Start date:	05/06/2023
Path:	/bin/sh
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: mkdir PID: 6223, Parent PID: 6221

General

Start time:	12:39:52
Start date:	05/06/2023
Path:	/usr/bin/mkdir
Arguments:	mkdir bin
File size:	88408 bytes
MD5 hash:	088c9d1df5a28ed16c726eca15964cb7

Chronological Activities

Analysis Process: sh PID: 6224, Parent PID: 6221

General

Start time:	12:39:53
Start date:	05/06/2023
Path:	/bin/sh
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: mv PID: 6224, Parent PID: 6221

General

Start time:	12:39:53
Start date:	05/06/2023
Path:	/usr/bin/mv
Arguments:	mv /tmp/skid.x86.elf bin/systemd
File size:	149888 bytes
MD5 hash:	504f0590fa482d4da070a702260e3716

Chronological Activities

Analysis Process: sh PID: 6225, Parent PID: 6221

General

Start time:	12:39:53
Start date:	05/06/2023
Path:	/bin/sh
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: chmod PID: 6225, Parent PID: 6221

General

Start time:	12:39:53
Start date:	05/06/2023
Path:	/usr/bin/chmod
Arguments:	chmod 777 bin/systemd
File size:	63864 bytes
MD5 hash:	739483b900c045ae1374d6f53a86a279

Chronological Activities

Analysis Process: skid.x86.elf PID: 6226, Parent PID: 6220

General

Start time:	12:39:53
Start date:	05/06/2023
Path:	/tmp/skid.x86.elf
Arguments:	n/a
File size:	59024 bytes
MD5 hash:	55d4a13cf99c261de7ce8d36af10b30f

Chronological Activities

Analysis Process: skid.x86.elf PID: 6227, Parent PID: 6226

General

Start time:	12:39:53
Start date:	05/06/2023
Path:	/tmp/skid.x86.elf
Arguments:	n/a
File size:	59024 bytes
MD5 hash:	55d4a13cf99c261de7ce8d36af10b30f

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report skid.x86.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: skid.x86.elf PID: 6220, Parent PID: 6120

General

Chronological Activities

Analysis Process: skid.x86.elf PID: 6221, Parent PID: 6220

General

Chronological Activities

Analysis Process: sh PID: 6221, Parent PID: 6220

General

Chronological Activities

Analysis Process: sh PID: 6222, Parent PID: 6221

General

Chronological Activities

Analysis Process: rm PID: 6222, Parent PID: 6221

General

Chronological Activities

Analysis Process: sh PID: 6223, Parent PID: 6221

General

Linux Analysis Report
skid.x86.elf